Threat Intel is now ThreatDNS
Our free lookup tool has its own home at threatdns.com. Same sources, same AI analyst, same DNSAFE sign-in and daily limits.
- NEWShareable report links, like threatdns.com/domain/example.com (email checks are never put in links)
- NEWEvery report shows whether DNSAFE blocks the domain
- NEWClick any IP, nameserver or mail server in a report to check it next, and copy a plain-text summary for tickets or chat
- NEWPaste a whole log line or a defanged link and ThreatDNS pulls out what to check; press / to search, or add the “Check on ThreatDNS” bookmarklet
- IMPROVEDEmail checks separate “this address leaked in a breach” from “this domain is dangerous”, so a breached address is never called suspicious
- IMPROVEDOld intel.dnsafe.net links take you to the same check on ThreatDNS