Follow the
footprints.
Paste an IP, domain or file hash. DigiAsh asks nine threat-intelligence sources at once and gives you one risk score, the infrastructure behind it, and every raw verdict.
Free to use with your own API keys. No card, no pooled keys.
Illustrative example using a documentation IP — not a live scan.
- VirusTotal
- AbuseIPDB
- IPQualityScore
- AlienVault OTX
- urlscan.io
- PulseDive
- LeakIX
- abuse.ch
- Hybrid Analysis
From indicator to verdict in three steps
No tab-juggling between nine consoles in the middle of an investigation.
Add your keys
Paste the free API keys you already have. They're encrypted per account and never shown again.
Search anything
IPs, domains, and MD5, SHA-1 or SHA-256 hashes. DigiAsh detects the type for you.
Read one report
A single 0–100 score up top, the key signals underneath, and every source's detail one click away.
Built for the questions analysts actually ask
Every number links back to the source that produced it.
A score that keeps real hits visible
Evidence from every source is combined, not averaged: agreement raises the score, sources with nothing on record never dilute a real hit, and every score comes with a confidence level and a breakdown.
What's exposed, not just what's flagged
LeakIX shows open services, software versions and exposed data on the host, with severity and evidence for each leak.
Infrastructure context
Resolved IP, ASN and country, RDAP ownership, historical DNS and co-hosted domains.
Live page verdict
urlscan.io's verdict on the live page, including brands a phishing page imitates.
Threat actor links
OTX pulses, malware families and MITRE ATT&CK techniques tied to the indicator.
Your keys. Your searches.
DigiAsh never shares a pooled key between users. New to API keys? The how-to guide walks through getting each one for free.