API keys are stored in this browser only. They are sent only to
VirusTotal/AbuseIPDB when you click a lookup button.
Used for URL, domain, IP, and file hash lookups
Used for IP address reputation lookups
Unchecked, the keys stay in memory only and are gone when you
close the tab — nothing is written to this browser's storage.
Required for GitHub Pages deployments. See
cors-worker.js
for setup.
One per line or comma-separated, as many as you need. Lookalikes of
these (yourc0mpany.com, yourcompany-payroll.com, yourcompany.co) are
then flagged like a brand impersonation. Leave empty to turn it off.
Stored in this browser only.
#9fef00
Changes the green accent only. Applied instantly and saved in this browser.