Help

Paste one indicator into the search field and ShadowPulse works out its type. A lookup never uploads a file or opens the URL you submit.

What you can look up

Which sources cover each type is on the Sources page.

Start with the verdict. It is calculated from the sources by fixed rules, never by AI. The rules are listed on the Sources page.
Open the sources. Each row shows a headline and expands to its evidence. Sources answer different questions, so no detections from one does not cancel abuse reports from another.
Treat the summary as a draft. It is written by AI from a reduced set of the evidence. Check it against the sources before acting.
Community reports are unverified. They are submitted by users, so they stay under More until you open them.

A source shows "Unavailable": The other sources still load. Use refresh to try again. An unavailable source is not a clean result.
"Request limit reached": Wait up to a minute, then retry. Refreshing repeatedly uses the allowance faster.
The indicator is rejected: Submit one value on its own: an IPv4 or IPv6 address, a domain, an http or https URL, or a hash of 32, 40 or 64 characters.
The summary could not be generated: The verdict and the sources are unaffected. Select Regenerate to try again.
Results look out of date: Evidence and summaries can be reused for up to five minutes in the same tab. Refresh fetches them again.
The map does not load: Map tiles come from a third party and load only when you open Map. The location is still shown as text.

Evidence sources: The indicator you submit is sent to the sources that cover its type. You don't need an account with any of them.
AI summary: To draft the summary, the indicator and a reduced set of the evidence, such as detection counts, tags and open ports, are sent to Google Gemini. Raw content such as WHOIS records and community reports is not sent.
History: Your lookups and saved items stay in this browser and are not sent to ShadowPulse.