46 live sources · free account

Investigate anything.One search,every source.

Paste a domain, IP, email, username, wallet, phone number or file hash. phoonica checks it against dozens of public sources, explains what it found, and keeps your work in a case you can export.

How it works

From a suspicious link to a finished report

Paste anything. You get signals, sources and suggested next steps in seconds. Then add what matters, link it together, and export a report when you are done.

01

Create a free account

Sign up with your email and confirm it. It takes under a minute.

02

Search

Paste anything. You get signals, sources and suggested next steps in seconds.

03

Build the case

Add what matters, link it together, and export a report when you are done.

What you get

Everything for a quick check or a full investigation

The same workspace from your first search to the finished report.

Features
Research

One search box

It detects what you pasted, runs every matching source at once and gives a plain-language briefing with a risk score and how confident it is.

  • Detects the target typeAutomatic
  • Runs the matching sourcesAt once
  • BriefingPlain language
Research

Follows the trail

Found an IP behind a domain? It automatically checks the related hosts, networks and look-alike sites, and shows how the findings connect.

Cases

Cases and evidence

Save indicators, notes, files and a checklist in a case. Add a timeline and a world map, then export a report as HTML, Markdown, CSV, JSON or STIX.

  • Report formatsHTML · Markdown · CSV · JSON · STIX
  • Read-only share linkIncluded
Analysis

Graph, timeline, map

See how indicators link, what happened and when, and where infrastructure and accounts sit.

Assistant

AI assistant

Ask questions about your case, or tell it to run lookups, add indicators and build your timeline.

Tools

Bulk and extraction

Check a whole list at once, or paste a log or email and pull out every domain, IP, URL, hash and wallet.

Tools

Toolbox

Decoders, JWT and hash tools, email header analysis, timestamp and network calculators, plus a directory of about 190 outside resources.

Monitoring

Watchlist

Watch a target and record what changes between checks. Your cases follow your account, so you can start on your laptop and continue on your phone.

Coverage

Works on the things people actually need to look into

Paste any of these into the search box.

DoDomains and websitesexample.com
IPIP addresses8.8.8.8
@Email addressesname@example.com
UsUsernamesWhere a name exists online
WaCrypto walletsWallet address
PhPhone numbers+1 415 555 2671
#File hashesMD5, SHA-1 or SHA-256
CVCVEsCVE-2021-44228
ASASNsAS15169
TgTelegram and Discord@name or t.me link
BkBank accountsIBAN
ImImagesPhotos and screenshots