Enter a target
Accepted input: Domain, IP address, URL.
fleet module · premium
VirusTotal OSINT search
Adds VirusTotal reputation and relationship data to infrastructure findings. Results land in a Command One case with their source and confidence, alongside the rest of your investigation. Part of Reverse IP lookup · all tools.
public sources only · free registration
how it works
From domain to evidence
Run the module
The job is sent to a live worker. If no worker can run it, you are not charged.
Review results
Detection counts, DNS resolutions and related domains.
Verify and export
Link findings in CommandDeck, add notes and export a PDF or CSV case report.
related modules
Pair VirusTotal with
Combining modules gives independent sources that confirm or rule out a lead.
naabu
Authorised port discovery against public IP addresses.
asnmap
Maps an address or organisation to its autonomous system.
Shodan
Reads Shodan's index of internet-exposed services for an address.
questions
VirusTotal questions
What does VirusTotal find?
Detection counts, DNS resolutions and related domains.
What do I need to start a VirusTotal search?
Domain, IP address, URL. Command One only runs a module against targets it accepts.
What are the limits of VirusTotal?
Detections are vendor opinions, not a final safety verdict.
How much does VirusTotal cost?
Registration is free. This premium module draws on purchased credits. Current costs are listed on the credits page, and you are only charged when the module can actually run.
Try VirusTotal in a case
Create a free account to run available modules. For lawful research and authorised assessments only.