#Interactsh
ProjectDiscovery OAST canary. Attackers use it to confirm blind XSS, SSRF, RCE.
IOCs by window
0
IOCs tagged #Interactsh
0
IOCs tagged #Interactsh
0
IOCs tagged #Interactsh
17
IOCs tagged #Interactsh
Counts as of 2026-10-29. Regenerated daily.
About #Interactsh
- Type: OAST (out-of-band application security testing) canary from ProjectDiscovery.
- How it works: Issues unique callback URLs. Records DNS, HTTP and SMTP requests.
- Why tagged: Researchers tag URLs and IPs when they see attackers use it, typically against web apps.
- Domains:
oast.live,oast.fun,oast.me,oast.online,oast.pro,oast.site. - Self-hosted: May use custom domains.
- Defense: Defenders can block the ProjectDiscovery zones in egress filters if not legitimately used.
- References: projectdiscovery/interactsh on GitHub.
Recent IOCs tagged #Interactsh
No IOCs tagged #Interactsh in the past 30 days. Year total: 17. Older data: api.tweetfeed.live/v1/year (all tags, filter for #Interactsh).
Related tags
Frequently asked questions
What is Interactsh?
An OAST (out-of-band application security testing) canary tool from ProjectDiscovery. It issues callback URLs that record DNS, HTTP and SMTP requests.
Why are interactsh URLs in a malicious-IOC feed?
The tool is dual-use. Researchers tag a URL when they see attackers or commodity exploit tools use it on a real target, so it is a detection signal, not malicious in itself.
How is this list updated?
The feed and the API update every 15 minutes from researcher posts on X. This page refreshes once a day.
What is the license? Can I use this commercially?
Yes. All IOC data, including this Interactsh subset, is CC0 1.0 Universal. No attribution needed. No warranty. The website code and branding are not CC0.
License
Interactsh IOC data: CC0 1.0 Public Domain. No attribution required, no warranty.