About
We got tired of fourteen browser tabs.
Muswa.com exists because answering one simple question about a suspicious IP, domain or wallet used to take a dozen tools, three accounts and half an hour. We put it in one place, made it fast, and kept it quiet.
01Why we exist
Built from the abuse inbox outward.
0
recon modules
0+
checks per domain
0
dashboard
Every abuse report starts the same way. An address in a log, a link in a phishing email, a wallet in a ransom note. Before anyone can act, someone has to answer the basics: who runs this, where is it, what else lives next to it, and is it already known to be bad.
The answers exist, but they are scattered across registries, blocklists, certificate logs, routing tables and a long list of specialist services, each with its own login, its own format and its own limits. Analysts become copy-paste machines. Cases stall. Phishing pages stay online for another day.
"Their data, plus ours, in one query. That is the whole idea."
So we built the tool we wanted. Muswa.com pulls those sources together and adds something none of them have on their own: our own internet-wide scanning, which links domains to the servers that really host them, even when they hide behind a CDN. One query returns one ranked page, most important findings first.
We are a small, independent team. We have no advertisers, no data brokers and no investors asking us to monetise what you look up. The only thing we sell is access to the platform, and that keeps our incentives where they should be.
02Values
Three rules we do not bend.
Every product decision gets checked against these three. When they conflict, they win over features.
Accuracy
01A wrong answer is worse than no answer.
Every block is computed from data we can stand behind, timestamped, and labelled with how sure we are. When sources disagree we show the disagreement instead of picking a side.
Discretion
02What you investigate is nobody else's business.
Targets are never notified, your lookups are never sold or shared, and we never reveal who asked. We keep the minimum about you, and you can delete it.
Speed
03Phishing kits do not wait for your ticket queue.
Checks run in parallel and stream onto the page as they finish, most important first. You read the verdict while the long tail is still loading.
03Who we work for
People who chase bad infrastructure.
- 01
Abuse desks
Hosting providers and registrars triaging complaints: who owns this IP, is the report credible, where do we forward it.
- 02
Security researchers
Malware and phishing hunters mapping infrastructure, pivoting from one indicator to the next without losing the thread.
- 03
SOC & IT teams
Enriching alerts with network context, checking whether an address or domain belongs on the blocklist.
- 04
Investigators
Fraud and compliance teams screening crypto wallets and tracing the infrastructure behind a scam.
- 05
Public agencies
CERTs and law enforcement working cases where the hosting trail matters, with vetted access.
04Why they trust us
Trust is a list of things we refuse to do.
Promises are cheap. These are commitments built into how the platform works, written into our policies, and open to anyone who wants to test them through our bug bounty.
We do
- Rank findings by how much they matter
- Timestamp every result
- Protect accounts with long passwords, captcha and email-confirmed changes
- Answer legal requests through a documented process
- Reward people who find our bugs
We never
- Sell or share what you look up
- Notify the targets you investigate
- Run advertising or tracking cookies
- Reveal which sources produced a result
- Help anyone stalk, harass or attack