ThreatCheck

Select any IOC on any web page to look it up across 29 threat intel platforms. Bulk extraction. API enrichment.

ThreatCheck allows security analysts and IT professionals to instantly look up any Indicator of Compromise (IOC) directly from their browser. Simply select any IP address, domain, URL, file hash, email, or CVE on any web page, and ThreatCheck shows a popup with one-click lookups across 29 threat intelligence platforms including VirusTotal, AbuseIPDB and many more. Key benefits: No more copy-pasting IOCs between tabs. Select text, get results instantly. Bulk extraction: highlight an entire paragraph from a threat report and all IOCs are automatically detected, refanged, and deduplicated. Optional API integration with Multiple Threat Intelligence services for inline enrichment results without leaving the page. Handles defanged indicators (hxxps://, [.]com, [at]) automatically. Copy defanged versions of IOCs for safe sharing in reports and tickets. No data collection, no telemetry, no ads. All API calls go directly from the browser to the services.