Investigate IOCs quickly with DNS, PTR, and HTTP/TLS probes plus direct pivots to public threat intelligence services. Designed for SOC triage and practical OSINT workflows.
Pivot the indicator to public reputation, WHOIS and infrastructure services.
// built-in probes work without API keys · VirusTotal enrichment depends on server configuration
During incident triage, analysts often jump between many tabs and services. A hub centralizes IOC handling so you pivot faster between DNS, HTTP/TLS checks, and reputation sources - reducing context switching during threat intelligence and security investigations.
Enter an IOC (IP, domain, URL, or hash) - the type is detected automatically.
Run the built-in probes and inspect the technical output (DNS, PTR, HTTP/TLS).
Pivot to external intelligence services for deeper context.
No. Built-in DNS resolution, reverse DNS (PTR), and HTTP/TLS probing on this server work without you supplying keys. Optional VirusTotal enrichment only applies when the server is configured with VIRUSTOTAL_API_KEY.
They open public services such as VirusTotal, AbuseIPDB, or WHOIS in a new context so you can pivot quickly from the same IOC.
It shows response headers, redirects, and TLS certificate fingerprints to help you reason about the endpoint without replacing a full scanner.
Only use these capabilities on systems and indicators you are authorized to investigate. Unauthorized probing may violate law or policy.
