SCW INTEL
ThreatLens
IOC Investigation Accelerator
Paste any indicator — IP, hash, domain, URL, or email — and instantly get targeted lookup links across 26 threat intelligence platforms. ThreatLens identifies the IOC type and routes you to the right tool with context on what to look for.
How it works: ThreatLens doesn't query databases — it identifies your IOC type and generates direct investigation links to VirusTotal, Shodan, AbuseIPDB, and 23 more platforms. You click, they analyze.
1
Paste your IOCsRaw indicators from alerts, reports, or tickets — bulk paste supported
2
Auto-classifyEngine detects IPv4, IPv6, MD5, SHA1, SHA256, domains, URLs, and emails
3
Investigate everywhereGet platform-specific links with descriptions of what each source checks
SCAN Paste Indicators
SOURCES Threat Intel Platforms
🦠
VirusTotal
ip, domain, hash, url
🚫
AbuseIPDB
ip
🔍
Shodan
ip
📡
GreyNoise
ip
🌐
IPVoid
ip
🔎
Censys
ip
📸
URLScan
domain, url
🛤️
SecurityTrails
domain
🗺️
DNSDumpster
domain
📋
Whois
domain, ip
🧬
MalwareBazaar
hash
🔬
Hybrid Analysis
hash
👽
AlienVault OTX
ip, domain, hash, url
🦊
ThreatFox
ip, domain, hash
🛡️
Google Safe Browsing
url, domain
🎣
PhishTank
url
💀
Have I Been Pwned
email
📧
EmailRep
email
🕵️
Intelligence X
email
🎯
Hunter.io
email
🔓
Dehashed
email
👤
Holehe (OSINT)
email
🔍
Google (Dork)
email
💓
Pulsedive
ip, domain, url
🏠
URLhaus
url, domain
🔬
InQuest
hash, domain, ip
Save hours per investigation.
Instead of opening 10 tabs and manually pasting each IOC — paste once, get all your investigation links in one view. Built for SOC analysts, IR teams, and threat hunters.