IP & Domain Enrichment - Threat Intelligence Command Center

About

Right-click any IPv4/IPv6 address or domain on a webpage to instantly enrich it with threat intelligence from multiple reputable sources. Results are displayed in a clean, collapsible report view with visual alerts for threats and flexible export options.
🔑 API Keys Required
This extension requires API keys from the supported providers. Most offer free tiers with generous limits. You don't need all keys to get started—configure only the ones you have and add more over time.
🔍 Supported Intelligence Sources

VirusTotal – Malware analysis and URL/IP reputation
AbuseIPDB – IP abuse reports and confidence scoring
AlienVault OTX – Open threat intelligence pulses
Shodan – Internet-connected device intelligence
IPQualityScore – Fraud and risk scoring
Abuse.ch – ThreatFox & URLhaus malware indicators
URLScan.io – Website scanning and screenshot capture
WHOIS (RDAP) – Domain/IP registration details

✨ Features

One-click enrichment via right-click context menu
Collapsible report sections with "Expand/Collapse All"
Visual threat alerts highlighting risky indicators
Export reports as TXT or XML
Send reports to a custom endpoint
API keys stored securely on your local device

🔒 Privacy & Security

User-initiated only – The extension activates only when you right-click and select an indicator
No background tracking – Does not collect or store browsing history or page content
Transparent data flow – Selected IPs/domains are sent only to the provider APIs you've configured
Local storage – All API keys remain on your device and are never transmitted externally