Threat Intelligence IoC Extractor & Defanger

Extract, deduplicate, and classify IPs, Domains, URLs, Hashes, and CVEs with one-click defanging and STIX 2.1 export.

Ingest unstructured threat intelligence reports, malware analysis notes, or raw logs. Automatically extracts and deduplicates IPv4 addresses, domains, URLs, MD5/SHA-256 hashes, CVEs, and email addresses. Features one-click defanging (`hxxps://`, `example[.]com`) and STIX 2.1 JSON bundle export.

Features

• Automated IoC extraction from unstructured text
• One-click Defang / Refang toggle for safe sharing
• Categorized breakdown (IPs, Domains, Hashes, CVEs)
• STIX 2.1 JSON intelligence bundle export

More AI tools

• Schema Starter — Organization, WebSite, Service, and Breadcrumb JSON-LD starter markup generator.
• FAQ Generator — Answer-first FAQ copy matched to page topic and visible content.
• Answer Snippet — Concise extractable answer blocks for AI Overviews and answer engines.
• GEO Readiness Checklist — Prioritized review of content, proof, schema, and conversion clarity.
• Technical SEO Check — Indexability, canonical, metadata, headings, and semantic HTML review.
• Crawler Access Map — Robots.txt, sitemap, AI crawler access, and key page availability.
• Entity Profile Builder — Consistent brand, service, location, proof, and third-party trust signals.
• Internal Link Planner — Anchor text and hub-to-spoke links that help humans and crawlers connect topics.