IOC Recon - Context Menu Search

Right-click selected text to search it across multiple sources at once. Smart-keyword lookups for analysts and power users.

IOC Recon adds a right-click "Lookup" menu that searches your selected text across many sources at once, saving you from copy-pasting indicators into one tab at a time. Highlight an IP, domain, URL, hash, email, or other relevant text, right-click, and either open a single source or fire "Search all matching sources" to open every relevant one in the background. Features: - Configure unlimited sources with a URL template and a %s placeholder (GET or POST). - Smart indicator detection (IPv4, IPv6, domain, URL, email, MD5, SHA1, SHA256, CVE). - Automatic refang of defanged indicators (hxxp, [.], [at]) before searching, plus copy-refanged and copy-defanged actions. - Advanced per-source rules: a regex match pattern to configure when a source appears, and regex transforms to rewrite the selection before it is inserted (for example turning a MITRE sub-technique T1543.003 into the correct T1543/003 URL). - Group sources into categories, reorder them, and open results in the background. - Import and export your configuration as JSON, or sync a shared source list across your team from a remote URL. Built for security analysts, threat intel, and power users. No account required. Collects no data.