NewsPublished 29 Oct 2026

Threat Intel in Right Click

Source Reddit ThreatIntel

Discussion

4NTL is a browser extension for Chromium-based browsers that enables quick threat intelligence lookups from the right-click menu. It allows users to check IPs, domains, URLs, or file hashes against VirusTotal and AbuseIPDB without leaving the current page. The extension is designed to improve analyst efficiency by reducing the need to copy and paste indicators into separate tabs. It respects user privacy by only querying VirusTotal and AbuseIPDB, never submitting new samples, and keeping API keys local to the browser profile. No active exploitation or vulnerabilities are reported in the extension itself.

r/threatintel (opens in a new tab)u/BOoDe_0 points0 comments

Tired from copy past an IP or URL to check it against VirusTotale or abuse, eassy check this browser extension.

https://github.com/boode-hub/4NTL

I you like it consider a star :D..

Links cited in the discussion

https://github.com/boode-hub/4NTL

Impact

There is no reported security vulnerability or exploitation associated with 4NTL. The extension is a tool to facilitate threat intelligence lookups and does not introduce known risks or attacks. It operates with privacy safeguards and does not transmit user data beyond querying established threat intelligence services.

Defensive guidance

No mitigation is required as there is no known vulnerability or threat associated with 4NTL. Users should ensure they obtain the extension from trusted sources and maintain updated API keys for VirusTotal and AbuseIPDB. Standard browser security practices apply.

Summary

4NTL is a browser extension that integrates threat intelligence lookups directly into the right-click context menu for Chromium browsers (Chrome, Edge, Brave). It queries VirusTotal and AbuseIPDB for verdicts on selected indicators such as IP addresses, domains, URLs, and file hashes, displaying results in a small card next to the selection. The extension supports unwrapping protected or redirected links, caching results to save API quota, and operates with privacy-focused design by limiting external communication to only VirusTotal and AbuseIPDB. It requires user-provided API keys and does not send new data for analysis. The project is open source and actively maintained with testing and CI pipelines. There is no indication of security vulnerabilities or active threats associated with this extension.

References

Community reviews

Loading reviews…

Discussion

Links cited in the discussion

AI analysisMachine-generated, updated 29 Oct 2026, 02:42 UTC

Technical details

References

Community reviews

Related threats