NDR Hosts

A threat-intelligence wiki for the destinations you meet during security monitoring.

Analysts collaboratively record what the URLs, domains, and IPs seen in Darktrace (NDR) and similar tools actually are. Meet an unfamiliar destination, and the next analyst gets the answer with a single search.

FEATURES
- Anyone can add or edit, no sign-up required (wiki style)
- Entries sync to every device in real time
- Classify by risk, confidence, category, and tags
- Search by domain, IP, or tag; filter by risk level
- Paste an address straight from your console and search it
- Save entries to a device-local list and revisit what you viewed
- Light and dark themes; English and Korean

SAFE BY DESIGN
- Every address is shown defanged (hxxps://, evil[.]com) and never opens as a live link.
- Copies stay defanged, so pasting into a ticket cannot produce a clickable link.
- Search understands defanged input, so you can paste exactly what you see.

TRUST AND REVIEW
- Report an incorrect entry; repeated reports automatically flag it as "under review".
- Flagged entries are marked in the list, not just on the detail screen.
- Every change is kept in the edit history under an anonymous ID.

Note: Information is contributed by users and is for reference only. Do not enter personal or confidential data.