threatYeti is a URL, domain, and IP threat investigation tool designed for SOC analysts and threat researchers. It provides risk scoring, content categorization, and contextual enrichment for any host on the internet. Key capabilities include: - Risk Scoring: Each host receives a numerical threat rating from 1.0 to 10.0, derived from passive traffic monitoring and thousands of passive and active factors. Ratings are color-coded for quick interpretation. - Content Categorization: Uses a combination of NLP, skip-gram modeling, and statistical analysis to classify the content and nature of a host. The categorization model updates continuously with each search. - Related Hosts: Displays related domains, their threat ratings, categories, and associated IPs in a single view to provide relationship context around a host. - Contextual Enrichment: Provides additional details including DNS records, WHOIS data, response headers, and server details to support deeper investigations. - One-Click Corroboration: Allows analysts to cross-reference findings with other domain intelligence services and OSINT sources from within the interface. threatYeti is available as a free web-based tool accessible at threatyeti.com.