How to check ThreatCloud URL Reputation?

[MikeB]

Is there a webpage to check Check Point ThreatCloud URL, IP or domain reputation online?

[Cyber_Serge]

Are you referring to below two links?

https://threatpoint.checkpoint.com/ThreatPortal/emulation

https://www.checkpoint.com/urlcat/main.htm

[MikeB]

Hi Frank_Yao1, thank you for your response.

The two link you mentioned not currently show the URL Reputation that Check Point ThreathCloud defines or handles for a given URL/domain/IP in real time.

with https://threatpoint.checkpoint.com/ThreatPortal/emulation you need to upload a file and with https://www.checkpoint.com/urlcat/main.htm  you only get the categorization of a given domain/URL.

[Václav_Brožík · Accepted solution]

If I really need to check a URL I use this workaround:

1. Create a .doc file containing the URL as a link.
2. Upload it for emulation at https://threatpoint.checkpoint.com/ThreatPortal/emulation
3. Check the report

A dedicated service for URL reputation check would be certainly much better.

[MikeB · Accepted solution]

Nice Tip!,
but it would definitely be great if Check Point enable a service to quickly validate the reputation assigned to an URL/domain/IP by ThreatCloud, especially for TS

[Cyber_Serge]

If you visit the Check point Research site, under Tools, there are a few other tools you can utilize.

https://research.checkpoint.com/

So you are looking for domain or IP reputation lookup?

[MikeB]

Hi Frank_Yao1, thanks for your reply.
Im looking for IP/domain/URL "REPUTATION" assigned by ThreatCloud. This info is very important for the behavior of the Threat Prevention policy

[Harsha_Sane]

Hi Team,

Still i can find the website for IP reputation checking.

Please share the Web link if any available.

Thanks,

Harsha S.

[Chris_Atkinson]

There are internal tools for employees that can't be discussed here, another option would be a Horizon (Infinity) SOC trial.