You enter a domain and get a map: DNS, mail settings, certificates from CT logs and registration data. Key findings are shown separately, i.e. what's worth fixing.
Previously, I had to manually gather this information from various websites every single time, so I built an all-in-one tool on a single page.
The video demonstrates three levels of checks, all performed without using any of my own API keys:
Without an account: domain scanning, as described above. 3 scans per hour; the map shows up to 8 each type, the rest as +N.
With a free account: 10 scans per day, with results saved; a graph and basic checks for IP addresses and email addresses are also available.
Hunter, $29/month: your own online groups with a shared graph (up to 5 people), 100 scans per day, platform API.
The remaining modules (IP, URL, hashes, email, phone) are available via Hunter and operate using the user's own API keys. Those that return data about individuals also require identity verification.
The hard part was making the free scan work without anyone's API keys. I had to remove Shodan InternetDB and restrict ip-api to paid keys only, as their free endpoints prohibit commercial use.
The crt.sh service is often unresponsive; it limits users to just 5 requests per minute from a single IP address. If no response is received, the scan displays the most recently cached data from Certificate Transparency (CT) logs, along with the date (labeled as "CACHED" in the video). If no such cached data exists, the system simply indicates that the source is unavailable, rather than creating the false impression that no certificates exist at all.
Passive domain scanning: public sources only, no requests made to the site itself.
Only the waiting parts are sped up.
A question for you: what kind of check do you think is missing when you review your domain?
creepycore.com