Wtfis: Passive hostname, domain and IP lookup tool for non-robots

No matter what url I try I get Error fetching data: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/<urlfqdn> Same with -s or --use-shodan

This is going right into my toolbox. Love tools that quietly give you signal without forcing a whole workflow. The passive aspect is especially nice for recon work.

Off topic, in case this needs a backronym with no profanity, sharing some ideas; first one is my favorite:

- What's That Funny Internet Site?

- Web Threat Forensic Inspection Service

- Warden That Flags Internet Suspicion

Note that a Virustotal API key is required... so it doesn't seem very privacy friendly.

I'm actually surprised no one built this before this is exactly what soc analyst would need.

This looks like a really cool little CLI script, and I could see myself using it as a regular CLI tool instead of whois and Googling. It looks really good, it gathers a lot of extra info, and uses a bunch of highly regarded external sources like virustotal, shodan, graynoise and more.

Only criticism is that it does use or need a bunch of accounts and API keys which probably makes the setup a bit tedious: https://github.com/pirxthepilot/wtfis?tab=readme-ov-file#dat... obviously a necessary evil though given what the tool is doing.

Really great idea, happy to see this out there!

Nice i like it ,, stared so i can check it out later

Pretty!