related-domains

Find related domains of a given domain using Whoxy API.

Description

This Python tool does not search for similar domains, it uses the informations of the domain you provide (contact email, organization...) to search for domains that have been registered by the same peoples/companies. So the results are quite reliable.

Sources

Implemented sources are:

• builtwith.com
• whoxy.com
• crtsh

Requirements

You need a WHOXY API key but it's free.

Install

git clone https://github.com/gwen001/related-domains
cd related-domains
pip3 install -r requirements.txt

Usage

$ python3 related-domains.py -d example.com -k xxxxxxxxxxxxxxxxxxxxxx

usage: related-domains.py [-h] [-e EMAIL] [-c COMPANY] [-d DOMAIN] [-k KEY] [-v]

options:
  -h, --help            show this help message and exit
  -e EMAIL, --email EMAIL
                        email you are looking for (required or -d or -c)
  -c COMPANY, --company COMPANY
                        company you are looking for (required or -d or -e)
  -d DOMAIN, --domain DOMAIN
                        domain you already know (required or -c)
  -k KEY, --key KEY     whoxy api key (required)
  -s SOURCE, --source SOURCE
                        list of sources separated by comma, available sources are: builtwith,crtsh,whoxy (default=whoxy)
  -v, --verbose         enable verbose mode, default off

How it works

• whoxy, reliance: pretty good
  get domains with the same infos (contact mails and company names) of the domain supplied
  ex: paypal.com -> PayPal Inc.

• builtwith, reliance: not that bad
  get domains that use the same tags of the domain supplied
  ex: paypal.com -> UA-53389718

• crtsh, reliance: soso
  performs an extended search using the supplied domain name without tld
  ex: paypal.com -> %paypal%

Changelog

• 2023-07-18: builtwith re-enabled and crtsh added
• 2023-04-28: remove builtwith because it was not relevant at all, fix a fatal bug
• 2023-03-26: code review & builtwith added

Feel free to open an issue if you have any problem with the script.