threatexpress/domainhunter

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1678 stars · 287 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Domain Hunter is a Python CLI tool that finds expired or available domains with prior benign usage history via ExpiredDomains.net, then checks their reputation against services like BlueCoat, IBM X-Force, and Cisco Talos. It generates timestamped HTML and text reports with Archive.org history links to identify good candidates for phishing and C2 domains during red team engagements.

Use cases

• find expired domains with good reputation for red team engagements
• check domain categorization on BlueCoat and Cisco Talos
• search available domains by keyword with prior history
• identify domains that bypass reputation-based web filters for C2
• generate HTML reports of domain reputation and archive.org history
• bulk check a list of domains for reputation

When to choose

• you are a red teamer or penetration tester preparing phishing or C2 infrastructure
• you need to find pre-categorized expired domains to evade reputation-based filtering
• you want automated reputation checks across multiple services with a report

When to avoid

• you need defensive domain monitoring or brand abuse detection
• you require a GUI or continuous domain monitoring service
• you do not have an ExpiredDomains.net account for full functionality

Facets

cli-tool · maturity maintenance

security search-engine web-scraping developer-tools security penetration-testing osint python cli windows red-team phishing c2 domain-reputation expired-domains offensive-security linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="threatexpress/domainhunter")