10 comments

  • kristel100 3 hours ago ago

    This is going right into my toolbox. Love tools that quietly give you signal without forcing a whole workflow. The passive aspect is especially nice for recon work.

  • DavideNL 5 hours ago ago

    Note that a Virustotal API key is required... so it doesn't seem very privacy friendly.

  • thih9 4 hours ago ago

    Off topic, in case this needs a backronym with no profanity, sharing some ideas; first one is my favorite:

    - What's That Funny Internet Site?

    - Web Threat Forensic Inspection Service

    - Warden That Flags Internet Suspicion

    • xocnad an hour ago ago

      TIL a new word - backronym

  • Briannaj 9 hours ago ago

    I'm actually surprised no one built this before this is exactly what soc analyst would need.

  • 1dom 4 hours ago ago

    This looks like a really cool little CLI script, and I could see myself using it as a regular CLI tool instead of whois and Googling. It looks really good, it gathers a lot of extra info, and uses a bunch of highly regarded external sources like virustotal, shodan, graynoise and more.

    Only criticism is that it does use or need a bunch of accounts and API keys which probably makes the setup a bit tedious: https://github.com/pirxthepilot/wtfis?tab=readme-ov-file#dat... obviously a necessary evil though given what the tool is doing.

  • buzzergfxkjkl 8 hours ago ago

    Really great idea, happy to see this out there!

  • cchance 12 hours ago ago

    Nice i like it ,, stared so i can check it out later

    • new_user_final 5 hours ago ago

      That explains the lowest comment to star ratio I have ever noticed.

  • VladVladikoff 13 hours ago ago

    Pretty!