This Python tool does not search for similar domains, it uses the informations of the domain you provide (contact email, organization...) to search for domains that have been registered by the same peoples/companies. So the results are quite reliable.
Implemented sources are:
- builtwith.com
- whoxy.com
- crtsh
You need a WHOXY API key but it's free.
git clone https://github.com/gwen001/related-domains
cd related-domains
pip3 install -r requirements.txt
$ python3 related-domains.py -d example.com -k xxxxxxxxxxxxxxxxxxxxxx
usage: related-domains.py [-h] [-e EMAIL] [-c COMPANY] [-d DOMAIN] [-k KEY] [-v]
options:
-h, --help show this help message and exit
-e EMAIL, --email EMAIL
email you are looking for (required or -d or -c)
-c COMPANY, --company COMPANY
company you are looking for (required or -d or -e)
-d DOMAIN, --domain DOMAIN
domain you already know (required or -c)
-k KEY, --key KEY whoxy api key (required)
-s SOURCE, --source SOURCE
list of sources separated by comma, available sources are: builtwith,crtsh,whoxy (default=whoxy)
-v, --verbose enable verbose mode, default off
-
whoxy, reliance: pretty good
get domains with the same infos (contact mails and company names) of the domain supplied
ex: paypal.com -> PayPal Inc. -
builtwith, reliance: not that bad
get domains that use the same tags of the domain supplied
ex: paypal.com -> UA-53389718 -
crtsh, reliance: soso
performs an extended search using the supplied domain name without tld
ex: paypal.com -> %paypal%
- 2023-07-18: builtwith re-enabled and crtsh added
- 2023-04-28: remove builtwith because it was not relevant at all, fix a fatal bug
- 2023-03-26: code review & builtwith added
Feel free to open an issue if you have any problem with the script.