Details

'Live Scan' added

• Explore Web Data > Live Scan

Live Scan allows users to extract realtime data from a single URL, across a range of categories, including:

• HTML data
• Live screenshot
• Favicon data, including hash values
• Redirect chain
• Body data, including hash values
• Open directories
• SSL data
• Risk score of the domain and IP
• .onion sites

Users are also able to view historical scan data for the specified URL.

Landing page with search bar added (Community and Enterprise)

A new landing page has been introduced, displayed on login, that allows users to input a domain, IP, or URL and perform three core functions:

• Enrichment
• Lookup passive DNS records
• Perform a live scan (URL only)

In addition, a number of shortcuts are displayed to popular queries.

Web Scanner enhancements (Community and Enterprise)

A number of functional enhancements have been added to the Silent Push Web Scanner.

• Users can now sort and save the order of column headers for any given query, allowing users to create querys that output data related to specific use cases (e.g. including certificate data columns for certificate-related queries, or favcion columns for favicon queries)
• The minimum number of columns a user can select has been reduced from 5 to 2, allowing for a more concise user interface that only displays the data relevant to the desired outcome
• All domains and IPs outputted in Web Scanner now have a color-coded risk score displayed alongside them

Query results displayed on the same page (Community and Enterprise)

Results and parameters have been combined into a single page as collapsible elements, for the following queries:

• Explore DNS Data > IP's Hosting A Domain
• Explore DNS Data > IP Diversity Of A Domain
• Attack Surface Mapping > Digital Footprint for Domain > Domain TXT Records
• Explore DNS Data > Domain Name Server Changes
• Name in TXT Records

This allows users to review query results, and if satisfied, expand the query section to save the recipe

Changes to 'Subdomain' query

Users are now able to view a list of unique subdomains associated with a domain, and download the results for further analysis.

Users also now have the option to view the IP addresses that each subdomain is pointing to.

'WHOIS History' query added (Community and Enterprise)

• Explore DNS Data > WHOIS History

The WHOIS History query allows users to view historic WHOIS changes for a domain.

The query outputs a graphical timeline of WHOIS changes within a specified time period, along with nameserver reputation scores, and a tabulated list of changes made on a specific date.