Skip to main content

ClHostMap: A tool to check if your website has been impersonated. (Version 1.1.3)

What is ClHostMap?

ClHostMap (standing for Cloud Host Map) is a tool that checks many cloud providers, and many TLDs for whether your website has been registered by other people.

Why use ClHostMap?

People often impersonate brands or companies by hosting it on a different TLD like .net instead of .com, or hosting a website with the same brand name but using a cloud hosting platform so that it is free, like using .vercel.app or .pages.dev because .com is registered.

Additionally, if your original company is hosted on a cloud provider for free instead of .com, other people can register a domain on .com and impersonate you.

ClHostMap allows you to input your brand name, and the tool automatically checks many TLDs and host providers. Check the features for more details.

Features

Features of ClHostMap include:

  • Using a hash to check every TLD and host provider, as some host providers return a 200 OK response code but on the frontend say it is fake. This ensures no false positives will be captured.
  • 68 cloud host providers (like .vercel.app) and every TLD from IANA. (literally every TLD to ever exist)
  • Asynchronous function so that it runs hundreds of checks all at once.

All Arguments

Flag / Argument Short Default Description
site None None URL or brand name to verify.
--show-unregistered -su False Display unregistered domains as well.
--show_status -ss False Provide status codes/errors for every domain checked (forces -su).
--self-registered ‑sr None Domains that you yourself have registered, so that those domains will be ignored. Use comma-separated values or path to a text file.
--only-results ‑or False Only print the result
--concurrent-req ‑ccr 100 Maximum number of async requests, default 100.

Installation and Usage

Installation

To install on MacOS/Linux:

python3 -m pip install clhostmap

To install on Windows:

py -m pip install clhostmap

Usage

Run default scan:

clhostmap example.com

Run scan with 240 concurrent requests and to see status codes:

clhostmap example.com -ss -ccr 240

Release notes

Version 1.1.0 added

  • More cloud host providers and changing hardcoded TLDs to a txt from IANA
  • Added clearer messages

Upcoming additions

New features include:

  • Adding a flag to check for typosquatted versions of your website on every TLD and cloud provider, using multiple typosquatting algorithms.

Metadata

Release files for clhostmap 1.1.3

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for clhostmap 1.1.3
File Size Uploaded Provenance Actions
clhostmap-1.1.3.tar.gz 12.7 kB Without provenance Details for clhostmap-1.1.3.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for clhostmap 1.1.3
File Interpreter ABI Platform Actions
clhostmap-1.1.3-py3-none-any.whl Python 3 none any Details for clhostmap-1.1.3-py3-none-any.whl

Total release size: 26.2 kB

Release files / clhostmap-1.1.3.tar.gz

Download URL clhostmap-1.1.3.tar.gz
Size 12.7 kB
Tags Source
SHA-256 checksum
How to use checksums
ebff3a81dc400e18023fd6e8f3850d7991c9e07fe9a3271e4eee12e4960063ee
BLAKE2b-256 checksum
How to use checksums
39125f3e666aeb06fa01bd251b5b8961e113ac42a30f33c2b2e34f79c21b6e47
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.12.13

Release files / clhostmap-1.1.3-py3-none-any.whl

Download URL clhostmap-1.1.3-py3-none-any.whl
Size 13.5 kB
Tags Python 3
SHA-256 checksum
How to use checksums
b4ec82bf26b91d849adc5ff7afb0827f10b8290400f938bbb1d4f813681fec1f
BLAKE2b-256 checksum
How to use checksums
e17d580cebaf9cb98e168766b1a906db92776df687e8c89709deefb66bed2f7d
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.12.13

Security for clhostmap 1.1.3

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page