Skip to main content

ClHostMap: A tool to check if your website has been impersonated. (Version 1.1.4)

What is ClHostMap?

ClHostMap (standing for Cloud Host Map) is a tool that checks many cloud providers, and many TLDs for whether your website has been registered by other people.

Why use ClHostMap?

People often impersonate brands or companies by hosting it on a different TLD like .net instead of .com, or hosting a website with the same brand name but using a cloud hosting platform so that it is free, like using .vercel.app or .pages.dev because .com is registered.

Additionally, if your original company is hosted on a cloud provider for free instead of .com, other people can register a domain on .com and impersonate you.

ClHostMap allows you to input your brand name, and the tool automatically checks many TLDs and host providers. Check the features for more details.

Features

Features of ClHostMap include:

  • Using a hash to check every TLD and host provider, as some host providers return a 200 OK response code but on the frontend say it is fake. This ensures no false positives will be captured.
  • 68 cloud host providers (like .vercel.app) and every TLD from IANA. (literally every TLD to ever exist)
  • Asynchronous function so that it runs hundreds of checks all at once.

All Arguments

Flag / Argument Short Default Description
site None None URL or brand name to verify.
--show-unregistered -su False Display unregistered domains as well.
--show_status -ss False Provide status codes/errors for every domain checked (forces -su).
--self-registered ‑sr None Domains that you yourself have registered, so that those domains will be ignored. Use comma-separated values or path to a text file.
--only-results ‑or False Only print the result
--concurrent-req ‑ccr 100 Maximum number of async requests, default 100.

Installation and Usage

Installation

To install on MacOS/Linux:

python3 -m pip install clhostmap

To install on Windows:

py -m pip install clhostmap

Usage

Run default scan:

clhostmap example.com

Run scan with 240 concurrent requests and to see status codes:

clhostmap example.com -ss -ccr 240

Release notes

Version 1.1.0 added

  • More cloud host providers and changing hardcoded TLDs to a txt from IANA
  • Added clearer messages

Upcoming additions

New features include:

  • Adding a flag to check for typosquatted versions of your website on every TLD and cloud provider, using multiple typosquatting algorithms.

Metadata

Release files for clhostmap 1.1.4

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for clhostmap 1.1.4
File Size Uploaded Provenance Actions
clhostmap-1.1.4.tar.gz 13.5 kB Without provenance Details for clhostmap-1.1.4.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for clhostmap 1.1.4
File Interpreter ABI Platform Actions
clhostmap-1.1.4-py3-none-any.whl Python 3 none any Details for clhostmap-1.1.4-py3-none-any.whl

Total release size: 27.9 kB

Release files / clhostmap-1.1.4.tar.gz

Download URL clhostmap-1.1.4.tar.gz
Size 13.5 kB
Tags Source
SHA-256 checksum
How to use checksums
d079d87a19d8ee5b1d15c671d63cb744b6a9a5023ad25595e67277f2e93a7f63
BLAKE2b-256 checksum
How to use checksums
bd32dca2302145fdc83fcb8b87f64463ed7ee8eb305e755fe61fec1f0f8390bb
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.12.13

Release files / clhostmap-1.1.4-py3-none-any.whl

Download URL clhostmap-1.1.4-py3-none-any.whl
Size 14.4 kB
Tags Python 3
SHA-256 checksum
How to use checksums
6230bdabc3fbd0bdcf0da4471c07fb2f48c3f904088fff4cef1c572c38c0db88
BLAKE2b-256 checksum
How to use checksums
9a78d863e91a9e8cdd295800a65c54856a481d932c19f4c38ce6ca70ea90d606
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.12.13

Security for clhostmap 1.1.4

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page