Python App #08

Traceroute

Traceroute performs comprehensive domain research by combining WHOIS lookups with RDAP fallback for maximum coverage. Discover registrar details, nameservers, creation and expiration dates, registrant information (when available), and domain status codes. Optionally integrate with VirusTotal (API key) for reputation scoring and malware detection. The tool also generates direct links to additional domain intelligence services.

whoisrdapvirustotalregistrar

Last updated:

Features

  • WHOIS lookup with parsed results
  • RDAP fallback for additional data
  • Registrar identification
  • Nameserver discovery
  • Domain creation/expiration dates
  • Registrant info (when public)
  • Domain status codes
  • Optional VirusTotal API integration
  • Reputation and malware scoring
  • HTML session export

Quick Start

# 1. Extract the zip and enter the folder
cd 08-Domain-Intel

# 2. Install dependencies
python install_requirements.py

# 3. Launch the tool
python traceroute.py

Download

Tool: Traceroute
File: 08-Domain-Intel.zip
Python: 3.8+
OS: Windows, macOS, Linux
Dependencies: customtkinter, requests, python-whois

Downloads are free — clicking the link below opens a short ad that helps support Max Intel. Thank you! Wait 15 seconds after clicking to unlock.

Click here for an ad
15
seconds remaining…
✓ Unlocked — thank you!
← All Python OSINT Apps

How Does Visual Traceroute Aid Network Investigation?

Traceroute maps network paths by sending packets with incrementing TTL values — standardized in RFC 1393 and used per NIST SP 800-115 network mapping procedures. This tool extends standard traceroute with GeoIP lookup for each hop, displaying routes on an interactive map with coordinates, ISP identification, and latency data.

Network Path Analysis

Each hop reveals an intermediate router, its IP, location, and autonomous system. According to CAIDA, the internet consists of over 75,000 autonomous systems. Traceroute helps identify ISPs handling traffic, detect unusual routing, and verify geographic claims about server locations.

IPv4/IPv6 and Monitor Mode

IPv6 now carries over 40% of Google's global traffic (Google IPv6 Statistics). Monitor mode enables continuous tracking, alerting to path changes from reconfiguration, failover, or BGP hijacking. For hop analysis, use IP Lookup.

🔒 Traceroute — Frequently Asked Questions

What does a traceroute reveal for OSINT?

Traceroute maps the network path between you and a target, revealing intermediate routers, ISP infrastructure, geographic routing, and potential network boundaries. This helps identify hosting providers and network topology.

Does the visual traceroute tool require installation?

No. The tool runs entirely in your browser using client-side Python via Pyodide. No installation, API keys, or server-side processing required. Your queries are executed locally for maximum privacy.

What can I do with the visual traceroute tool?

You can map network paths, identify ISP hops, and detect routing anomalies. The tool provides a clean interface with exportable results and cross-links to related Max Intel tools for deeper investigation.