SeekYou

Unified host intelligence across 15 sources — Query any IP, domain, or ASN for instant security posture, infrastructure details, and threat correlations. Runs entirely on the Cloudflare free tier.

Live at: swiy.co/seekyou

$ curl "https://seekyou.seekyou.workers.dev/api/lookup?q=1.1.1.1"

{
  "query": { "raw": "1.1.1.1", "type": "ip", "normalised": "1.1.1.1" },
  "core": {
    "internetdb":  { "status": "ok",     "data": { "ports": [80,443], "vulns": [] } },
    "geo":         { "status": "cached", "data": { "country": "US", "org": "AS13335 Cloudflare" } },
    "bgp":         { "status": "ok",     "data": { "name": "CLOUDFLARENET", "rir": "ARIN" } },
    ...
  },
  "meta": { "durationMs": 312, "cacheHits": 4, "sourcesQueried": 15, "sourcesFailed": 0 }
}

Screenshots

---

Table of Contents

• SeekYou
  • Screenshots
    • Landing Page
    • Results Page
    • Demo
  • Table of Contents
  • What SeekYou does
  • Use cases
  • Lawful-use policy
  • Related Tools
  • Architecture overview
  • Execution model
  • Data sources
  • Project structure
  • Key design decisions
    • Edge-first, no Node.js
    • Layered parallel execution
    • Graceful degradation
    • Split D1 + KV storage
    • Free-tier optimization
    • Fire-and-forget D1 writes
  • Caching strategy
  • Rate limiting
  • Circuit breakers
  • Key rotation — GrayHatWarfare
  • D1 persistence
    • Schema (schema.sql)
    • Apply schema
    • Helper functions
  • Cron worker
    • Typed diff (lib/diff.ts)
    • Webhook payload
  • Development setup
    • Prerequisites
    • Local development
    • Create Cloudflare resources (first time)
  • Deployment
    • Build and deploy
    • Wrangler configuration (wrangler.toml)
  • Secrets and environment variables
    • Required secrets
    • .env.example (local dev only)
  • License
  • Author
  • Acknowledgments

---

What SeekYou does

SeekYou is a host intelligence tool — paste in an IP address, domain name, or ASN and get a unified report covering:

Category	What you get
Network	Open ports, CPEs, BGP prefixes, upstreams, peers, RIR
Identity	RDAP registration, contacts, registrar, nameservers
Geo	Country, city, ISP, proxy / hosting / mobile flags
Certificates	crt.sh history, SANs, issuer chain
DNS	Passive DNS records, Robtex reverse/forward DNS
Threats	URLhaus, ThreatFox, MalwareBazaar, Feodo, SSLBL
CVEs	NVD + CIRCL enrichment for every CVE ID InternetDB reports
Recon	GrayHatWarfare exposed buckets, Wayback CDX snapshots

Every source is queried in parallel. A failing source degrades to an "unavailable" badge — it never breaks the page.

---

Use cases

Security Operations — Quickly profile suspicious IPs from logs, correlate IOCs, identify exposed services and CVEs, trace malicious domains.

Network Operations — Inspect BGP routing, RDAP/WHOIS allocation data, historical DNS records, SSL cert changes.

Penetration Testing — Enumerate ports/services/CPEs, discover exposed buckets, archived pages, subdomains, and ASN relationships.

Threat Intelligence — Check C2 infrastructure against five threat feeds in a single query.

Compliance & Risk — Profile vendor infrastructure, detect exposed cloud storage, identify shadow IT.

---

Lawful-use policy

SeekYou is designed for lawful security research, network operations, and threat intelligence. By using this tool, you agree to:

Permitted uses:

• Security operations and incident response on networks you own or are authorized to monitor
• Threat intelligence research and IOC correlation
• Network troubleshooting and infrastructure auditing within your organization
• Penetration testing with explicit written authorization from the target organization
• Academic research and education in cybersecurity
• Compliance audits and vendor risk assessments with proper authorization

Prohibited uses:

• Unauthorized access, reconnaissance, or attacks against systems you do not own or have explicit permission to test
• Harassment, stalking, or privacy violations against individuals or organizations
• Facilitating illegal activities including fraud, identity theft, or cybercrime
• Circumventing security controls or access restrictions without authorization
• Violating applicable laws including CFAA (US), Computer Misuse Act (UK), GDPR (EU), or equivalent legislation in your jurisdiction

Your responsibilities:

• Ensure you have proper authorization before querying infrastructure you do not own
• Respect rate limits and do not abuse the service or upstream data sources
• Comply with all applicable laws and regulations in your jurisdiction
• Use the data responsibly and do not weaponize findings without coordinated disclosure
• Understand that querying a host does not grant permission to access or exploit it

Disclaimer: The author and contributors assume no liability for misuse of this tool. Users are solely responsible for ensuring their activities comply with applicable laws. Data aggregated from public sources may be incomplete, outdated, or inaccurate — always verify findings through authoritative channels before taking action.

If you discover a vulnerability through SeekYou, follow responsible disclosure practices and notify the affected party before public disclosure.

---

Related Tools

SeekYou is part of a privacy-focused security toolkit. Explore the full suite: