xurlfind3r
v1.3.0Verified publisherFinds known URLs for a domain from passive sources such as the Wayback Machine, Common Crawl and OTX
Community-packaged from github.com/hueristiq/xurlfind3r: the registry's community pins the upstream release; the tool is its authors' work. Maintain that project? Claim this package.
Artifact v1.3.0
- Image
ghcr.io/osintverse-community/xurlfind3r- Digest
sha256:9ce74d3a51313e8451a8101225a94e461dd0a46d56ac2c65f2355b34578d7418- Registry copy
- Mirror image
mirror.otinstaller.com/osintverse-community/xurlfind3r@sha256:9ce74d3a51313e8451a8101225a94e461dd0a46d56ac2c65f2355b34578d7418, same digest.
Signature
- Identity
https://github.com/osintverse-community/xurlfind3r/.github/workflows/otinstaller-release.yml@refs/heads/main- Issuer
https://token.actions.githubusercontent.com
Signed by the repository's own release workflow (cosign keyless, or a PyPI attestation for wheels). ot verifies this identity before every install and refuses a mismatch, including from the registry's mirror.
Scans
Latest run · 22 Oct 2026
- Passed
Malware and secrets
0 malware heuristics, 0 embedded secrets
- Passed
Software bill of materials
43 packages
- Passed
Signature
Signed by https://github.com/osintverse-community/xurlfind3r/.github/workflows/otinstaller-release.yml@refs/heads/main
- Passed
Smoke test
Exit code 0 in 58.5 s, offline sandbox with the manifest's test input
- Warnings
Vulnerabilities
0 critical, 8 high, 7 medium, 0 low (8 high or critical with fixes available)
How releases are checked: security model. Found a problem? Email security@otinstaller.com, or report this tool.