FBI_Watchdog: Real-time OSINT for Domain Seizures and DNS Monitoring

Introduction

FBI_Watchdog is an advanced Open-Source Intelligence (OSINT) tool developed in Python, specifically engineered to monitor domain DNS changes and detect law enforcement seizures in real-time. This project is crucial for cybersecurity professionals, OSINT researchers, and anyone needing to track domain status proactively. It identifies changes in various DNS records, including A, AAAA, CNAME, MX, NS, SOA, and TXT, and specifically flags known law enforcement seizure nameservers like ns1.fbi.seized.gov.

Key features include real-time monitoring, comprehensive seizure detection, instant alerts via Telegram and Discord, and automated screenshot capture of affected domains. FBI_Watchdog also boasts a rich command-line interface output, auto-saves DNS history, and is cross-platform compatible. For more detailed information and the latest updates, visit the official GitHub repository.

Installation

Setting up FBI_Watchdog is straightforward. Follow these steps to get the tool running on your system:

1. Clone the Repository:

   git clone https://github.com/DarkWebInformer/FBI_Watchdog.git
   cd FBI_Watchdog
   

2. Install Dependencies:

   Ensure you have Python 3.x installed. Then, install the required Python packages:

   pip install -r requirements.txt
   

3. Setup Environment Variables:

   Create a .env file in the root directory and add your Discord Webhook, Telegram API key, and Telegram Channel ID:

   WEBHOOK=<your_discord_webhook>
   TELEGRAM_BOT_TOKEN=<your_telegram_bot_token>
   TELEGRAM_CHAT_ID=<your_telegram_chat_id>
   

4. Add Domains to Monitor:

   Modify the script to include the domains you wish to monitor for DNS and seizure changes:

   domains = ["example.com", "example1.com", "example2.com"]
   

5. Run the Script:

   Start FBI_Watchdog with the following command:

   python fbi_watchdog.py
   

   For a complete and detailed installation guide, please refer to the GitHub repository.

Examples

FBI_Watchdog operates by continuously checking the DNS records of specified domains. When a change is detected, or a domain's nameservers match those associated with law enforcement seizures, the tool springs into action. It captures screenshots of the affected website, providing visual evidence of the change or takedown.

Users receive immediate notifications through their configured Telegram and Discord channels. These alerts include details about the DNS modification or seizure, along with the captured screenshot, ensuring that critical information is delivered promptly. The tool's rich CLI output also provides clear, colored logs for easy monitoring directly from the terminal. Visual examples of DNS checking, seizure detection, and notification alerts are available in the project's README.

Why Use FBI_Watchdog?

FBI_Watchdog offers significant value for anyone involved in cybersecurity or threat intelligence:

• Proactive Threat Detection: Get early warnings about domain takedowns or suspicious DNS changes that could indicate malicious activity or law enforcement intervention.
• Comprehensive Monitoring: Tracks a wide array of DNS record types and specific seizure indicators.
• Instant Alerts: Receive timely notifications on popular platforms like Telegram and Discord, ensuring you never miss a critical event.
• Evidentiary Support: Automated screenshot capture provides concrete proof of domain status at the time of an event.
• OSINT Enhancement: A powerful addition to any OSINT toolkit, providing automated, real-time data collection.
• Cross-Platform Compatibility: Works seamlessly across Windows, Linux, and macOS environments.

Links

• GitHub Repository: DarkWebInformer/FBI_Watchdog
• VirusTotal Report (v2.0): Check the latest scan
• Live Monitoring on Telegram: TheDarkWebInformer Channel
• Cyber Threat Intelligence Insights: DarkWebInformer.com