I would like to share my collection of Flowsint enrichers. Most of them are based on feature requests (#75, #72), others are personal ideas that I wanted to implement.
The following enrichers have been created:
WebsiteToSubdomains (performs an automated scan to find subdomains of a given domain)
|> Utilizes the C99.nl API (api.c99.nl)
PhoneToCarrier (looks up the carrier of the provided phone number)
|> Utilizes the Veriphone API (veriphone.io)
IpToFraudScore (performs a reverse lookup on an IP address and retrieves its fraud score)
|> Utilizes the Scamlytics API (scamalytics.com/ip/api/pricing)
DomainToTLS (retrieves TLS information for a domain)
|> Requires ProjectDiscovery’s httpx toolkit, so a change was made to the flowsint-api/Dockerfile
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/reconurge/flowsint/pull/138
**Author:** [@z3rodaycve](https://github.com/z3rodaycve)
**Created:** 4/21/2026
**Status:** 🔄 Open
**Base:** `main` ← **Head:** `feature/collection-enrichers`
---
### 📝 Commits (1)
- [`0d04423`](https://github.com/reconurge/flowsint/commit/0d04423b5991dcfd7f477930477797b303def4c5) Release of DeHashed, httpX, veriphone, scamalytics enrichers
### 📊 Changes
**9 files changed** (+1166 additions, -1 deletions)
<details>
<summary>View changed files</summary>
📝 `flowsint-api/Dockerfile` (+11 -1)
➕ `flowsint-enrichers/src/flowsint_enrichers/domain/to_dehashed.py` (+161 -0)
➕ `flowsint-enrichers/src/flowsint_enrichers/domain/to_ssl.py` (+105 -0)
➕ `flowsint-enrichers/src/flowsint_enrichers/email/to_dehashed.py` (+161 -0)
➕ `flowsint-enrichers/src/flowsint_enrichers/ip/to_dehashed.py` (+163 -0)
➕ `flowsint-enrichers/src/flowsint_enrichers/ip/to_fraudscore.py` (+157 -0)
➕ `flowsint-enrichers/src/flowsint_enrichers/phone/to_carrier.py` (+120 -0)
➕ `flowsint-enrichers/src/flowsint_enrichers/social/to_dehashed.py` (+161 -0)
➕ `flowsint-enrichers/src/flowsint_enrichers/website/to_subdomain.py` (+127 -0)
</details>
### 📄 Description
Hello,
I would like to share my collection of Flowsint enrichers. Most of them are based on feature requests (#75, #72), others are personal ideas that I wanted to implement.
The following enrichers have been created:
- `WebsiteToSubdomains` (performs an automated scan to find subdomains of a given domain)
|> Utilizes the C99.nl API (api.c99.nl)
- `PhoneToCarrier` (looks up the carrier of the provided phone number)
|> Utilizes the Veriphone API (veriphone.io)
- `IpToFraudScore` (performs a reverse lookup on an IP address and retrieves its fraud score)
|> Utilizes the Scamlytics API (scamalytics.com/ip/api/pricing)
_Based on issue #75_
- `UsernameToDehashed` (fetches breach intelligence for a given username)
|> Uses the DeHashed API for lookups (dehashed.com/api)
- `IpToIntelligence` (fetches breach intelligence for a given IP address)
- `EmailToDehashed` (fetches breach intelligence for a given email address)
- `DomainToDehashed` (fetches breach intelligence for a given domain)
_Based on issue #72_
- `DomainToTLS` (retrieves TLS information for a domain)
|> Requires ProjectDiscovery’s httpx toolkit, so a change was made to the `flowsint-api/Dockerfile`
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/reconurge/flowsint/pull/138
Author: @z3rodaycve
Created: 4/21/2026
Status: 🔄 Open
Base:
main← Head:feature/collection-enrichers📝 Commits (1)
0d04423Release of DeHashed, httpX, veriphone, scamalytics enrichers📊 Changes
9 files changed (+1166 additions, -1 deletions)
View changed files
📝
flowsint-api/Dockerfile(+11 -1)➕
flowsint-enrichers/src/flowsint_enrichers/domain/to_dehashed.py(+161 -0)➕
flowsint-enrichers/src/flowsint_enrichers/domain/to_ssl.py(+105 -0)➕
flowsint-enrichers/src/flowsint_enrichers/email/to_dehashed.py(+161 -0)➕
flowsint-enrichers/src/flowsint_enrichers/ip/to_dehashed.py(+163 -0)➕
flowsint-enrichers/src/flowsint_enrichers/ip/to_fraudscore.py(+157 -0)➕
flowsint-enrichers/src/flowsint_enrichers/phone/to_carrier.py(+120 -0)➕
flowsint-enrichers/src/flowsint_enrichers/social/to_dehashed.py(+161 -0)➕
flowsint-enrichers/src/flowsint_enrichers/website/to_subdomain.py(+127 -0)📄 Description
Hello,
I would like to share my collection of Flowsint enrichers. Most of them are based on feature requests (#75, #72), others are personal ideas that I wanted to implement.
The following enrichers have been created:
WebsiteToSubdomains(performs an automated scan to find subdomains of a given domain)|> Utilizes the C99.nl API (api.c99.nl)
PhoneToCarrier(looks up the carrier of the provided phone number)|> Utilizes the Veriphone API (veriphone.io)
IpToFraudScore(performs a reverse lookup on an IP address and retrieves its fraud score)|> Utilizes the Scamlytics API (scamalytics.com/ip/api/pricing)
Based on issue #75
UsernameToDehashed(fetches breach intelligence for a given username)|> Uses the DeHashed API for lookups (dehashed.com/api)
IpToIntelligence(fetches breach intelligence for a given IP address)EmailToDehashed(fetches breach intelligence for a given email address)DomainToDehashed(fetches breach intelligence for a given domain)Based on issue #72
DomainToTLS(retrieves TLS information for a domain)|> Requires ProjectDiscovery’s httpx toolkit, so a change was made to the
flowsint-api/Dockerfile🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.