wtf is footprintx?

FootprintX is a Python tool for security reconnaissance and passive intelligence gathering. It analyzes the web infrastructure of a target domain, assesses its security posture, tracks how its exposure changes over time, and sends alerts when something shifts. The project currently has no stars and no description on its GitHub page, but the README provides a clear picture of what it does. The tool checks several aspects of a domain's setup. It resolves DNS records and inspects email security configurations like MX, SPF, and DMARC, which are the records that control how email is handled and protected from spoofing. It also scans HTTP response headers to see how well the site aligns with modern security standards, discovers subdomains through passive DNS lookups, and assigns a risk score from 0 to 100 with a label of LOW, MEDIUM, or HIGH. A notable feature is the scan comparison engine. When you run the tool more than once against the same target, it compares the new results against the previous scan. It then reports whether the domain's security posture has improved, worsened, or stayed the same. This makes it useful for ongoing monitoring rather than just one-time checks. For automated use, the tool includes a monitoring mode that can be scheduled to run at regular intervals. You can pass a Discord or Slack webhook URL, and the tool will send a notification to that channel whenever it detects a security change. The README includes a cron scheduling example for running it daily at midnight. FootprintX produces reports in two formats: an HTML dashboard for visual review and a structured JSON file for programmatic access. It also saves historical scan data with timestamps so you can track changes over time. Installation involves cloning the repository and installing the listed Python dependencies.