API Resource Availability Bot 🤖

A comprehensive Telegram bot for testing web API and resource availability with 21 advanced scanners running in parallel, featuring DNS analysis, protocol detection, paywall detection, security scanning, geolocation, and much more.

✨ Features

🔍 21 Advanced Scanners (All Run in Parallel!)

Core Scanners

• 🌐 Availability Testing - Check if resources are accessible, measure response time and latency
• 🔍 DNS Analysis - Resolve DNS records, IPv4/IPv6, nameservers, MX records, DNSSEC
• 🔒 Protocol Detection - Identify HTTP/HTTPS/FTP protocols, SSL/TLS versions
• 💰 Paywall Detection - Detect hard/soft paywalls and subscription requirements
• 🛡️ Security Scanning - Check SSL certificates, security headers, vulnerabilities
• ☁️ Hosting Provider Detection - Identify hosting providers (AWS, Azure, GCP, Cloudflare, Netlify, Vercel, etc.)
• 🔌 API Detection - Check if resource provides an API (REST, GraphQL, SOAP, WebSocket)

Performance & SEO

• ⚡ Performance Checker - Load time, TTFB, resource analysis
• 📊 SEO Analyzer - Meta tags, sitemap, robots.txt, Open Graph
• 📱 Mobile Optimization - Responsive design, viewport, mobile-friendliness

Security & Privacy

• 🔐 Authentication Detector - OAuth, SSO, 2FA, login forms
• 🍪 Privacy Checker - Cookie compliance, GDPR, privacy policies
• 🌍 CORS Checker - Cross-origin resource sharing configuration
• 🔓 Insecure Content Detector - Mixed content, HTTP resources

Advanced Technical Analysis

• 🛠️ Tech Stack Detector - ENHANCED with deep scanning:

  • CMS detection (WordPress, Drupal, Joomla, Shopify, etc.)
  • Frontend frameworks (React, Vue, Angular, Next.js, Svelte, etc.)
  • Backend frameworks (Laravel, Django, Flask, Rails, etc.)
  • CSS frameworks (Bootstrap, Tailwind, Material-UI, etc.)
  • Build tools (Webpack, Vite, Rollup)
  • Hidden technology detection via JavaScript analysis
  • CDN providers (Cloudflare, Akamai, Fastly)
  • Analytics platforms (GA, GTM, Mixpanel, etc.)
  • Version detection for frameworks

• 💾 Database Detector - MySQL, PostgreSQL, MongoDB, Redis indicators

• 💳 Payment Provider Detector - Stripe, PayPal, Square integration

• 🔄 Redirect Analyzer - NEW!

  • Follows redirect chains (up to 10 hops)
  • Detects HTTP→HTTPS upgrades
  • Identifies www canonicalization
  • Open redirect vulnerability detection
  • Suspicious redirect patterns

• 🌍 Geolocation & Network - NEW!

  • IP address resolution (IPv4/IPv6)
  • Geolocation (country, region, city, coordinates)
  • ASN information
  • ISP and organization detection
  • Reverse DNS lookup
  • Network type classification (cloud/CDN/standard)
  • MAC address detection capabilities

• 📺 Advertising Detection - Detect ads, ad networks, tracking pixels

• 🤖 Bot Protection - CAPTCHA, WAF, rate limiting detection

• 🤖 MCP Support - Model Context Protocol endpoint detection

🎯 Bot Features

User Interface

• 📚 Bookmarks - Save and organize your favorite resources
• 🟢🔴 Real-time Status - Live bot status with uptime tracking
• 📊 Statistics - Track your scanning history
• ⚙️ Settings - Customize bot behavior and report formats
• 📋 History - View scan logs for each resource
• 🔄 Auto-refresh - Keep bookmark statuses up to date
• 🎯 Persistent Menu - Quick access to main features

🌐 Telegram Mini App (WebApp)

• NEW! Web-based scanner interface
• Beautiful, responsive design
• Quick-scan popular sites (GitHub, Google, Amazon, Twitter)
• Real-time statistics display
• Share results directly in Telegram
• Native Telegram theme integration

🔒 Security Features

• Advanced Input Validation - Prevents XSS, injection attacks
• Rate Limiting - Per-user request limits (10 req/60s)
• URL Sanitization - Removes dangerous patterns
• Security Headers - HSTS, CSP, X-Frame-Options
• Sensitive Data Redaction - API keys, passwords masked in logs

⚡ Performance Optimizations

• Parallel Scanner Execution - All 21 scanners run simultaneously via asyncio
• Rate Limiting & Retry Logic - Handles web host restrictions
• Proxy Support - (Optional) Rotate proxies to bypass limits
• Exponential Backoff - Smart retry mechanism
• Request Protection - Built-in flood control

💾 Data Management

• Telegram Context Storage - Complete user data isolation
• No Shared Database - Each user's data stored separately in Telegram
• GDPR Compliant - /cleardata command to delete all user data
• 100-scan History - Automatic old scan cleanup
• Persistent Across Restarts - PicklePersistence integration