Skip to main content

Introduction

@fazelstudio/url-deep-trace is an enterprise-grade URL tracing engine designed for SOC operations, API security services, and penetration testing workflows.

Overview​

The engine performs read-only, non-invasive analysis of URLs, providing deep insights into redirect chains, SSL/TLS certificates, domain intelligence, and security threats.

Key Capabilities​

  • Redirect Chain Tracing — Follow HTTP 3xx redirects, meta refresh, and JavaScript redirects
  • Deep SSL/TLS Forensics — Parallel certificate inspection with expiry tracking
  • Threat Intelligence — Phishing, malware, SQLi/XSS detection
  • ML Classification — Weighted scoring with explainable AI
  • Risk Scoring — Multi-factor heuristic scoring (0–100)

Architecture​

src/
├── index.js                 # Main entry point
├── tracer.js                # Recursive URL tracer
├── tls-inspector.js         # SSL/TLS forensics
├── lexical-analyzer.js      # URL pattern analysis
├── html-analyzer.js         # HTML structure inspection
├── domain-intelligence.js   # DNS and domain analysis
├── header-fingerprint.js    # HTTP header security audit
├── risk-engine.js           # Security risk scoring
├── performance-manager.js   # Batch processing & export
├── behavioral-analyzer.js   # Redirect behavior analysis
├── threat-intelligence.js   # Phishing, malware detection
├── ml-classifier.js         # ML classification engine
├── reputation-cache.js      # LRU cache with blacklist
├── rate-limiter.js          # Sliding window rate limiter
├── webhook-notifier.js      # Conditional alerting
├── reporting-engine.js      # Multi-format report generator
├── screenshot-capture.js   # Browser screenshot (optional)