Something else I’ve been playing with is the SpiderFoot project for intelligence gathering on targets like xyz.com domain or whatever you would like to point it at.
It gathers a ton of information from search engines, social media, the target domain itself and can also check sources like Virustotal, Shodan Honeypot Checker and others using API keys if you have them.
As you would expect, it gathers information of all types which could be useful.
This is another project that’s super simple to get up and running on a VPS or hardware if you like. I did need to run this on at least a 1GB VM so that SpiderFoot did not run out of memory, but other than that it seems to perform well.
You’ll also find some interesting details out about yourself when pointing at your own domain.