fix(scan): normalize IOC input handling

- Deduplicate IP, domain, and hash inputs before scan
- Defang bracketed IP/domain dots
- Accept string is_crawler values from ipapi.is
- Remove API keys info bar and allow scan box resize

Author: TwoA2U

integrations/ipapi.go

@@ -11,26 +11,60 @@ import (
 	"encoding/json"
 	"fmt"
 	"net/url"
+	"strconv"
+	"strings"
 
 	"github.com/TwoA2U/iocscan/internal/httpclient"
 )
 
 const ipapiEndpoint = "https://api.ipapi.is"
 
+type flexibleBool bool
+
+func (b *flexibleBool) UnmarshalJSON(data []byte) error {
+	var raw any
+	if err := json.Unmarshal(data, &raw); err != nil {
+		return err
+	}
+
+	switch v := raw.(type) {
+	case bool:
+		*b = flexibleBool(v)
+	case string:
+		s := strings.TrimSpace(strings.ToLower(v))
+		if s == "" || s == "false" || s == "0" || s == "no" || s == "none" || s == "null" {
+			*b = false
+			return nil
+		}
+		if parsed, err := strconv.ParseBool(s); err == nil {
+			*b = flexibleBool(parsed)
+			return nil
+		}
+		*b = true
+	case float64:
+		*b = flexibleBool(v != 0)
+	case nil:
+		*b = false
+	default:
+		*b = false
+	}
+	return nil
+}
+
 // IPAPIResponse is the raw response from ipapi.is.
 type IPAPIResponse struct {
-	IP      string `json:"ip"`
-	RIR     string `json:"rir"`
-	IsBogon bool   `json:"is_bogon"`
-	IsMobile bool  `json:"is_mobile"`
-	IsSatellite bool `json:"is_satellite"`
-	IsCrawler bool `json:"is_crawler"`
-	IsDatacenter bool `json:"is_datacenter"`
-	IsTor bool `json:"is_tor"`
-	IsProxy bool `json:"is_proxy"`
-	IsVPN bool `json:"is_vpn"`
-	IsAbuser bool `json:"is_abuser"`
-	VPN struct {
+	IP           string       `json:"ip"`
+	RIR          string       `json:"rir"`
+	IsBogon      bool         `json:"is_bogon"`
+	IsMobile     bool         `json:"is_mobile"`
+	IsSatellite  bool         `json:"is_satellite"`
+	IsCrawler    flexibleBool `json:"is_crawler"`
+	IsDatacenter bool         `json:"is_datacenter"`
+	IsTor        bool         `json:"is_tor"`
+	IsProxy      bool         `json:"is_proxy"`
+	IsVPN        bool         `json:"is_vpn"`
+	IsAbuser     bool         `json:"is_abuser"`
+	VPN          struct {
 		Service     string `json:"service"`
 		Type        string `json:"type"`
 		LastSeenStr string `json:"last_seen_str"`
@@ -47,13 +81,13 @@ type IPAPIResponse struct {
 		Org string `json:"org"`
 	} `json:"asn"`
 	Location struct {
-		Country    string `json:"country"`
+		Country     string `json:"country"`
 		CountryCode string `json:"country_code"`
-		State      string `json:"state"`
-		City       string `json:"city"`
-		Timezone   string `json:"timezone"`
-		LocalTime  string `json:"local_time"`
-		IsDST      bool   `json:"is_dst"`
+		State       string `json:"state"`
+		City        string `json:"city"`
+		Timezone    string `json:"timezone"`
+		LocalTime   string `json:"local_time"`
+		IsDST       bool   `json:"is_dst"`
 	} `json:"location"`
 }
 
@@ -186,28 +220,28 @@ func (i IPAPIIntegration) Run(ctx context.Context, ioc, apiKey string, useCache
 
 func ipapiToResult(r *IPAPIResponse) *Result {
 	return &Result{Fields: map[string]any{
-		"country":      r.Location.Country,
-		"city":         r.Location.City,
-		"state":        r.Location.State,
-		"timezone":     r.Location.Timezone,
-		"localTime":    r.Location.LocalTime,
-		"isDST":        r.Location.IsDST,
-		"org":          r.ASN.Org,
-		"companyName":  r.Company.Name,
-		"companyType":  r.Company.Type,
+		"country":       r.Location.Country,
+		"city":          r.Location.City,
+		"state":         r.Location.State,
+		"timezone":      r.Location.Timezone,
+		"localTime":     r.Location.LocalTime,
+		"isDST":         r.Location.IsDST,
+		"org":           r.ASN.Org,
+		"companyName":   r.Company.Name,
+		"companyType":   r.Company.Type,
 		"companyDomain": r.Company.Domain,
-		"abuserScore":  r.Company.AbuserScore,
-		"isBogon":      r.IsBogon,
-		"isMobile":     r.IsMobile,
-		"isSatellite":  r.IsSatellite,
-		"isCrawler":    r.IsCrawler,
-		"isDatacenter": r.IsDatacenter,
-		"isTor":        r.IsTor,
-		"isProxy":      r.IsProxy,
-		"isVPN":        r.IsVPN,
-		"isAbuser":     r.IsAbuser,
-		"vpnService":   r.VPN.Service,
-		"vpnType":      r.VPN.Type,
-		"vpnLastSeen":  r.VPN.LastSeenStr,
+		"abuserScore":   r.Company.AbuserScore,
+		"isBogon":       r.IsBogon,
+		"isMobile":      r.IsMobile,
+		"isSatellite":   r.IsSatellite,
+		"isCrawler":     bool(r.IsCrawler),
+		"isDatacenter":  r.IsDatacenter,
+		"isTor":         r.IsTor,
+		"isProxy":       r.IsProxy,
+		"isVPN":         r.IsVPN,
+		"isAbuser":      r.IsAbuser,
+		"vpnService":    r.VPN.Service,
+		"vpnType":       r.VPN.Type,
+		"vpnLastSeen":   r.VPN.LastSeenStr,
 	}}
 }

web/components/IOCScanner.js

@@ -315,13 +315,6 @@ export default defineComponent({
   <!-- ══ PAGE BODY ══════════════════════════════════════════════════ -->
   <div class="px-8 py-8 pb-20" id="shell">
 
-    <div class="keys-panel">
-      <span class="keys-panel-label">API Keys</span>
-      <div class="text-sm text-t2">
-        API keys are managed in Settings for the signed-in account.
-      </div>
-    </div>
-
     <!-- Mode tabs -->
     <div class="flex border-b border-white/[0.08] mb-6">
       <button class="ioc-tab" :class="{active: currentIOCMode==='ip'}"   @click="switchIOCMode('ip')">IP Address</button>

web/composables/useDomainResults.js

@@ -114,7 +114,8 @@ const reDomain = /^(?:[a-zA-Z0-9](?:[a-zA-Z0-9\-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z]
 const reIPv4   = /^(\d{1,3}\.){3}\d{1,3}$/;
 
 export function extractDomains(text) {
-    const tokens = text.split(/[\s,;\n\r\t]+/).map(t => t.trim()).filter(Boolean);
+    const normalized = String(text || '').replace(/\[\.\]/g, '.');
+    const tokens = normalized.split(/[\s,;\n\r\t]+/).map(t => t.trim()).filter(Boolean);
     const seen = new Set();
     const result = [];
     for (const t of tokens) {

web/composables/useIOCScan.js

@@ -272,8 +272,11 @@ export function vtStatPart(idx) {
 // ─── API calls ────────────────────────────────────────────────────────────────
 
 export async function doIPScan() {
-    const ip = ipInputText.value.trim();
-    if (!ip) { IPResults.ipError.value = 'Enter at least one IP address.'; return; }
+    const ips = IPResults.extractIPs(ipInputText.value);
+    if (!ips.length) { IPResults.ipError.value = 'Enter at least one IP address.'; return; }
+    const ip = ips.join('\n');
+    ipInputText.value = ip;
+    IPResults.ipBulkCount.value = ips.length;
     IPResults.ipError.value = '';
     isIPLoading.value = true;
     try {
@@ -306,6 +309,8 @@ export async function doHashScanAction() {
     if (!raw) { HashResults.hashError.value = 'Please enter at least one hash.'; return; }
     const hashes = HashResults.extractHashes(raw);
     if (!hashes.length) { HashResults.hashError.value = 'No valid MD5/SHA1/SHA256 hashes found.'; return; }
+    hashInputText.value = hashes.join('\n');
+    HashResults.hashBulkCount.value = hashes.length;
     HashResults.hashError.value = '';
     isHashLoading.value = true;
     try {
@@ -336,6 +341,8 @@ export async function doDomainScan() {
     if (!raw) { DomainResults.domainError.value = 'Enter at least one domain.'; return; }
     const domains = DomainResults.extractDomains(raw);
     if (!domains.length) { DomainResults.domainError.value = 'No valid domains found.'; return; }
+    DomainResults.domainInputText.value = domains.join('\n');
+    DomainResults.domainBulkCount.value = domains.length;
     DomainResults.domainError.value = '';
     DomainResults.isDomainLoading.value = true;
     try {

web/composables/useIPResults.js

@@ -341,7 +341,8 @@ export function renderTableCell(col, row, i) {
 export function extractIPs(text) {
     const ipv4 = /\b(25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\.(25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\.(25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\.(25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\b/g;
     const ipv6 = /\b([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}\b/g;
-    const found = [...(text.match(ipv4) || []), ...(text.match(ipv6) || [])];
+    const normalized = String(text || '').replace(/\[\.\]/g, '.');
+    const found = [...(normalized.match(ipv4) || []), ...(normalized.match(ipv6) || [])];
     return [...new Map(found.map(ip => [ip, ip])).values()];
 }
 

web/index.html

@@ -486,7 +486,7 @@
       border: 1px solid rgba(255,255,255,0.10); border-radius: 8px;
       color: #f0f1f5; font-family: 'JetBrains Mono', monospace;
       font-size: 0.82rem; padding: 11px 14px;
-      resize: none; min-height: 46px; outline: none;
+      resize: vertical; min-height: 46px; outline: none;
       transition: border-color 0.2s, box-shadow 0.2s; line-height: 1.5;
     }
     .scan-input:focus { border-color: rgba(129,140,248,0.4); box-shadow: 0 0 0 3px rgba(129,140,248,0.08); }