OSINT reconnaissance for domains, IPs, and digital risk.
Investigate domains, IP addresses, email security, usernames, phone numbers, wildcard infrastructure, and vehicle VINs using only the threat-intelligence modules relevant to the target.
Sign in requiredEvery query is tied to an authenticated account for audit accountability.
Choose recon modulesOnly selected sources will run for this query.
Email exposure searches accept authorized organizational or custom-domain addresses only. Public free-mail domains—including Gmail, Yahoo, Outlook, Hotmail, and Proton Mail—are blocked.
ACCOUNT REQUIREDLIVE DNSPRIVATE BY DESIGNTRANSPARENT SCORING
02 RAW EMAIL ANALYZER
Trace an email from headers to delivery.
Paste the complete raw message source to inspect sender identity, delivery hops, timestamps, TLS transport, SPF, DKIM, DMARC, reply paths, and message metadata.
ANALYZED LOCALLY · NOT UPLOADED
Review and remove passwords, active sign-in codes, or other secrets before sharing the source with anyone.
VISUAL DELIVERY PATH
How this message traveled
Reviewing security
Security checks confirm domain authorization and transport protection. They do not guarantee that links, attachments, or message content are harmless.
INBOX PLACEMENT ESTIMATE
Spam-routing characteristics
Calculating
0/ 100 risk
This is a header-and-content estimate. Mailbox providers also use private IP/domain reputation, complaint rates, engagement, volume patterns, allowlists, and recipient-level preferences that cannot be recovered from a raw message.
ID
Message identity & timing
AU
Authentication & transport
RT
Delivery route
Received headers are normally listed newest first. The analyzer presents the likely route oldest first. Headers added before the first trusted receiving server can be forged.
FL
Analyst observations
Building intelligence reportPreparing selected modules…Selected modules run in parallelStatus: Target validation
0%
02 ANALYSIS REPORT
D
Analysis report
DOMAIN
OVERALL VERDICT
0/100
LOW RISK
No immediate threats detected
SIGNALS
—risk indicators found
S
High-level target summary
Observed pros and cons
DNS
Domain & DNS infrastructure map
Building map
The first technical view of the domain: authoritative DNS, website aliases, mail routing, resolved addresses, and registered networks.
This is a public DNS snapshot. Records can change, and public DNS cannot enumerate every unknown subdomain.
VIN
Vehicle intelligence
Decoded
Safety intelligence for this model
Official history and buyer verification
VIN decoding identifies manufacturer specifications. Accident, title, odometer, ownership, and sale-price history require participating government or licensed commercial databases.
A
Cross-reference results
Core + optional premium intelligence
B
Infrastructure
IP addresses
—
Nameservers
—
Registrar
—
Registrar service
—
Cloud platforms
—
Registered
—
Last WHOIS update
—
Registration expires
—
Domain status
—
C
Findings
0 findings
D
Automatic subdomain discovery
0 hosts
Public certificate-transparency records and a bounded common-service DNS discovery pass, validated with live DNS and enriched with IP geolocation.
Host / subdomain
Discovery source
IP address
Location
Network
MAP
IP country & world regions
Checking
F1
MX records · mail routing
Checking
Published mail exchangers in delivery priority order. A lower preference number is attempted first.
Priority
Mail exchanger
Resolved addresses
MX DNS check
F2
Email authentication · DMARC, DKIM & SPF
Checking
SPF POLICY
—
DMARC POLICY
—
DKIM SELECTORS
—
BLACKLIST STATUS
—
DT
DNS trust & mail transport
Checking
DNSSEC and certificate-issuance controls plus inbound-mail TLS policy and reporting.
WEB
HTTP security & application hygiene
Checking
Bounded HTTPS checks for redirects, browser protections, cookies, cross-origin policy, security contact, and exposed documentation.
RH
Shared-IP website hosting
Checking
Passive reverse-IP research for other public domains observed on the same IPv4 address. Shared CDN and proxy addresses may represent unrelated customers.
KEV
Known-exploited vulnerability priority
Checking
Observed Shodan CVEs correlated with CISA’s Known Exploited Vulnerabilities catalog. A match increases remediation priority; it does not prove exploitation.
AS
Attack-surface safeguards
Checking
Passive evidence for dangling cloud aliases, storage naming, technology exposure, asset history, and brand-lookalike risk.
U
Username OSINT
Checking
Passive public-profile discovery using WhatsMyName and Sherlock definitions. A shared username does not prove a shared identity.
PH
Reverse phone intelligence
Checking
Authenticated Trestle Reverse Phone 3.2 lookup. Results are informational, may be outdated, and must not be used for stalking, harassment, or eligibility decisions.
G
Observed internet exposure
Passive Shodan InternetDB
Previously observed public ports and vulnerabilities. No active port scan is launched.
IP
IP privacy & abuse intelligence
Checking
Passive AbuseIPDB 90-day reputation, IPinfo privacy classification, ASN context, GreyNoise internet-scanner observations, Spamhaus DNSBL responses, and LevelBlue OTX pulse history.
VT
VirusTotal reputation
Checking
Passive provider intelligence for the submitted domain or IP. Detection counts reflect vendor observations and require analyst validation.
WX
WhoisXML intelligence
Checking
Commercial domain, DNS, reputation, categorization, contact, availability, email, IP geolocation, netblock, and website screenshot enrichment from active WhoisXML subscriptions.
H
Complete DNS dataset
0 records
Native DNS answers enriched with resolved host IPs, target networks, ASNs, and countries.
Record
Host
IP / target
ASN / network
Cloud platform
Country
TTL
TLS
TLS, SSL & certificate research
Checking
HTTPS reachability across discovered hosts, certificate-transparency dates, and cached SSL Labs protocol evidence when available.
Certificate / covered domains
HTTPS
Issued
Expires
Issuer
US
URLScan browser intelligence
Premium
A private URLScan session is used for private queries; public-history queries use unlisted visibility. The browser session summarizes contacted infrastructure, technologies, certificates, redirects, and automated verdicts. Results can take over 30 seconds.
Detected technologies
Contacted infrastructure
Certificate subject
Issuer
Valid from
Valid to
CO
Company identity & news
Checking
PE
Public personnel references
Checking
Public search-index references to LinkedIn profiles. Employment claims are self-described and must be independently verified.
I
DNSDumpster intelligence
Checking
Official DNSDumpster API results. An account API key is required by DNSDumpster.
Record
Host
IP / target
ASN / country
Open services
J
Registration contacts
0 contacts
Publicly available RDAP and WHOIS registration, administrative, technical, abuse, and registrar contacts. Privacy-redacted data cannot be recovered.
WHOIS API was not selected.
WHOIS history was not selected.
K
Historical breach exposure
Checking
1/10 exposure
No public breach match detected
Cross-reference of the HIBP public breach catalog. Newest incidents appear first.
Breach
Date
Affected accounts
Exposed data
Exposed account referencesNot selected
Authorized HIBP domain search only. Account aliases are masked; passwords, hashes, tokens, and leaked database contents are never retrieved or displayed.
Submitted email exposureNot selected
Authenticated HIBP search for the submitted email address. The address is masked in the report; no passwords, hashes, or leaked records are retrieved.
Leaked-password comparisonReady
Optional manual comparison against Pwned Passwords using k-anonymity. Only the first five characters of its SHA-1 hash leave this browser. The password is never saved, logged, or connected to an email or breach.
No password checked.
L
Defensive Google queries
Open-source search
Prebuilt passive searches for publicly indexed assets and notices. Results open in Google.
E
Threat-intelligence pivots
External sources
Open this domain in trusted platforms for licensed or account-based intelligence.
PR
External provider reconnaissance
Preparing
Exact-target research links. Provider authentication, licensing, and live-data availability remain controlled by each service.
R
Recommendations
High-level next steps
A complete, nontechnical record of actionable findings, reviewed controls, and checks where nothing was found.
Priority
Report section
Count
Overview
General recommendation
Difficulty
Detailed technical remediation steps and the technical PDF guide are available with Professional and Advanced Intelligence plans.
TR
Technical remediation plan
PREMIUM REPORT
Prioritized implementation guidance generated from the findings in this scan. Verify changes in a maintenance window and keep a rollback path for production services.
Automated checks are informational and may contain false positives or negatives. A clean report does not guarantee a site is safe.
04 ACTIVITY DASHBOARD
Query activity
Anonymous completed-query totals from this browser, including private searches.
0LAST 24 HOURS
0LAST HOUR
0 queries shown
Queries by dayRolling 7-day view
05 VEHICLE DATABASE
Vehicle search history
Only public VIN queries are stored in this browser. Private VIN searches are never added.
No public vehicle searches yet.
06 SUBSCRIPTIONS
Choose your query allowance
CURRENT ACCESS5 of 5 queries leftfive total free queries
FREE
Visitor access
$0
Five total investigations for visitors and registered free accounts.
