/
Passive recon, indexed in real-time
Type a domain. Watch 13 phases of OSINT data — WHOIS, DNS, subdomains, archives, repos, threat intel — stream into a single searchable index. No probes, no noise.
Live streaming
Results stream in via SSE the moment each source returns — no waiting for the slowest API.
13 recon phases
WHOIS, DNS, subdomains, wayback, GitHub, search dorks, threat intel, ASN, abuse — all in one pass.
Cross-phase hit index
Every sensitive finding is flagged and indexed in one searchable list across all phases.
Zero active probing
Pure passive recon. Only third-party datasets, public APIs, and DoH — never touches the target.
Sources
Aggregated public datasets — zero direct contact with the target
crt.shOTXurlscanRDAPWaybackCloudflare DoHBGPViewAbuseIPDBAhmia