Auto-detects target type, fans out to every module in parallel, synthesizes a unified 0-100 risk score + narrative threat dossier.
200+ social network enumeration, username correlation, and digital fingerprint analysis.
Cross-platform identity correlation connecting aliases, handles, avatars, and linked bios.
HaveIBeenPwned & paste-dump aggregator exposing compromised credentials & historical data leaks.
Phone & email enumeration discovering linked platforms, accounts, and messaging apps.
MX validity, SPF/DMARC posture, disposable provider detection, Gravatar identity bind, and 0-100 deliverability trust score.
GitHub OSINT via API: public commit-email harvesting, top repos, 24h activity heatmap, org enumeration.
Reddit, HackerNews, X/Twitter & News aggregator gathering real-time sentiment and chatter.
AbuseIPDB, VirusTotal, and URLhaus reputation checking for threat scores and malicious history.
Multi-site paste hunter across 12 paste services (Pastebin, Ghostbin, Rentry, Paste.ee, 0bin) auto-flagging critical hits.
Ahmia onion search engine integration + active ransomware leak site victim feed monitor.
Wayback Machine CDX timeline analyzing historical web snapshots and auto-flagging sensitive leaks (.env, .git, backups).
WHOIS RDAP, 7 DNS record types, SPF/DMARC/DKIM grading, HTTP security headers, TLS metadata, crt.sh subdomains.
Async port scanning, active service identification, and interactive network topology graph generation.
Full SSL/TLS certificate chain analysis, SAN domain extraction, expiration alerts, and issuer verification.
BTC & ETH blockchain wallet reconnaissance, balance history, known entity labels, and transaction tree mapping.
Extracts hidden EXIF metadata from target images including camera model, exposure settings, timestamp, and exact GPS coordinates.
Automated dork query generator for Google, Shodan, GitHub, and Censys to discover exposed sensitive assets.
Multi-engine coordinate intelligence, satellite imagery matching, and location metadata lookup.
Live OpenSky network integration for tracking aircraft telemetry, flight histories, and registered target transponders.
Composite indicator of compromise aggregator tracking zero-day exploits, CVEs, and high-profile target exposure.