The recon suite
Subdomain & DNS discovery
Enumerate subdomains and DNS records to see the hosts and services that make up your public footprint.
- Subdomain enumeration
- DNS record collection
WHOIS lookup
Pull registration and ownership metadata for a domain from public WHOIS records.
Typosquat & lookalike detection
Find registered lookalike and typosquatting domains that could be used to impersonate your brand.
Staff-email discovery
Surface email addresses and staff identities exposed in public sources, so you can understand your social-engineering surface.
Archived endpoints
Recover historical and archived URLs for a domain to find old paths and endpoints that may still be reachable.
Safe by design — passive only
Because these checks read public sources and never send traffic to the target, the recon suite is safe to run on any domain you want to investigate.
- Queries public sources only
- Nothing sent to the target