Utilizes data from Certificate Transparency, scans.io, Shodan, Maxmind, Netcraft, Bing, Common Crawl, Google, and other search engines to gather information.
02
DNS record collection
Gathers standard DNS records including Domain Servers (NS Records) and Mail Servers (MX Records).
03
Subdomain enumeration
Collects sub-domains through a host record search API.
04
Network banner collection
Gathers network banners for Internet-facing services such as web servers, FTP servers, Remote Desktop, and SSH.
05
Reverse Whois search
Performs reverse Whois searches for email addresses to find related domains.
Your plan caps how many capabilities are shown — upgrade to see the full list
