RECON Toolkit

Keyless OSINT lookups. Every query is rate-limited via the shared recon budget and logged to recon_log for audit.

WHOIS / RDAP

Domain registration data via rdap.org.

DNS

DNS-over-HTTPS via Cloudflare 1.1.1.1.

IP intelligence

Geolocation + ASN via ip-api.com (keyless, 45 req/min).

CVE lookup

NIST NVD 2.0 — vulnerability metadata + CVSS.

SSL / cert transparency

Recent certificates for *.domain via crt.sh.

BTC wallet trace

Balance + tx count via Blockstream.info; cross-checked against the OFAC SDN sanctioned crypto list.

ETH wallet trace

Balance + tx count via Blockscout; cross-checked against the OFAC SDN sanctioned crypto list.

Payload Inspector

Output appears here

Pure client-side. JWT signatures are NOT verified — header + payload only.