Keyless OSINT lookups. Every query is rate-limited via the shared recon budget and logged to recon_log for audit.
Domain registration data via rdap.org.
DNS-over-HTTPS via Cloudflare 1.1.1.1.
Geolocation + ASN via ip-api.com (keyless, 45 req/min).
NIST NVD 2.0 — vulnerability metadata + CVSS.
Recent certificates for *.domain via crt.sh.
Balance + tx count via Blockstream.info; cross-checked against the OFAC SDN sanctioned crypto list.
Balance + tx count via Blockscout; cross-checked against the OFAC SDN sanctioned crypto list.
Output appears herePure client-side. JWT signatures are NOT verified — header + payload only.