Passive Recon β 100% Browser-Based
Works on GitHub Pages with zero backend. Discovers subdomains via certificate transparency, resolves them with DNS-over-HTTPS, and pulls screenshots from URLScan.io β all from your browser.
Sources used:
π crt.sh β SSL certificate transparency logs
π Google DNS-over-HTTPS β live DNS resolution
πΈ URLScan.io β existing screenshot database
π Wayback Machine CDX β historical URL archive
No backend needed
No API keys
Works on GitHub Pages
Live DNS resolution
Real screenshots
CSV / JSON / TXT export