ReconLab Attack Surface

One-shot public intel: DNS, TLS, headers, exposure, reputation, cloud, findings, causes, fixes.

Preparing target...

Public-source scan / 0.0s elapsed

Preparing target 0%

Threat Overview

0
/ 100
UNKNOWN
Security Score
Risk Indicators
    -
    Subdomains
    -
    Technologies
    -
    Historic URLs
    Score Breakdown
    Waiting

    Owner Action Checklist

    Findings & Remediation

    Evidence Locker

    0 items

    API Enrichment Matrix

    No login / no storage

    WHOIS Record

    Registrar
    -
    Registrant Org
    -
    Created
    -
    Expires
    -
    DNSSEC
    -
    Domain Status
    -
    Nameservers

    DNS Taxonomy

    Record Distribution

    Subdomains

    0 detected
    Subdomain Status Resolved IP

    API Endpoint Discovery

    0 detected

    Probing subdomains for common API documentation and entry points (e.g., Swagger, OpenAPI, GraphQL).

    Analyzing subdomain attack surface for APIs...

    Infrastructure & Geo

    Primary Origin IP
    —
    Geo Location
    —
    Country Flag
    —
    Provider / ASN
    —
    Hosting Icon
    Geographic map data loading...

    ASN & BGP Routing

    Regional Registry (RIR)
    —
    Prefixes (CIDR)
    —
    Upstream / Peer Networks

    HTTP Security Headers

    Security Header Status Severity
    Raw Header Dump
    
                        
    
                    
    

                    
                    
    
                        
    
                            
    
                                
    Bug
                                    Bounty Status
    
                                
    
                                    
    No program data available.
    
                                
    
                            
    
                            
    
                                
    Abuse Intelligence
                                
    
                                
    
                                    
    
                                        
    
                                        
    
                                            
    0%
    
                                            
    AbuseIPDB Confidence Score
    
                                        
    
                                    
    
                                
    
                            
    
                        
    
                    
    

                    
                    
    
                        
    TLS / SSL
                            Certificate
    
                        
    
                            
    
                                
    
                                    
    Certificate Authority
    
                                    
    —
    
                                    
    
                                
    
                            
    
                            
    
                                
    
                                    
    Subject Alternative Names (SAN)
    
                                    
    
                                
    
                            
    
                            
    
                                
    
                                    
    Validity Period
    
                                    
    —
    
                                    
    Signature Algo
    
                                    
    —
    
                                
    
                            
    
                        
    
                    
    

                    
                    
    
                        
    Tech Stack
                            & WAF Fingerprint
    
                        
    
                            
    
                                
    WAF / CDN Protection
    
                                
    
                                    
    
                                        
    
                                        
    
                                            
    None
                                            
    
                                            
    Cloud Edge Analysis
    
                                        
    
                                    
    
                                
    
                            
    
                            
    
                                
    Detected Signatures
    
                                
    
                                    
    
                                
    
                            
    
                            
    
                                
    CORS Audit
    
                                
    
                                    
    
                                        
    
                                        
    
                                            
    —
    
                                            
    Origin Test
    
                                        
    
                                    
    
                                
    
                            
    
                        
    
                    
    

                    
                    
    
                        
    Deep Path
                            & File Indexing
    
                        
    
                            
    
                                
    Robots.txt
                                    Architecture
    
                                
    
                                    
      
                                
      
                                
      Sitemap.xml
                                    Depth
      
                                
      
                                    
      
                                    
      
                                        
      0
                                            Routes
      
                                        
      Crawled via Sitemap Tree
      
                                    
      
                                
      
                                
      
                                    
        
                                        
      • No sitemap paths discovered yet.
        • 
                                    
      
                                
      
                            
      
                            
      
                                
      Critical
                                    Remote Files
      
                                
      
                                    
        
                                
        
                            
        
                        
        
                    
        

                    
                    
        
                        
        Historical Endpoints
        
                        
        Historical URLs with query parameters. Review for potential
                            injection points.
        
                        
        
                            
        
                                
                                    
        
                                        Historical URL
                                        Risk Param
                                    
        
                                        
                                
                            
        
                        
        
                    
        

                    
                    
        
                        
        
                            Spoofing & Phishing
                            Architecture
                        
        
                        
        
                            
        
                                
        
                                    
        
                                        SPF icon
                                        
        SPF Policy (TXT)
        
                                    
        
                                    
        —
        
                                
        
                            
        
                            
        
                                
        
                                    
        
                                        
                                        
        DMARC Enforcement (TXT)
        
                                    
        
                                    
        -
        
                                
        
                            
        
                            
        
                                
        
                                    
        
                                    
        
                                    
        
                                        
        Email Spoofing
                                            Risk
        
                                        
        -
        
                                        
        Analyzing SPF & DMARC
                                            posture...
        
                                    
        
                                
        
                            
        
                        
        
                    
        

                    
                    
        
                        
        
                            
                            
        
                                
        Subdomain Takeover
                                    Detection
        
                                
        
                                    
        No vulnerabilities found in the
                                        current session.
        
                                
        
                            
        
                            
                            
        
                                
        Active
                                    Bug Bounty Scope
        
                                
        
                                    
        Searching HackerOne & Bugcrowd
                                        datasets...
        
                                
        
                            
        
                            
                            
        
                                
        
                                    
        
                                        
        Abuse & Reputation
                                            (AbuseIPDB)
        
                                        
        
                                    
        
                                    
        
                                        
        Favicon Hash
                                            Clustering
        
                                        
        
                                    
        
                                
        
                            
        
                        
        
                    
        

                    
                    
        
                        
        
                            
        Cloud
                                Ecosystem Mapping
        
                            
        Scanning Assets...
        
                        
        
                        
        
                            
        
                                
                                
        Fingerprinting cloud providers and physical data
                                    centers...
        
                            
        
                        
        
                    
        

                    
                    
        
                        
        
                            
        Historical Data & Archive
                            
        
                            Forensic History
                        
        
                        
        
                        
        
                        
        
                            
        Initializing historical forensic analysis...
                            
        
                        
        
                    
        

                    
                    
        
                        
        
                            
        IP Intelligence
                            
        
                            0 IPs
                        
        
                        
        
                            
        Run a scan to populate IP intelligence
                                data.
        
                        
        
                    
        

                    
                    
        
                        
        
                            
        
                                
        
                                    
        Vulnerability Feed
        
                                    0 Detected
                                
        
                                
        
                                    
        Scanning infrastructure for
                                        known CVE correlations...
        
                                
        
                            
        
                            
        
                                
        Passive Ports
        
                                
        
                            
        
                        
        
                    
        

                    
                    
        
                        
        
                            
        
                                
        WAF Discovery
        
                                
        
                                    
        SCANNING
        
                                    
        Checking for Cloudflare, Akamai, AWS
                                        WAF...
        
                                
        
                            
        
                            
        
                                
        Lookalike Domains
                                
        
                                
        
                            
        
                        
        
                    
        

                    
                    
        
                        
        
                            
        Digital Footprint &
                                Personnel
        
                            Identity
                                Intelligence
                        
        
                        
        
                            
        
                                
        
                                    
        Discovery of professional contacts
                                        and public identities associated with the domain.
        
                                    
        
                                        
        Waiting for identity
                                            data...
        
                                    
        
                                
        
                            
        
                            
        
                                
        Email Surface
                                
        
                                
        
                            
        
                        
        
                    
        

                    
                    
        
                        
        Automated Reputation & Risk
                        
        
                        
        
                            
                            
        
                                
        
                                    
        GreyNoise
        
                                    
        NO DATA
        
                                
        
                            
        
                            
        
                                
        
                                    
        AbuseIPDB
        
                                    
        NO DATA
        
                                
        
                            
        
                            
        
                                
        
                                    
        Pulsedive
        
                                    
        NO DATA
        
                                
        
                            
        
                            
        
                                
        
                                    
        VirusTotal
        
                                    
        NO DATA
        
                                
        
                            
        
                        
        
                    
        

                    
                    
        
                        
        
                            
        
                                
        Network Graph Analysis
                                
        
                                
        Flowchart visualization of domains, IPs,
                                    nameservers, mail, subdomains, and technologies.
        
                            
        
                            
        
                                
                                
                                
                                
                                
                                
                            
        
                        
        

                        
        
                        
        
                            
                            
        
                                
        
                                    Entity Filter
                                
        
                                
        
                                    
        
                                        
                                        
                                    
        
                                    
        
                                        
        INFRASTRUCTURE NODES
        
                                        
         Root Domain
        
                                        
         IP Address
        
                                        
         Subdomain
        
                                        
         Nameserver
        
                                        
         Technology
        
                                    
        
                                    
        
                                        
        TOGGLE GROUPS
        
                                        
        
                                            
                                            
                                            
                                            
                                            
                                        
        
                                    
        
                                    
        
                                        Click entities for metadata. Toggle groups to focus analysis. Switch to
                                        free-flow for Maltego-style clustering.
                                    
        
                                
        
                            
        

                            
                            
        

                            
                            
        
                                
        
                                    
        
                                        
        Node Intel
        
                                        
                                    
        
                                
        
                                
        
                                    
        
                                        
                                        
        Retrieving node intelligence...
        
                                    
        
                                
        
                            
        
                        
        
                    
        

                    
                    
        
                        
        
                            
        External Intelligence
        
                            Public Recon Only
                        
        
                        
                        
        
                            
                        
        
                    
        

                    
                    
        
                        
        
                            
        Module
                                Health