Investigate public information without handing over your case.

How it works

1. 1

   Paste anything

   An email, username, domain, IP address, phone number, URL, coordinates or wallet address. Or drop a photo or PDF. The type is detected for you.

2. 2

   Run what applies

   On-device checks run at once. Lookups that contact an outside service wait for your click, and name the service first.

3. 3

   Follow the leads

   Addresses, domains and contacts found in a result become one-click leads. Keep it all in a case, add notes, and export it as one file.

What you can rely on

No account, no server

Cases live in your browser's own storage. There is nothing to sign up for and no copy of your work on our side.

Nothing is sent without a click

Adding something runs only checks that stay on your device. Every other check waits for you.

You see where it went

Each result records its source, the time in UTC and every service that was contacted.

No made-up results

Tools this version cannot run are listed with the reason, and stay disabled.

One thing to keep in mind: keeping a case on your device does not hide a lookup from the service that answers it. A DNS lookup still reaches the DNS service. A VPN hides who is asking, not what is asked.

Tools that work today

• DNS records

  Address, mail and name server records, with SPF and DMARC

• Registration lookup

  Who registered a domain or IP range, and when

• Subdomains from certificates

  Names seen in public certificate logs

• Archived copy check

  Whether the Wayback Machine holds a snapshot

• IP location and network

  Approximate location and network owner

• Image metadata and GPS

  Camera, software, dates and embedded location, read on your device

• Phone number details

  Country, formats and line type, worked out on your device

• Email permutations

  Likely address formats for a person at a domain

• Search query builder

  Ready-made search engine queries for each kind of input

Some sources refuse requests from web pages. With an optional relay, a small server you run yourself, the workspace can also follow a link's redirects hop by hop, look up a site's scan history on urlscan.io, and check which sites have an account using a handle. A relay can also keep your network address away from every source. Checks that need your own API key, such as breach lookups, are listed in the workspace but not available yet.