Back to All Tools
OSINT & Origin Reconnaissance Engine

Real IP & Origin Reconnaissance Finder

Unmask origin server IP addresses hidden behind reverse proxies (Cloudflare, AWS CloudFront, Akamai). Audit unproxied subdomains, MX records, and SPF policies to prevent direct-to-origin DDoS and security bypasses.

Real IP & Origin Reconnaissance Inspector

OSINT & ASN Engine

Unmask origin IPs behind CDNs/WAFs, audit unproxied subdomains, and inspect client public IPv4/IPv6 geolocation.

Try samples:
Origin reconnaissance probes public DNS subdomains, MX records, and SPF policies without intrusive port scanning.
RFC 1035 / DoH Resolver

Subdomain & MX Probing

Scans common unproxied subdomains (origin., direct., cpanel., dev.) and mail exchanges that inadvertently expose direct origin server IPs.

ASN & CDN Fingerprinting

Matches discovered addresses against Cloudflare, Fastly, Akamai, and AWS ASNs to separate CDN edge nodes from genuine backend infrastructure.

Client Public IP & Geo

1-click detection of your public IPv4/IPv6, ISP, Autonomous System (ASN), country, city, coordinates, and reverse proxy headers.