QXSINT Emblem
QXSINT
OSINT & Threat Intelligence
QXSINT Emblem
QXSINT v1.1
ENTITY & INFRASTRUCTURE MATRIX
LIVE · REAL-TIME OSINT & INFRASTRUCTURE ENGINE

Every breach, every trace

QXSINT v1.1 — Advanced cyber reconnaissance and entity intelligence platform with built-in TLS, CVE, URL trace, ASN, breach, and infrastructure scanners.

AUTO-DETECTS VECTOR · CLIENT-SIDE SHA-256 OPSEC · 0ms INDEXMAP
ENTER DASHBOARD
QXSINT Core
QXSINT 12 APPS ORBITING
CLICK ANY ORBITING APP TO PIVOT GRAPH
SCROLL TO EXPLORE
QXSINT THREAT INTELLIGENCE & RECONNAISSANCE
v1.1 · CORE MODULES
+ + + +
GEOINT & INDEXMAP
TARGET LOCK
51.5074° N, 0.1278° W
SAR ORBITAL DOME
SECTOR: LONDON ELEV: 11.0m ASL
SUNCALC ELEV
60.05° AZIMUTH
HARDWARE AUDIT
Sony ILCE-7M4
INDEXMAP ENGINE 0ms QUOTA-FREE GIS
+ + + +
IDENTITY GRAPH
99.4% MATCH
EMAIL ANCHOR: johndoe@gmail.com (Gaia ID Verified) HOP 04
CROSS-PLATFORM PIVOTS STEAM · GITHUB · DISCORD
+ + + +
STEALER TELEMETRY
TOR / I2P RELAY ACTIVE VIDAR REDLINE
COMPROMISED HOST BUILD
Windows 11 Pro 22621 x64 HWID LOCKED
SHA-256 PAYLOAD CHECKSUM VERIFIED
6228253239893368582685553892535352588386862
EXPOSURE SEVERITY INDEX 94.8 / 100
LEAKED CREDENTIALS 42 TOKENS · ZERO-LOG VAULT
johndoe@gmail.com LIVE GRAPH
6 items · Zero-distortion neural splines active
Drag any node to rearrange · Click node to inspect decrypted trace
ROOT_SEED | johndoe@gmail.com (6 correlated vectors)
SHA-256: 62282532...862f9a4b
RELEASE CHANGELOG · v1.1

What's new ?

VERSION 1.1 · LIVE UPDATE
New Functions & Built-In Modules Added
  • + TLS Certificate & Web Security Inspector: Live TLS handshake details (protocol, cipher, issuer CA, days remaining, SHA-256 fingerprint), HTTP security header scoring, server/framework fingerprinting, and robots.txt / security.txt checks.
  • + CVE & CISA KEV Exploit Lookup: Direct CVE vulnerability checks with CVSS score, severity vector details, vulnerability summary, and active exploitation status.
  • + Safe URL Redirect Tracer: Traces HTTP redirect chains hop-by-hop, resolves destination IPs, and correlates web safety signals cleanly inside QXSINT.
  • + ASN / BGP Prefixes & Reverse IP Discovery: Inspects announced CIDR ranges for Autonomous Systems and discovers co-hosted domains on IPv4 hosts.
  • + Email Auth, DNSBL & Subdomain Expansion: Added SPF/DMARC/DKIM probing, DNS blacklist lookups, merged passive subdomain discovery, GeoIP VPN/Tor detection, hash breach exposure checking, and direct Paste Raw ULP vault ingestion.
Bug Fixes & Core Improvements
  • ✓ Removed Fake & Placeholder Outputs: Stripped all mock breach rows, fake machine screenshot overlays, placeholder card fallbacks, and inflated registration counters across the engine.
  • ✓ Telemetry Map 403 Fix: Replaced restricted map tiles with dark raster maps so host geolocation renders without lockouts or errors.
  • ✓ Removed Credit Limits & External Redirect Directory: Deleted locked deep-scan credit buttons and removed external tool link lists so all layers run directly inside QXSINT.
  • ✓ Breach Grouping, Noise Filtering & Copy Fix: Tightened exact email/domain filtering to stop cross-domain leak mixups, filtered malformed combo lines, and enabled domain-grouped password view with Copy All and full selection support.
  • ✓ Auto-Recovery & Edge Tunnel Failover: Added automated origin health monitoring, protocol failover, automatic mirror backup routing, and scheduled vault backups.
ACTIVE DEFENSE MATRIX

Perimeter Immunity & Cryptographic Hardening

Multi-layered boundary defense engineered to resist volumetric DDoS, web application exploits, automated botnets, and forensic inspection.

4 DEFENSE TIERS ACTIVE

DDoS Immunity & Perimeter

TIER 01
  • • Cloudflare Tunnel (cloudflared): Completely hides the origin server's public IP address from all external reconnaissance.
  • • Origin Cloaking: Restricting server access exclusively to Cloudflare edge proxy IPs and private loopbacks.
  • • Under Attack Mode: High-security challenge mode ready for instant mitigation during active volumetric floods.
  • • Cloudflare Turnstile: Non-intrusive CAPTCHA stopping automated scripts and bot swarms without user friction.
  • • Anycast DNS Routing: Distributes network traffic across 330+ edge PoPs globally to absorb heavy L3/L4 layer floods.

Anti-Exploit & WAF Defense

TIER 02
  • • Cloudflare WAF Managed Rulesets: Continuous real-time mitigation against OWASP Top 10 web vulnerabilities.
  • • ModSecurity & Coraza L7 Filter: In-process deep packet inspection on all query strings, headers, and payloads.
  • • Parameterized Database Queries: Cryptographic separation of query logic and parameters making SQLi exploits mathematically impossible.
  • • Input Sanitization & Whitelisting: Strict regex scrubbing preventing Remote Code Execution (RCE) and prototype poisoning.
  • • Server Banner Obfuscation: Full masking of web server versions, runtimes, and operating system identifiers.

Rate Limiting & Threat Controls

TIER 03
  • • Adaptive Rate Limiting: Granular limits per IP across auth (60/min), scans (300/min), and AI pipelines (20/min).
  • • Cloudflare Bot Management: Machine-learning behavioral scoring neutralizing malicious headless scrapers.
  • • ASN Blocking: Hard blocks against bulk hosting provider ASNs frequently weaponized by commercial botnets.
  • • Geo-IP Fencing: Fast regional routing and perimeter challenges for anomalous high-threat origins.

Infrastructure Hardening & Cryptographic Sealing

TIER 04
  • • SSH Key-Only Authentication: Password logins completely disabled at the system level to halt credential brute-forcing.
  • • Fail2ban & CrowdSec: Automated local intrusion detection permanently jailing scanning IPs and port probes.
  • • UFW & iptables Hardening: Host-level kernel firewall sealing all ingress ports except the active local loopback.
  • • Zero-Leak Source Concealment: Source files, `.ts`, `.env`, `.git`, and sourcemaps strictly blocked from external inspection.
  • • AES-256 & Scrypt Encryption: User email encrypted at rest, passwords scrypt-hashed, sessions isolated with HttpOnly cookies.

Perimeter Telemetry & WAF Scanner Audit

Automated live fingerprint from external security crawlers & WAF detectors

PASS · 24 VECTORS AUDITED
> ✅ Cloudflare CDN ACTIVE
> ❌ Cloudflare UAM / JS Challenge DISABLED
> ✅ Cloudflare Turnstile ACTIVE
> ❌ Akamai WAF / CDN OFF
> ❌ Sucuri WAF OFF
> ❌ Imperva / Incapsula OFF
> ❌ AWS CloudFront / AWS WAF OFF
> ❌ Azure Front Door / Azure WAF OFF
> ❌ Fastly CDN OFF
> ❌ Google reCAPTCHA OFF
> ❌ hCaptcha OFF
> ❌ Captcha (Generic) OFF
> ❌ Rate Limiting DYNAMIC
> ❌ Bot Protection UNBLOCKED
> ❌ DDoS Protection ANYCAST L3/L4
> ❌ Generic WAF L7 IN-PROCESS
> ✅ Content-Security-Policy (CSP) ENFORCED
> ✅ X-Frame-Options DENY
> ✅ X-XSS-Protection 1; MODE=BLOCK
> ✅ HSTS MAX-AGE=15552000
> ✅ Referrer-Policy STRICT-ORIGIN
> ✅ Permissions-Policy SEALED
> ❌ HTTP Auth / Basic Auth OFF (MODERN AES)
> ❌ Geo Blocking GLOBAL ACCESS
ARCHITECTURAL BENCHMARK

Legacy Fragmented OSINT vs. QXSINT Unified Matrix

11 RECONNAISSANCE DISCIPLINES
CAPABILITY VECTOR LEGACY FRAGMENTED TOOLS QXSINT UNIFIED OPERATING SYSTEM
Geospatial & IndexMap Paid API rate limits & tile lockouts 0ms Quota-Free GIS · SunCalc 60.05° Audit
Entity Graph Pivoting Manual CSV exports across CLI scripts Real-Time Node Splines · 1,067 Engines
Infostealer Telemetry Delayed static breach dumps Live ULP Vault Ingestion · Exact Domain-Grouped Breach Filtering
Client-Side OPSEC Plaintext third-party query logging Zero-Log SHA-256 Hashed Memory Isolation
TELEGRAM @Qxcyber666