QXSINT Emblem
QXSINT
OSINT & Threat Intelligence
QXSINT Emblem
QXSINT v1.1
ENTITY & INFRASTRUCTURE MATRIX
LIVE · REAL-TIME OSINT & INFRASTRUCTURE ENGINE

Every breach, every trace

QXSINT v1.1 — Advanced cyber reconnaissance and entity intelligence platform with built-in TLS, CVE, URL trace, ASN, breach, and infrastructure scanners.

AUTO-DETECTS VECTOR · CLIENT-SIDE SHA-256 OPSEC · 0ms INDEXMAP
QXSINT Core
QXSINT 12 APPS ORBITING
CLICK ANY ORBITING APP TO PIVOT GRAPH
QXSINT THREAT INTELLIGENCE & RECONNAISSANCE
v1.1 · CORE MODULES
+ + + +
GEOINT & INDEXMAP
TARGET LOCK
51.5074° N, 0.1278° W
SAR ORBITAL DOME
SECTOR: LONDON ELEV: 11.0m ASL
SUNCALC ELEV
60.05° AZIMUTH
HARDWARE AUDIT
Sony ILCE-7M4
INDEXMAP ENGINE 0ms QUOTA-FREE GIS
+ + + +
IDENTITY GRAPH
99.4% MATCH
EMAIL ANCHOR: johndoe@gmail.com (Gaia ID Verified) HOP 04
CROSS-PLATFORM PIVOTS STEAM · GITHUB · DISCORD
+ + + +
STEALER TELEMETRY
TOR / I2P RELAY ACTIVE VIDAR REDLINE
COMPROMISED HOST BUILD
Windows 11 Pro 22621 x64 HWID LOCKED
SHA-256 PAYLOAD CHECKSUM VERIFIED
6228253239893368582685553892535352588386862
EXPOSURE SEVERITY INDEX 94.8 / 100
LEAKED CREDENTIALS 42 TOKENS · ZERO-LOG VAULT
johndoe@gmail.com LIVE GRAPH
6 items · Zero-distortion neural splines active
Drag any node to rearrange · Click node to inspect decrypted trace
ROOT_SEED | johndoe@gmail.com (6 correlated vectors)
SHA-256: 62282532...862f9a4b
RELEASE CHANGELOG · v1.1

What's new ?

VERSION 1.1 · LIVE UPDATE
New Functions & Built-In Modules Added
  • + TLS Certificate & Web Security Inspector: Live TLS handshake details (protocol, cipher, issuer CA, days remaining, SHA-256 fingerprint), HTTP security header scoring, server/framework fingerprinting, and robots.txt / security.txt checks.
  • + CVE & CISA KEV Exploit Lookup: Direct CVE vulnerability checks with CVSS score, severity vector details, vulnerability summary, and active exploitation status.
  • + Safe URL Redirect Tracer: Traces HTTP redirect chains hop-by-hop, resolves destination IPs, and correlates web safety signals cleanly inside QXSINT.
  • + ASN / BGP Prefixes & Reverse IP Discovery: Inspects announced CIDR ranges for Autonomous Systems and discovers co-hosted domains on IPv4 hosts.
  • + Email Auth, DNSBL & Subdomain Expansion: Added SPF/DMARC/DKIM probing, DNS blacklist lookups, merged passive subdomain discovery, GeoIP VPN/Tor detection, hash breach exposure checking, and direct Paste Raw ULP vault ingestion.
Bug Fixes & Core Improvements
  • ✓ Removed Fake & Placeholder Outputs: Stripped all mock breach rows, fake machine screenshot overlays, placeholder card fallbacks, and inflated registration counters across the engine.
  • ✓ Telemetry Map 403 Fix: Replaced restricted map tiles with dark raster maps so host geolocation renders without lockouts or errors.
  • ✓ Removed Credit Limits & External Redirect Directory: Deleted locked deep-scan credit buttons and removed external tool link lists so all layers run directly inside QXSINT.
  • ✓ Breach Grouping, Noise Filtering & Copy Fix: Tightened exact email/domain filtering to stop cross-domain leak mixups, filtered malformed combo lines, and enabled domain-grouped password view with Copy All and full selection support.
  • ✓ Auto-Recovery & Edge Tunnel Failover: Added automated origin health monitoring, protocol failover, automatic mirror backup routing, and scheduled vault backups.
DEFENSE MATRIX

DDoS immunity, WAF, rate control & host hardening

EDGE · HOST · CODE

DDoS Immunity & Perimeter Names

  • Cloudflare Tunnel (cloudflared) — Completely hides your server's public IP address.
  • Origin Cloaking — Restricting server access exclusively to Cloudflare proxy IPs.
  • Cloudflare "Under Attack" Mode — High-security challenge mode for active volumetric floods.
  • Cloudflare Turnstile — Non-intrusive CAPTCHA to stop automated bot traffic.
  • Anycast DNS Routing — Distributes traffic globally to absorb heavy network layer attacks.

Anti-Exploit & WAF Names

  • Cloudflare WAF Managed Rulesets — Automated protection against OWASP Top 10 vulnerabilities.
  • ModSecurity / Coraza — Local, server-side Web Application Firewalls to catch application exploits.
  • Parameterized Queries — Coding technique that makes SQL Injection exploits impossible.
  • Input Sanitization & Whitelisting — Cleaning all user inputs to prevent Remote Code Execution (RCE).
  • Server Banner Obfuscation — Hiding OS and web server software versions from hackers.

Rate Limiting & Threat Controls

  • Cloudflare Advanced Rate Limiting — Restricting maximum requests per minute on APIs and search fields.
  • Cloudflare Bot Management — Behavioral analysis that blocks malicious automated scripts.
  • ASN (Autonomous System Number) Blocking — Blocking entire hosting provider networks frequently used by botnets.
  • Geo-IP Blocking — Restricting or challenging traffic from specific high-risk countries.

Infrastructure Hardening Names

  • SSH Key-Only Authentication — Completely disabling password logins for server access.
  • Fail2ban / CrowdSec — Automated intrusion prevention that bans IPs scanning your ports locally.
  • UFW (Uncomplicated Firewall) / iptables — Linux firewall software used to seal off the host server.
  • Static Site Architecture (JAMstack) — Building without a database to leave zero backend code to hack.
Controls are applied at the edge, host, or application layer depending on deployment. QXSINT SECURITY STACK