Collection status
Every finding this platform issues is only as good as the sources behind it, so those sources are measured and published rather than assumed. This page reports what each one contributes, whether it answered, and which modules run shallower while it is out.
Sanctions & regulatory
OpenSanctions consolidated
Consolidated OFAC, UK OFSI, EU and UN designations — 278,000 names.
feeds sanctions · company · investigate
OFAC SDN list
US Treasury designations, and the source of the 91 designated crypto addresses.
feeds sanctions · chaintrace · crypto
Corporate & registry
GLEIF
Legal Entity Identifiers and corporate hierarchy.
feeds company · cluster
SEC EDGAR
US securities filings and registrant history.
feeds company
Companies House
UK statutory register — filings, officers, persons with significant control.
feeds company
Wikidata
Structured biography and cross-reference identifiers.
feeds people · profile · company
France Sirene (INSEE/INPI)
French national company register — identity, officers, filed financials.
feeds company
Ireland CRO (open data)
Irish company register — identity, status, incorporation and accounts filing history.
feeds company
Brazil Receita Federal (BrasilAPI)
Brazilian company register by CNPJ — identity, status, share capital and officers.
feeds company
Infrastructure & network
Google DNS-over-HTTPS
Authoritative record resolution behind DNS posture, ASM and correlation.
feeds dns · asm · domain · cluster · geo
crt.sh certificate transparency
Subdomain discovery from issued certificates.
feeds ct · asm · domain
RIPEstat
Routing origin, netblock allocation and abuse contact.
feeds ip · ioc · asm
RDAP (ARIN)
Registry of record for address allocations.
feeds ip · domain
ip-api geolocation
Host geolocation behind exposure proximity and the infrastructure map.
feeds geo · ip · warroom
urlscan.io
Historic scans and page composition for a domain.
feeds domain · brandradar
Vulnerability & threat
NVD 2.0
Authoritative CVE records and CVSS scoring.
feeds cve · asm
FIRST EPSS
Probability that a vulnerability is exploited in the wild.
feeds cve
CISA KEV
Catalogue of vulnerabilities known to be actively exploited.
feeds cve · asm · attack
CIRCL CVE
Secondary vulnerability record, used when NVD is throttling.
feeds cve
Feodo Tracker
Botnet command-and-control addresses.
feeds ioc
Spamhaus DROP
Netblocks under criminal control.
feeds ioc
blocklist.de
Attack telemetry reported against an address.
feeds ioc
SANS ISC
Attack telemetry, AS detail and the netblock abuse contact.
feeds ioc
Tor exit list
Whether an address is a published Tor exit.
feeds ioc · ip
OpenPhish
Live phishing URL feed.
feeds brandradar · ioc
Identity & exposure
LeakCheck public
Named breach sources with dates and the field types exposed.
feeds deepdark · email · profile
XposedOrNot
Secondary breach corroboration.
feeds deepdark · email
GitHub API
Account existence, activity history and linked identities.
feeds username · profile · people
Keybase
Cryptographically-linked cross-platform identity proofs.
feeds username · profile
Internet Archive
Historic presence — the absence test the legend engine depends on.
feeds admiralty · domain · profile
Ahmia
Tor hidden-service index for dark-web exposure.
feeds deepdark
Blockchain
Blockstream
Bitcoin address balance and transaction history.
feeds crypto · chaintrace
Blockscout
Ethereum account state, contract detection and ENS.
feeds crypto · chaintrace
Ethplorer
Token holdings and counterparty enumeration.
feeds crypto · chaintrace
Geospatial & physical
USGS earthquakes
Seismic signal for multi-int fusion and the live map.
feeds warroom · liveops · globe
adsb.lol
Military and emergency-squawk aircraft — the AIRINT discipline in fusion.
feeds warroom · liveops · globe
NOAA SWPC
Real-time solar wind and planetary K index.
feeds warroom · liveops
Nominatim
Place-name resolution beyond the curated gazetteer.
feeds geo · maps
wheretheiss.at
ISS position for the orbital layer.
feeds globe · liveops
Open reporting
BBC World
Open reporting feeding fusion, adverse media and the world state.
feeds warroom · adverse-media · liveops
Al Jazeera
Independent second publisher — the basis of corroboration scoring.
feeds warroom · adverse-media
Google News RSS
Adverse-media screening across publishers.
feeds adverse-media · company · people
OpenAlex
Academic authorship and affiliation.
feeds people · profile
Hacker News
Technical discussion mentioning a target.
feeds brandradar · username
How to read this
- Operational
- Answering normally. Findings and absences from it can both be relied on.
- Slow or degraded
- Reachable but impaired. A collector may abandon it mid-sweep, so treat an absence as unproven.
- Refusing requests
- The source is up and declining us — an auth wall, rate limit or bot block. This is emphatically not evidence that the data is absent, and we never record it as such.
- Needs a key
- A bring-your-own-key source with no key supplied. Working as sold — an unopened capability, not a fault, and excluded from the coverage figure.
Health is re-probed at most every ten minutes. Probing forty free public services on demand would make this platform the reason they went down.