OSINT query builder

Turn a domain or a name into a set of search queries worth running. This only builds the strings — you choose where to run them, and you stay responsible for what you do with the results.

Before you run these

• Search operators return indexed public content. They do not bypass authentication, and they should not be used to hammer a third-party service.
• Collect only what the engagement needs. A screenshot of a leaked document is still someone's data.
• Verify a finding from a second source before putting it in a report. Indexes are stale by design.
• If you find credentials or customer data, report it to the owner through their security contact — do not download it.