RDAP registration
May show registrar, registration dates, nameservers and status. Privacy services and registry policies may redact data.
Redmark Forge / Research
OSINT Studio
Investigate public sources, generate focused searches, look up domain infrastructure, and preserve evidence with a browser-local casebook.
● Browser-only · No backend
ⓘ
Public-source research workbench
OSINT searches now open inside the Mini Browser where the target permits embedding. Some search providers block frames; in-page Wikipedia results are provided as a fallback. The separate Web Scraping Studio handles permitted page extraction and uploaded HTML. No backend or Local Engine is used.
Public-source search builder
Build focused search queries and open public search providers.
Search operators are passed to the provider. Results are not fetched or stored automatically.
Enter a subject to build a query.
One-click public research
These shortcuts search public/indexed results. A matching username does not establish that accounts share an owner. Avoid collecting or inferring sensitive personal attributes.
Research workflow
A repeatable process for defensible findings.
01 · Define
Write a specific question and scope the public sources relevant to it.
02 · Discover
Search providers and open original sources; avoid treating snippets as proof.
03 · Corroborate
Compare dates, context and independent sources; record contradictions.
04 · Preserve
Save URL, access time, notes and confidence in the casebook.
Existing Sandbox tools
Use these existing studios for deeper local artifact examination instead of duplicating their analysis features here.
Mini Browser
Browse pages that permit embedding, or view in-page public knowledge results.
Enter a URL or search. Some websites prohibit iframe embedding; this browser cannot override those restrictions.
If a page displays “refused to connect” or stays blank, its security policy may prohibit embedding. Use the in-page public knowledge results below or choose “Open externally” for that result. This is an embedded web view, not a full Chrome browser.
In-page knowledge search
Search Wikipedia's public API and read results here without leaving Sandbox. These are encyclopedic results, not a replacement for comprehensive Google/Bing results.
Search terms will appear here.
Domain & infrastructure lookup
Public RDAP and DNS-over-HTTPS lookups, where browser access is allowed.
Enter a domain name for RDAP, DNS and certificate transparency. IP address support varies by provider.
Lookups contact the selected public services directly from your browser; those services receive the query.
DNS-over-HTTPS uses Cloudflare's public endpoint; registration data uses RDAP bootstrap; certificate transparency opens a crt.sh search. Requests can fail because of CORS, network restrictions, provider policy or rate limits. No port scanning or active probing is performed.
What these results mean
Interpret results cautiously.
DNS records
Public A, AAAA, MX, NS, TXT and CAA answers can provide infrastructure clues, but do not establish who controls a site.
Certificate transparency
Certificates can reveal hostnames that appeared in public certificate logs. A hostname is not proof that a service is live or vulnerable.
URL inspection
Parse a URL locally before opening it.
URL components will appear here. Inspection does not visit the site.
Do not open suspicious links unless you understand the risk. URL parsing is a structural check, not a malware or phishing verdict.
Safe handling checklist
Before visiting an unfamiliar source.
Check the actual hostname
Look for misspellings, confusing subdomains, punycode and unexpected ports.
Separate observation from inference
A URL's structure alone cannot establish who operates it or whether it is malicious.
Preserve provenance
Record the original URL and the time observed. For formal work, separately preserve screenshots or source files where lawful.
Investigation casebook
Cases and notes stay in this browser's local storage.
No case selected.
Add an evidence note
Exports are generated locally. Browser storage is not encrypted and can be cleared; do not treat it as secure evidence vault or shared backup. Export regularly and protect downloaded reports.
Evidence ledger
No evidence yet.
Create or select a case, then add evidence notes.