2. Supported Indicators

Currently, FoxyRecon supports the following indicator types:

• Domain (domain.xyz, sub.domain.xyz)
• Public IP address (8.8.8.8)
• URL (https://sub.domain.xyz/path/page.html)
• File Hash (MD5, SHA256, SHA512)
• Email address (email@example.xyz)
• CVE (Common Vulnerabilities and Exposures)
• Phone Number, in international format (+1XXXXXXXXXX)
• Autonomous System Number (AS1234)

FoxyRecon accepts also defanged indicators, that is written in such a way that they cannot become malicious hyperlinks:

• Domain (domain[.]xyz, sub[.]domain[.]xyz)
• Public IP address (8[.]8[.]8[.]8)
• URL (hXXps://sub[.]domain[.]xyz/path/page[.]html)
• Email address (email@example[.]xyz)