Last updated:
Updated 16 October 2026: added a short explainer on multi-search OSINT tools, with a table of what each selector opens.
Updated 12 October 2026: added ASN and country selectors and one-click external pivots to IODA, Cloudflare Radar (including its URL Scanner) and IP.THC.ORG.
What is a multi-search OSINT tool?
A multi-search OSINT tool takes one identifier, such as an email address, phone number or username, and sends it to many lookups at once. You no longer paste the same value into each site. The Pivot Hub works this way in your browser: it opens every relevant Max Intel tool pre-filled, plus the matching AI dork and a few outside services.
| You enter | Max Intel tools it opens | Outside pivots |
|---|---|---|
| Email OSINT; username search on the part before the @; domain OSINT on the mail domain | — | |
| Username | Username search (65 sites) | — |
| Phone | Phone OSINT | — |
| Domain | Domain OSINT; IP OSINT once you have the IP | IP.THC.ORG, Cloudflare Radar |
| IP address | IP OSINT; domain OSINT for domains on that IP | IP.THC.ORG, Cloudflare Radar |
| Name | People search; username search on the name as one handle | — |
| ASN or country | — | IODA, Cloudflare Radar |
Emails, usernames, phone numbers, domains and names also get a matching AI dork prompt. A pivot is the step from one clue to a related one, such as from an email address to the username inside it.
How it works
Type a selector and hit Pivot. The hub detects what kind of identifier it is (or set the type manually) and lays out a board of next steps: the Max Intel tools that accept that selector — email, username, phone, domain, IP — each opened with your value already entered and the search run. It also surfaces the matching AI dork and the smart cross-pivots that experienced investigators do by reflex: the part of an email before the @ is often a reusable username; the part after it is a domain worth investigating in its own right. Every result is just a link — nothing you type leaves your browser until you click one.
Which outside services can it pivot to?
External cards open another organisation’s site in a new tab. Clicking one sends your value to that service, as typing it there would. Deep links are used only where the service’s own pages show that address format; otherwise the card opens the right page and you enter the value there.
| Service | Selector | What opens |
|---|---|---|
| IODA (Internet Outage Detection and Analysis) | Country code, ASN | Outage signals for that country or network, pre-filled. IODA says it “monitors Internet infrastructure connectivity to identify outages”. IODA (read Oct 2026) Its dashboard shows BGP (routing), active probing and telescope signals. IODA (Aug 2025) |
| Cloudflare Radar | Country code, ASN | Traffic page for the country or network, and the routing page for the network, pre-filled. Cloudflare (Jul 2026) |
| Cloudflare Radar | Domain, IP | Radar’s Domain Information and IP pages and its URL Scanner. Enter the value there. Cloudflare’s docs say URL Scanner reports are public by default. Cloudflare docs (read Oct 2026) |
| IP.THC.ORG (The Hacker’s Choice) | IPv4, domain | Reverse DNS for an IP, subdomains of a domain, and reverse CNAME (names that point to the domain), pre-filled. The site says it is free with no registration and limits requests per IP. IP.THC.ORG (read Oct 2026) |
A quick reminder on tradecraft
Pivoting fast is not the same as pivoting well. Verify each finding against an independent source before you build the next pivot on top of it — the same handle on two platforms is not proof of the same person until other signals agree. Use these tools for authorized, public-source work only, and see the OpSec guide for keeping your investigation from leaking back to your subject.
Frequently Asked Questions
What is the OSINT Pivot Hub?
A free, browser-based tool that takes one selector — email, username, phone, domain, IP, ASN, country or name — and links you to every relevant Max Intel lookup with the value pre-filled, plus the matching AI dork, smart cross-pivots and one-click external pivots. It removes the copy-paste step between tools.
Does it send my data anywhere?
No. It runs entirely in your browser and only builds links — nothing is uploaded, logged, or stored, and there's no signup. Clicking through to a destination tool queries third-party services as normal, exactly as using that tool directly would. External cards (IODA, Cloudflare Radar, IP.THC.ORG) put your value in that service's address, so the service sees it when you click.
What is pivoting in an investigation?
Moving from one piece of information to a related one — email to accounts, username to platforms, domain to infrastructure. Good investigations are a chain of verified pivots. The hub makes the mechanical part fast so you can focus on judgment.