Free, instant, passive reconnaissance on any domain — subdomains from certificate-transparency logs and passive DNS, the technology stack and security headers fingerprinted from a single request, and DNS & email posture (SPF, DMARC, mail and DNS providers). No login, no impact on the target site. This is the same kind of public information an attacker would gather first — see it before they do, then upgrade any time to a real person testing your site by hand.