From b4d75514dc24a216b7790ccab5ba1c934c330cdc Mon Sep 17 00:00:00 2001
From: FutureStack Intelligence <futurestack001@gmail.com>
Date: Wed, 3 Jun 2026 08:13:04 +0100
Subject: [PATCH] Add PhantomCheck OSINT tool to arf.json

Added PhantomCheck tool with detailed specifications including description, input/output, and operational security notes.
---
 public/arf.json | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/public/arf.json b/public/arf.json
index 16c8607d..3be7452e 100644
--- a/public/arf.json
+++ b/public/arf.json
@@ -30,6 +30,26 @@
               "invitationOnly": false,
               "deprecated": false
             },
+            {
+              "name": "PhantomCheck",
+              "type": "url",
+              "url": "https://phantomcheck.pages.dev/app",
+    	        "description": "Free browser-based AI-powered OSINT tool that scans domains, emails and IPs against multiple security databases simultaneously. Returns findings in three adaptive modes: plain English for non-technical users, professional compliance reports for IT teams, and raw technical intel for pentesters. Zero backend, BYOK, Africa-first infrastructure detection.",
+              "status": "live",
+              "pricing": "free",
+              "bestFor": "Domain intelligence, email breach detection, IP reputation, Africa regional infrastructure analysis",
+              "input": "Domain, email address, or IP address",
+              "output": "AI-interpreted security findings in Explorer, Analyst, or Operator mode",
+              "opsec": "passive",
+              "opsecNote": "All API calls made client-side from user's browser. No data transmitted to PhantomCheck servers.",
+              "localInstall": false,
+              "googleDork": false,
+              "registration": false,
+              "editUrl": false,
+              "api": true,
+              "invitationOnly": false,
+              "deprecated": false
+            },  
             {
               "name": "WhatsMyName (T)",
               "type": "url",