diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5c155e8..8ea1c29 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -39,7 +39,6 @@ jobs:
               root / 'passive-scanner' / 'report' / 'index.html',
               root / 'online-passive-scanner' / 'index.html',
               root / 'online-passive-scanner' / 'report.html',
-              root / 'online-passive-scanner' / 'report-legacy.html',
           ]
           missing_html = [str(p) for p in html_files if not p.exists()]
           if missing_html:
@@ -48,14 +47,6 @@ jobs:
 
           pattern = re.compile(r'(?:href|src)=["\']([^"\']+)["\']')
           missing_targets = []
-          ignore_exact = {
-              'link',
-              'link_to_plugin',
-          }
-          ignore_regex = [
-              re.compile(r'^http__.+\.html$'),
-          ]
-
           for html_file in html_files:
               text = html_file.read_text(encoding='utf-8')
               for target in pattern.findall(text):
@@ -75,12 +66,6 @@ jobs:
                   if not normalized:
                       continue
 
-                  if normalized in ignore_exact:
-                      continue
-
-                  if any(regex.match(normalized) for regex in ignore_regex):
-                      continue
-
                   if normalized.startswith('/'):
                       candidate = root / normalized[1:]
                   else:
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 2cfc12e..dbe8b40 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -48,11 +48,8 @@ jobs:
               Path('passive-scanner/report/index.html'),
               Path('online-passive-scanner/index.html'),
               Path('online-passive-scanner/report.html'),
-              Path('online-passive-scanner/report-legacy.html'),
           ]
           pattern = re.compile(r'(?:href|src)=["\']([^"\']+)["\']')
-          ignore_exact = {'link', 'link_to_plugin'}
-          ignore_regex = [re.compile(r'^http__.+\.html$')]
 
           missing_targets = []
           for html_file in html_files:
@@ -74,12 +71,6 @@ jobs:
                   if not normalized:
                       continue
 
-                  if normalized in ignore_exact:
-                      continue
-
-                  if any(regex.match(normalized) for regex in ignore_regex):
-                      continue
-
                   if normalized.startswith('/'):
                       candidate = root / normalized[1:]
                   else:
diff --git a/README.md b/README.md
index ccb3cf2..99e8c16 100644
--- a/README.md
+++ b/README.md
@@ -27,19 +27,16 @@ The generated output is written to `_site/` and should not be committed.
 
 The initial Jekyll migration preserves existing OWTF landing page content and formatting. Modernization changes should be made incrementally after parity sign-off.
 
-## Passive scanner source
+## Passive scanner routes
 
-Passive scanner integration in this repository is pinned to upstream `owtf/online-passive-scanner`:
-
-- https://github.com/owtf/online-passive-scanner
-
-See `/docs/PASSIVE_SCANNER_SOURCE.md` for the integration contract.
-
-The scanner is vendored at `/online-passive-scanner/` and is accessible at:
+The online passive scanner is now implemented as a Jekyll-processed Tailwind + vanilla JS experience in this repository:
 
 - `/online-passive-scanner/`
+- `/online-passive-scanner/report.html`
+
+Compatibility routes are kept for older links and redirect to the online scanner routes:
 
-A Jekyll-native launcher page is available at:
+- `/passive-scanner/` -> `/online-passive-scanner/`
+- `/passive-scanner/report/` -> `/online-passive-scanner/report.html`
 
-- `/passive-scanner/`
-- `/passive-scanner/report/`
+See `/docs/PASSIVE_SCANNER_SOURCE.md` for implementation details and maintenance scope.
diff --git a/_includes/header.html b/_includes/header.html
index 4ea35b8..865d325 100644
--- a/_includes/header.html
+++ b/_includes/header.html
@@ -1,5 +1,5 @@
 <header class="section-container pt-10"><nav class="flex items-center justify-between rounded-full border border-slate-200 bg-white/80 px-6 py-4 shadow-card backdrop-blur"><a class="flex items-center gap-3" href="/"><span class="flex h-10 w-10 items-center justify-center rounded-full border border-slate-200 bg-white text-sm font-semibold text-slate-900">OW</span><span class="hidden text-sm font-medium tracking-wide text-slate-600 sm:inline">Offensive Web Testing Framework</span></a><div class="hidden items-center gap-8 text-sm text-slate-600 md:flex">
-<a href="#overview" class="transition hover:text-slate-900">Overview</a><a href="#capabilities" class="transition hover:text-slate-900">Capabilities</a><a href="#standards" class="transition hover:text-slate-900">Standards</a><a href="/passive-scanner/" class="transition hover:text-slate-900">Scanner</a><a href="https://owtf.readthedocs.io/en/develop/" class="transition hover:text-slate-900">Docs</a>
+<a href="#overview" class="transition hover:text-slate-900">Overview</a><a href="#capabilities" class="transition hover:text-slate-900">Capabilities</a><a href="#standards" class="transition hover:text-slate-900">Standards</a><a href="/online-passive-scanner/" class="transition hover:text-slate-900">Scanner</a><a href="https://owtf.readthedocs.io/en/develop/" class="transition hover:text-slate-900">Docs</a>
 </div>
 <div class="flex items-center gap-3">
 <a href="https://github.com/owtf/owtf" class="hidden whitespace-nowrap rounded-full border border-slate-200 px-3 py-2 text-xs font-semibold text-slate-700 transition hover:border-slate-300 hover:text-slate-900 lg:inline-flex">GitHub</a><a href="https://github.com/owtf/owtf/releases" class="inline-flex items-center gap-2 rounded-full bg-slate-900 px-4 py-2 text-xs font-semibold text-white transition hover:bg-slate-700">Get OWTF<span class="text-base leading-none">&rarr;</span></a>
diff --git a/docs/PASSIVE_SCANNER_SOURCE.md b/docs/PASSIVE_SCANNER_SOURCE.md
index b7facde..17cea22 100644
--- a/docs/PASSIVE_SCANNER_SOURCE.md
+++ b/docs/PASSIVE_SCANNER_SOURCE.md
@@ -1,24 +1,25 @@
-# Passive Scanner Source of Truth
+# Passive Scanner Implementation Scope
 
-The passive scanner integration in this repository must use upstream code from:
+The scanner experience published in this repository is now a local implementation (Jekyll + Tailwind + vanilla JavaScript), served from:
 
-- `https://github.com/owtf/online-passive-scanner`
+- `/online-passive-scanner/`
+- `/online-passive-scanner/report.html`
 
-## Integration contract
+## Design goals
 
-1. Do not reimplement scanner logic locally when upstream code is available.
-2. Use a sync model (git subtree or submodule) and record the upstream commit/version used.
-3. Keep wrapper logic in this repository limited to configuration, execution, and report shaping for site publishing.
+1. Keep scanner UI and report pages fully Jekyll-compatible for GitHub Pages.
+2. Avoid legacy iframe embedding and legacy jQuery/Bootstrap dependencies.
+3. Preserve compatibility for historical links via redirects:
+   - `/passive-scanner/` redirects to `/online-passive-scanner/`
+   - `/passive-scanner/report/` redirects to `/online-passive-scanner/report.html`
 
-## Planned implementation
+## Current scanner behavior
 
-Current implementation in this repository:
+1. URL posture checks (scheme, credentials in URL, risky route patterns, sensitive query keys).
+2. DNS posture checks through DNS-over-HTTPS (`dns.google/resolve`) for A/AAAA/CAA/MX/NS/TXT.
+3. Risk scoring and findings rendering in-browser.
 
-1. Upstream scanner is vendored under `online-passive-scanner/`.
-2. Upstream provenance is tracked in `online-passive-scanner/UPSTREAM_SOURCE.txt`.
-3. Sync helper script is available at `scripts/sync-online-passive-scanner.sh`.
+## Maintenance notes
 
-Planned next implementation:
-
-1. Add a local wrapper entrypoint under `tools/passive_scanner/`.
-2. Add scheduled workflow to run passive scan automation and publish `_data/passive_scan/latest.json`.
+1. Keep logic and UX inside repository-owned pages under `online-passive-scanner/`.
+2. If upstream OWTF scanner work is reused, treat it as reference input and port intentionally rather than embedding legacy runtime directly.
diff --git a/online-passive-scanner/index.html b/online-passive-scanner/index.html
index f23a72e..5ffaec3 100644
--- a/online-passive-scanner/index.html
+++ b/online-passive-scanner/index.html
@@ -1,175 +1,89 @@
-<!DOCTYPE html>
-<html lang="en">
-  <head>
-    <meta charset="utf-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <meta name="description" content="OWASP OWTF Summary Report" />
-    <meta name="author" content="OWASP OWTF Team" />
-    <title>OWASP OWTF Summary Report</title>
-    <link
-      rel="stylesheet"
-      href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css"
-      integrity="sha384-QWTKZyjpPEjISv5WaRU9OFeRpok6YctnYmDr5pNlyT2bRjXh0JMhjY6hW+ALEwIH"
-      crossorigin="anonymous"
-    />
-    <style>
-      body {
-        background-color: #f5f7fa;
-        min-height: 100vh;
-        position: relative;
-      }
-
-      .github-ribbon {
-        position: fixed;
-        top: 1rem;
-        right: -3.5rem;
-        display: block;
-        width: 12rem;
-        padding: 0.75rem 0;
-        background: linear-gradient(135deg, #1f2328, #24292f);
-        color: #f8fbff;
-        text-align: center;
-        text-decoration: none;
-        font-weight: 600;
-        font-size: 0.9rem;
-        letter-spacing: 0.05em;
-        text-transform: uppercase;
-        transform: rotate(45deg);
-        transform-origin: top right;
-        box-shadow: 0 6px 12px rgba(15, 23, 42, 0.35);
-        z-index: 1000;
-      }
-
-      .github-ribbon:focus-visible {
-        outline: 2px solid #f0f6ff;
-        outline-offset: 2px;
-      }
+---
+layout: default
+title: "OWTF Online Passive Scanner"
+description: "Run OWTF passive URL and DNS reconnaissance checks from a modern Tailwind interface."
+---
+<div class="pointer-events-none absolute inset-x-0 top-0 -z-10 h-[420px] bg-gradient-to-b from-slate-100 via-white to-white"></div>
+<div class="relative flex min-h-screen flex-col">
+  {% include header.html %}
+  <main class="space-y-32 pb-16">
+    <section class="section-container pb-24 pt-24">
+      <div class="max-w-3xl space-y-6">
+        <p class="text-xs font-semibold uppercase tracking-[0.4em] text-slate-500">Online passive scanner</p>
+        <h1 class="text-4xl font-semibold tracking-tight text-slate-900 sm:text-5xl">Quick passive reconnaissance for web targets</h1>
+        <p class="text-lg leading-relaxed text-slate-600">This scanner reviews a target URL and its DNS posture for externally visible risk indicators. It is passive-only and does not run exploit payloads against the target.</p>
+      </div>
 
-      @media (max-width: 576px) {
-        .github-ribbon {
-          width: 10rem;
-          right: -3rem;
-          font-size: 0.75rem;
-        }
-      }
+      <div class="mt-12 rounded-3xl border border-slate-200 bg-white p-8 shadow-card">
+        <label for="target-url" class="text-sm font-semibold text-slate-900">Target URL</label>
+        <input id="target-url" type="url" placeholder="https://www.example.com" class="mt-3 block rounded-2xl border border-slate-200 bg-white p-5 text-sm text-slate-900" style="width:100%" autocomplete="url" />
+        <p id="scan-error" class="mt-2 text-sm text-slate-600" style="display:none"></p>
+        <div class="mt-6 flex flex-col gap-4 sm:flex-row sm:items-center">
+          <button id="open-report" class="inline-flex items-center justify-center gap-2 rounded-full bg-slate-900 px-6 py-3 text-sm font-semibold text-white transition hover:bg-slate-700">Run passive scan<span class="text-lg leading-none">&rarr;</span></button>
+          <a href="https://github.com/owtf/online-passive-scanner" class="inline-flex items-center justify-center gap-2 rounded-full border border-slate-200 px-6 py-3 text-sm font-semibold text-slate-700 transition hover:border-slate-300 hover:text-slate-900">Scanner source</a>
+        </div>
+      </div>
 
-      .page-header img {
-        max-width: 150px;
-      }
+      <div class="mt-8 grid gap-4 md:grid-cols-3">
+        <div class="rounded-2xl border border-slate-200 bg-white p-6 shadow-inset">
+          <p class="text-sm font-semibold text-slate-900">URL posture checks</p>
+          <p class="mt-2 text-sm text-slate-600">Flags insecure schemes, exposed credentials, risky parameters, and suspicious route patterns.</p>
+        </div>
+        <div class="rounded-2xl border border-slate-200 bg-white p-6 shadow-inset">
+          <p class="text-sm font-semibold text-slate-900">DNS posture checks</p>
+          <p class="mt-2 text-sm text-slate-600">Queries A, AAAA, CAA, MX, NS, and TXT records through DNS-over-HTTPS for baseline exposure signals.</p>
+        </div>
+        <div class="rounded-2xl border border-slate-200 bg-white p-6 shadow-inset">
+          <p class="text-sm font-semibold text-slate-900">Shareable report URLs</p>
+          <p class="mt-2 text-sm text-slate-600">Each report can be reopened by sharing a link with the encoded `#q=` target value.</p>
+        </div>
+      </div>
+    </section>
+  </main>
+  {% include footer.html %}
+</div>
 
-      .page-header h1 {
-        font-size: 2rem;
-        margin-bottom: 0;
-      }
+<script>
+  (function () {
+    var input = document.getElementById('target-url');
+    var button = document.getElementById('open-report');
+    var error = document.getElementById('scan-error');
+    var reportPath = "{{ '/online-passive-scanner/report.html' | relative_url }}";
 
-      #targetbar h2 {
-        font-weight: 600;
+    function setError(message) {
+      if (!message) {
+        error.style.display = 'none';
+        error.textContent = '';
+        return;
       }
+      error.style.display = 'block';
+      error.textContent = message;
+    }
 
-      .error-message {
-        display: none;
+    function openReport() {
+      setError('');
+      var value = (input.value || '').trim();
+      if (!value) {
+        setError('Please enter a URL to continue.');
+        input.focus();
+        return;
       }
-    </style>
-    <script>
-      const isGithubPages =
-        window.location.hostname === "owtf.github.io" &&
-        window.location.pathname.startsWith("/online-passive-scanner");
 
-      if (isGithubPages && window.location.protocol === "http:") {
-        const { host, pathname, search, hash } = window.location;
-        window.location.replace(`https://${host}${pathname}${search}${hash}`);
+      try {
+        var parsed = new URL(value);
+        window.location.assign(reportPath + '#q=' + encodeURIComponent(parsed.href));
+      } catch (err) {
+        setError('The value provided is not a valid URL.');
+        input.focus();
       }
-    </script>
-  </head>
-  <body>
-    <div class="container py-5">
-      <a
-        href="https://github.com/owtf/online-passive-scanner"
-        aria-label="Fork me on GitHub"
-        class="github-ribbon"
-      >
-        Fork me on GitHub
-      </a>
-      <header class="page-header row align-items-center g-4 mb-5">
-        <div class="col-md-3 text-center text-md-start">
-          <a href="https://owasp.org/www-project-owtf/">
-            <img
-              src="images/owtf-logo.svg"
-              class="img-fluid rounded"
-              alt="OWASP OWTF Logo"
-              width="150"
-              height="150"
-            />
-          </a>
-        </div>
-        <div class="col-md-9">
-          <h1 class="fw-semibold">Online Passive Scanner</h1>
-          <p class="text-muted mb-0">
-            Version 1.0.1 · Release <strong>Lionheart</strong>
-            <span class="visually-hidden" id="seed">2NfaMaxkF_</span>
-          </p>
-        </div>
-      </header>
-      <section id="targetbar" class="row mb-4">
-        <div class="col">
-          <h2 class="h4">Enter the target URL</h2>
-          <p class="text-muted">
-            Paste the URL you would like to review. We will generate a passive report using the
-            bundled sample data.
-          </p>
-        </div>
-      </section>
-      <form class="row gy-3" novalidate>
-        <div class="col-lg-8">
-          <label class="form-label" for="q">Target URL</label>
-          <input
-            type="url"
-            id="q"
-            name="q"
-            class="form-control form-control-lg"
-            placeholder="https://www.example.com"
-            autocomplete="url"
-            required
-          />
-          <p id="error" class="error-message text-danger mt-2" role="alert"></p>
-        </div>
-        <div class="col-lg-4 d-flex align-items-end">
-          <button type="submit" class="btn btn-primary btn-lg w-100" id="submit">Generate report</button>
-        </div>
-      </form>
-      <footer id="footer" class="mt-5 text-muted">
-        Built during GSoC 2014 by the <a href="https://owtf.github.io/">OWTF team</a>.
-      </footer>
-    </div>
-    <script>
-      const form = document.querySelector("form");
-      const input = document.getElementById("q");
-      const errorMessage = document.getElementById("error");
+    }
 
-      form.addEventListener("submit", (event) => {
+    button.addEventListener('click', openReport);
+    input.addEventListener('keydown', function (event) {
+      if (event.key === 'Enter') {
         event.preventDefault();
-        errorMessage.style.display = "none";
-        errorMessage.textContent = "";
-
-        const value = input.value.trim();
-        if (!value) {
-          errorMessage.textContent = "Please enter a URL to continue.";
-          errorMessage.style.display = "block";
-          input.focus();
-          return;
-        }
-
-        try {
-          const parsed = new URL(value);
-          const destination = new URL("report.html", window.location.href);
-          destination.hash = `q=${encodeURIComponent(parsed.href)}`;
-          window.location.assign(destination.toString());
-        } catch (error) {
-          errorMessage.textContent = "The value provided is not a valid URL. Please check and try again.";
-          errorMessage.style.display = "block";
-          input.focus();
-        }
-      });
-    </script>
-  </body>
-</html>
+        openReport();
+      }
+    });
+  })();
+</script>
diff --git a/online-passive-scanner/report.html b/online-passive-scanner/report.html
index 6bfff66..f3cbbe2 100644
--- a/online-passive-scanner/report.html
+++ b/online-passive-scanner/report.html
@@ -1,27 +1,405 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="utf-8" />
-  <meta name="viewport" content="width=device-width, initial-scale=1" />
-  <title>Redirecting to passive scanner report...</title>
-  <meta http-equiv="refresh" content="0; url=/passive-scanner/report/" />
-  <script>
-    (function () {
-      var destination = '/passive-scanner/report/' + (window.location.hash || '');
-      window.location.replace(destination);
-    })();
-  </script>
-</head>
-<body>
-  <p>Redirecting to the modern passive scanner report view...</p>
-  <p><a id="fallback-link" href="/passive-scanner/report/">Continue</a></p>
-  <script>
-    (function () {
-      var link = document.getElementById('fallback-link');
-      if (window.location.hash) {
-        link.href = '/passive-scanner/report/' + window.location.hash;
-      }
-    })();
-  </script>
-</body>
-</html>
+---
+layout: default
+title: "OWTF Passive Scanner Report"
+description: "Passive URL and DNS findings for externally visible risk indicators."
+---
+<style>
+  .severity-high { border-left: 4px solid #dc2626; }
+  .severity-medium { border-left: 4px solid #ea580c; }
+  .severity-low { border-left: 4px solid #ca8a04; }
+  .severity-info { border-left: 4px solid #2563eb; }
+  .badge {
+    border-radius: 9999px;
+    font-size: 0.72rem;
+    font-weight: 700;
+    letter-spacing: 0.04em;
+    padding: 0.2rem 0.55rem;
+    text-transform: uppercase;
+  }
+  .badge-high { background: #fee2e2; color: #991b1b; }
+  .badge-medium { background: #ffedd5; color: #9a3412; }
+  .badge-low { background: #fef9c3; color: #854d0e; }
+  .badge-info { background: #dbeafe; color: #1e40af; }
+  .score-high { background: #fee2e2; color: #991b1b; }
+  .score-medium { background: #ffedd5; color: #9a3412; }
+  .score-low { background: #dcfce7; color: #166534; }
+</style>
+
+<div class="pointer-events-none absolute inset-x-0 top-0 -z-10 h-[420px] bg-gradient-to-b from-slate-100 via-white to-white"></div>
+<div class="relative flex min-h-screen flex-col">
+  {% include header.html %}
+  <main class="space-y-32 pb-16">
+    <section class="section-container pb-24 pt-24">
+      <div class="max-w-3xl space-y-6">
+        <p class="text-xs font-semibold uppercase tracking-[0.4em] text-slate-500">Passive scanner report</p>
+        <h1 class="text-4xl font-semibold tracking-tight text-slate-900 sm:text-5xl">Externally visible risk signals</h1>
+        <p class="text-lg leading-relaxed text-slate-600">Use this report to quickly triage URL and DNS exposure patterns before deeper active assessment with OWTF modules.</p>
+      </div>
+
+      <div class="mt-12 rounded-3xl border border-slate-200 bg-white p-8 shadow-card">
+        <label for="target-url" class="text-sm font-semibold text-slate-900">Target URL</label>
+        <input id="target-url" type="url" placeholder="https://www.example.com" class="mt-3 block rounded-2xl border border-slate-200 bg-white p-5 text-sm text-slate-900" style="width:100%" autocomplete="url" />
+        <p id="scan-error" class="mt-2 text-sm text-slate-600" style="display:none"></p>
+        <div class="mt-6 flex flex-col gap-4 sm:flex-row sm:items-center">
+          <button id="run-scan" class="inline-flex items-center justify-center gap-2 rounded-full bg-slate-900 px-6 py-3 text-sm font-semibold text-white transition hover:bg-slate-700">Run passive scan<span class="text-lg leading-none">&rarr;</span></button>
+          <button id="copy-link" class="inline-flex items-center justify-center gap-2 rounded-full border border-slate-200 px-6 py-3 text-sm font-semibold text-slate-700 transition hover:border-slate-300 hover:text-slate-900">Copy report URL</button>
+        </div>
+      </div>
+
+      <div class="mt-8 grid gap-4 md:grid-cols-3">
+        <div class="rounded-2xl border border-slate-200 bg-white p-6 shadow-inset">
+          <p class="text-xs font-semibold uppercase tracking-[0.35em] text-slate-500">Risk score</p>
+          <p id="risk-score" class="mt-2 text-3xl font-semibold text-slate-900">0</p>
+          <p id="risk-label" class="mt-2 w-fit rounded-full px-4 py-2 text-xs font-semibold uppercase tracking-wide score-low">Low</p>
+        </div>
+        <div class="rounded-2xl border border-slate-200 bg-white p-6 shadow-inset">
+          <p class="text-xs font-semibold uppercase tracking-[0.35em] text-slate-500">Findings</p>
+          <p id="finding-count" class="mt-2 text-3xl font-semibold text-slate-900">0</p>
+          <p class="mt-2 text-sm text-slate-600">Detected passive indicators</p>
+        </div>
+        <div class="rounded-2xl border border-slate-200 bg-white p-6 shadow-inset">
+          <p class="text-xs font-semibold uppercase tracking-[0.35em] text-slate-500">DNS records</p>
+          <p id="dns-record-count" class="mt-2 text-3xl font-semibold text-slate-900">0</p>
+          <p class="mt-2 text-sm text-slate-600">A, AAAA, CAA, MX, NS, TXT answers</p>
+        </div>
+      </div>
+
+      <div class="mt-8 rounded-3xl border border-slate-200 bg-white p-8 shadow-card">
+        <div class="flex items-center justify-between">
+          <h2 class="text-2xl font-semibold text-slate-900">Findings</h2>
+          <span id="scan-status" class="text-xs font-semibold uppercase tracking-[0.35em] text-slate-500">Idle</span>
+        </div>
+        <div id="finding-list" class="mt-6 space-y-4"></div>
+      </div>
+
+      <div class="mt-8 rounded-3xl border border-slate-200 bg-white p-8 shadow-card">
+        <h2 class="text-xl font-semibold text-slate-900">DNS Detail</h2>
+        <div id="dns-detail" class="mt-4 space-y-2 text-sm text-slate-600"></div>
+      </div>
+
+      <div class="mt-8 rounded-3xl border border-slate-200 bg-white p-8 shadow-card">
+        <h2 class="text-xl font-semibold text-slate-900">Scan Metadata</h2>
+        <div class="mt-4 rounded-2xl border border-slate-200 bg-slate-50 p-5 text-sm text-slate-600">
+          <p><span class="font-semibold text-slate-900">Target:</span> <span id="meta-target" class="font-mono"></span></p>
+          <p class="mt-2"><span class="font-semibold text-slate-900">Scanned at:</span> <span id="meta-time"></span></p>
+          <p class="mt-2"><span class="font-semibold text-slate-900">Mode:</span> Passive URL and DNS checks only. No exploitation payloads are executed.</p>
+          <p class="mt-2"><span class="font-semibold text-slate-900">Resolver:</span> Google DNS-over-HTTPS (`https://dns.google/resolve`).</p>
+        </div>
+      </div>
+    </section>
+  </main>
+  {% include footer.html %}
+</div>
+
+<script>
+  (function () {
+    var scoreWeights = { high: 34, medium: 16, low: 6, info: 1 };
+    var severityRank = { high: 3, medium: 2, low: 1, info: 0 };
+    var targetInput = document.getElementById('target-url');
+    var errorEl = document.getElementById('scan-error');
+    var statusEl = document.getElementById('scan-status');
+    var riskScoreEl = document.getElementById('risk-score');
+    var riskLabelEl = document.getElementById('risk-label');
+    var findingCountEl = document.getElementById('finding-count');
+    var dnsCountEl = document.getElementById('dns-record-count');
+    var findingListEl = document.getElementById('finding-list');
+    var dnsDetailEl = document.getElementById('dns-detail');
+    var metaTargetEl = document.getElementById('meta-target');
+    var metaTimeEl = document.getElementById('meta-time');
+
+    function escapeHtml(value) {
+      return String(value)
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#39;');
+    }
+
+    function setError(message) {
+      if (!message) {
+        errorEl.style.display = 'none';
+        errorEl.textContent = '';
+        return;
+      }
+      errorEl.style.display = 'block';
+      errorEl.textContent = message;
+    }
+
+    function setStatus(value) {
+      statusEl.textContent = value;
+    }
+
+    function badgeClass(severity) {
+      if (severity === 'high') return 'badge badge-high';
+      if (severity === 'medium') return 'badge badge-medium';
+      if (severity === 'low') return 'badge badge-low';
+      return 'badge badge-info';
+    }
+
+    function riskLabel(score) {
+      if (score >= 70) return { text: 'High', className: 'mt-2 w-fit rounded-full px-4 py-2 text-xs font-semibold uppercase tracking-wide score-high' };
+      if (score >= 35) return { text: 'Medium', className: 'mt-2 w-fit rounded-full px-4 py-2 text-xs font-semibold uppercase tracking-wide score-medium' };
+      return { text: 'Low', className: 'mt-2 w-fit rounded-full px-4 py-2 text-xs font-semibold uppercase tracking-wide score-low' };
+    }
+
+    function currentHashTarget() {
+      var hash = window.location.hash || '';
+      var match = hash.match(/(?:^#|&)q=([^&]+)/);
+      if (!match) return '';
+      try {
+        return decodeURIComponent(match[1]);
+      } catch (err) {
+        return '';
+      }
+    }
+
+    function updateHashTarget(url) {
+      window.location.hash = 'q=' + encodeURIComponent(url);
+    }
+
+    async function dnsLookup(hostname, type) {
+      var endpoint = 'https://dns.google/resolve?name=' + encodeURIComponent(hostname) + '&type=' + type;
+      try {
+        var response = await fetch(endpoint, { method: 'GET' });
+        if (!response.ok) return null;
+        return await response.json();
+      } catch (err) {
+        return null;
+      }
+    }
+
+    function answerCount(payload) {
+      return payload && Array.isArray(payload.Answer) ? payload.Answer.length : 0;
+    }
+
+    function appendFinding(list, severity, title, evidence, recommendation) {
+      list.push({
+        severity: severity,
+        title: title,
+        evidence: evidence,
+        recommendation: recommendation
+      });
+    }
+
+    function renderFindings(findings) {
+      if (!findings.length) {
+        findingListEl.innerHTML = '<div class="rounded-2xl border border-slate-200 bg-slate-50 p-6 text-sm text-slate-600">No passive findings were produced for this target.</div>';
+        return;
+      }
+
+      findings.sort(function (left, right) {
+        return severityRank[right.severity] - severityRank[left.severity];
+      });
+
+      var html = '';
+      for (var i = 0; i < findings.length; i += 1) {
+        var finding = findings[i];
+        html += '<article class="rounded-2xl border border-slate-200 bg-white p-6 shadow-inset severity-' + escapeHtml(finding.severity) + '">';
+        html += '<div class="flex items-center justify-between gap-3"><h3 class="text-sm font-semibold text-slate-900">' + escapeHtml(finding.title) + '</h3><span class="' + badgeClass(finding.severity) + '">' + escapeHtml(finding.severity) + '</span></div>';
+        html += '<p class="mt-3 text-sm text-slate-600"><span class="font-semibold text-slate-900">Evidence:</span> ' + escapeHtml(finding.evidence) + '</p>';
+        html += '<p class="mt-2 text-sm text-slate-600"><span class="font-semibold text-slate-900">Recommendation:</span> ' + escapeHtml(finding.recommendation) + '</p>';
+        html += '</article>';
+      }
+      findingListEl.innerHTML = html;
+    }
+
+    function renderDns(records) {
+      var lines = [];
+      var types = ['A', 'AAAA', 'CAA', 'MX', 'NS', 'TXT'];
+      for (var i = 0; i < types.length; i += 1) {
+        var type = types[i];
+        var payload = records[type];
+        var count = answerCount(payload);
+        var values = count
+          ? payload.Answer.map(function (item) { return item.data || '(empty)'; }).join(', ')
+          : 'No answers';
+        lines.push('<p><span class="font-semibold text-slate-900">' + type + ':</span> ' + escapeHtml(values) + '</p>');
+      }
+      dnsDetailEl.innerHTML = lines.join('');
+    }
+
+    function computeRiskScore(findings) {
+      var score = 0;
+      for (var i = 0; i < findings.length; i += 1) {
+        score += scoreWeights[findings[i].severity] || 0;
+      }
+      return Math.min(score, 100);
+    }
+
+    async function runScan(targetValue) {
+      setError('');
+      setStatus('Running');
+
+      var parsed;
+      try {
+        parsed = new URL(targetValue);
+      } catch (err) {
+        setError('The value provided is not a valid URL.');
+        setStatus('Invalid target');
+        return;
+      }
+
+      var findings = [];
+      var url = parsed.href;
+      var host = parsed.hostname;
+      var queryKeys = Array.from(parsed.searchParams.keys());
+      var sensitiveKeyPattern = /(token|secret|apikey|api_key|password|passwd|jwt|session|auth|key)/i;
+
+      appendFinding(findings, 'info', 'Passive scan started', 'Target URL parsed successfully.', 'Review findings and validate priority issues in your active testing plan.');
+
+      if (parsed.protocol !== 'https:') {
+        appendFinding(findings, 'high', 'Target is not using HTTPS', 'Protocol detected: ' + parsed.protocol, 'Enforce HTTPS and redirect all HTTP traffic.');
+      }
+
+      if (parsed.username || parsed.password) {
+        appendFinding(findings, 'high', 'Credentials included in URL', 'URL username/password fields are present.', 'Remove credentials from URLs and use secure authentication flows.');
+      }
+
+      if (queryKeys.length > 12) {
+        appendFinding(findings, 'medium', 'High query parameter count', 'Detected ' + queryKeys.length + ' query parameters.', 'Reduce URL parameter sprawl and avoid exposing unnecessary state in URLs.');
+      }
+
+      if (queryKeys.some(function (key) { return sensitiveKeyPattern.test(key); })) {
+        appendFinding(findings, 'high', 'Sensitive query parameter names found', 'Parameters match secret/token patterns.', 'Move sensitive values from query strings to secure headers or request bodies.');
+      }
+
+      if (parsed.hash && sensitiveKeyPattern.test(parsed.hash)) {
+        appendFinding(findings, 'medium', 'Potential sensitive value in URL fragment', 'Hash fragment contains sensitive keywords.', 'Avoid placing tokens or secrets in URL fragments.');
+      }
+
+      if (/(\.bak|\.old|\.zip|\.tar|\.env|\.sql)$/i.test(parsed.pathname)) {
+        appendFinding(findings, 'high', 'Potential backup or sensitive file path', 'Path indicates potentially sensitive file extension.', 'Restrict direct access to backups/config exports and sanitize artifact publishing.');
+      }
+
+      if (/(\/admin|\/debug|\/internal|\/backup|\/test)/i.test(parsed.pathname)) {
+        appendFinding(findings, 'medium', 'Potentially sensitive route naming', 'Path includes admin/debug/internal style keywords.', 'Confirm route access controls and monitoring are correctly enforced.');
+      }
+
+      if (/^(\d{1,3}\.){3}\d{1,3}$/.test(host)) {
+        appendFinding(findings, 'medium', 'Target uses direct IPv4 address', 'Hostname appears to be an IPv4 literal.', 'Prefer managed DNS hostnames for stronger certificate and policy controls.');
+      }
+
+      if (host.indexOf('xn--') !== -1) {
+        appendFinding(findings, 'medium', 'Punycode domain detected', 'Hostname contains `xn--` label.', 'Review for homograph abuse risk and monitor lookalike domains.');
+      }
+
+      if (parsed.port && !((parsed.protocol === 'https:' && parsed.port === '443') || (parsed.protocol === 'http:' && parsed.port === '80'))) {
+        appendFinding(findings, 'medium', 'Non-standard service port', 'Detected explicit port ' + parsed.port + '.', 'Confirm this exposure is intentional and covered by controls.');
+      }
+
+      if (url.length > 1800) {
+        appendFinding(findings, 'low', 'Long URL length', 'URL length is ' + url.length + ' characters.', 'Validate upstream proxy and logging behavior for long request URLs.');
+      }
+
+      var dnsRecords = {
+        A: await dnsLookup(host, 'A'),
+        AAAA: await dnsLookup(host, 'AAAA'),
+        CAA: await dnsLookup(host, '257'),
+        MX: await dnsLookup(host, 'MX'),
+        NS: await dnsLookup(host, 'NS'),
+        TXT: await dnsLookup(host, 'TXT')
+      };
+
+      var totalDnsAnswers =
+        answerCount(dnsRecords.A) +
+        answerCount(dnsRecords.AAAA) +
+        answerCount(dnsRecords.CAA) +
+        answerCount(dnsRecords.MX) +
+        answerCount(dnsRecords.NS) +
+        answerCount(dnsRecords.TXT);
+
+      if (answerCount(dnsRecords.A) + answerCount(dnsRecords.AAAA) === 0) {
+        appendFinding(findings, 'medium', 'No A/AAAA answers returned', 'DNS-over-HTTPS did not return address records.', 'Validate DNS zone data and authoritative availability.');
+      } else {
+        appendFinding(findings, 'info', 'Address records discovered', 'A/AAAA answers were returned by resolver.', 'Track DNS updates and protect zone management access.');
+      }
+
+      if (answerCount(dnsRecords.CAA) === 0) {
+        appendFinding(findings, 'low', 'CAA policy not detected', 'No CAA records were returned.', 'Consider defining CAA records to limit certificate issuance authorities.');
+      }
+
+      if (answerCount(dnsRecords.MX) === 0) {
+        appendFinding(findings, 'info', 'No MX records detected', 'No inbound mail exchange records returned.', 'If mail is expected for this domain, validate MX configuration.');
+      }
+
+      if (answerCount(dnsRecords.TXT) > 0) {
+        var txtAll = dnsRecords.TXT.Answer.map(function (item) { return item.data || ''; }).join(' ');
+        if (/v=spf1/i.test(txtAll)) {
+          appendFinding(findings, 'info', 'SPF policy detected', 'TXT data includes SPF declaration.', 'Ensure SPF is paired with DMARC and DKIM enforcement.');
+        }
+      }
+
+      var score = computeRiskScore(findings);
+      var label = riskLabel(score);
+
+      riskScoreEl.textContent = String(score);
+      riskLabelEl.textContent = label.text;
+      riskLabelEl.className = label.className;
+      findingCountEl.textContent = String(findings.length);
+      dnsCountEl.textContent = String(totalDnsAnswers);
+      renderFindings(findings);
+      renderDns(dnsRecords);
+
+      metaTargetEl.textContent = url;
+      metaTimeEl.textContent = new Date().toISOString();
+      setStatus('Complete');
+    }
+
+    document.getElementById('run-scan').addEventListener('click', function () {
+      var value = (targetInput.value || '').trim();
+      if (!value) {
+        setError('Please enter a URL to continue.');
+        targetInput.focus();
+        return;
+      }
+
+      try {
+        var normalized = new URL(value).href;
+        targetInput.value = normalized;
+        updateHashTarget(normalized);
+        runScan(normalized);
+      } catch (err) {
+        setError('The value provided is not a valid URL.');
+        targetInput.focus();
+      }
+    });
+
+    targetInput.addEventListener('keydown', function (event) {
+      if (event.key === 'Enter') {
+        event.preventDefault();
+        document.getElementById('run-scan').click();
+      }
+    });
+
+    document.getElementById('copy-link').addEventListener('click', async function () {
+      var value = (targetInput.value || '').trim();
+      if (!value) {
+        setError('Run a scan first to copy a report URL.');
+        return;
+      }
+
+      try {
+        var normalized = new URL(value).href;
+        var shareUrl = window.location.origin + "{{ '/online-passive-scanner/report.html' | relative_url }}" + '#q=' + encodeURIComponent(normalized);
+        await navigator.clipboard.writeText(shareUrl);
+        setError('');
+        setStatus('Link copied');
+      } catch (err) {
+        setError('Could not copy the report URL automatically.');
+      }
+    });
+
+    var initialTarget = currentHashTarget();
+    if (initialTarget) {
+      targetInput.value = initialTarget;
+      runScan(initialTarget);
+    } else {
+      setStatus('Waiting for target');
+      metaTargetEl.textContent = 'No target provided';
+      metaTimeEl.textContent = new Date().toISOString();
+      renderFindings([]);
+      renderDns({ A: null, AAAA: null, CAA: null, MX: null, NS: null, TXT: null });
+    }
+  })();
+</script>
diff --git a/passive-scanner/index.html b/passive-scanner/index.html
index 396e559..798876e 100644
--- a/passive-scanner/index.html
+++ b/passive-scanner/index.html
@@ -1,7 +1,7 @@
 ---
 layout: default
 title: "OWTF Passive Scanner"
-description: "Run the OWTF online passive scanner from a Jekyll-native page."
+description: "Compatibility route for OWTF passive scanner."
 ---
 <div class="pointer-events-none absolute inset-x-0 top-0 -z-10 h-[420px] bg-gradient-to-b from-slate-100 via-white to-white"></div>
 <div class="relative flex min-h-screen flex-col">
@@ -10,18 +10,9 @@
     <section class="section-container pb-24 pt-24">
       <div class="max-w-3xl space-y-6">
         <p class="text-xs font-semibold uppercase tracking-[0.4em] text-slate-500">Passive scanner</p>
-        <h1 class="text-4xl font-semibold tracking-tight text-slate-900 sm:text-5xl">Scan a target URL</h1>
-        <p class="text-lg leading-relaxed text-slate-600">Passive scanning reviews publicly exposed signals such as headers, metadata, and client-side behavior to surface likely security misconfigurations without active exploitation.</p>
-      </div>
-
-      <div class="mt-12 rounded-3xl border border-slate-200 bg-white p-8 shadow-card">
-        <label for="target-url" class="text-sm font-semibold text-slate-900">Target URL</label>
-        <input id="target-url" type="url" placeholder="https://www.example.com" class="mt-3 block rounded-2xl border border-slate-200 bg-white p-5 text-sm text-slate-900" style="width:100%" />
-        <p id="scanner-error" class="mt-2 text-sm text-slate-600" style="display:none"></p>
-        <div class="mt-6 flex flex-col gap-4 sm:flex-row sm:items-center">
-          <button id="run-passive-scan" class="inline-flex items-center justify-center gap-2 rounded-full bg-slate-900 px-6 py-3 text-sm font-semibold text-white transition hover:bg-slate-700">Open passive report<span class="text-lg leading-none">&rarr;</span></button>
-          <a href="/online-passive-scanner/" class="inline-flex items-center justify-center gap-2 rounded-full border border-slate-200 px-6 py-3 text-sm font-semibold text-slate-700 transition hover:border-slate-300 hover:text-slate-900">Open legacy scanner UI</a>
-        </div>
+        <h1 class="text-4xl font-semibold tracking-tight text-slate-900 sm:text-5xl">Moved to the online scanner route</h1>
+        <p class="text-lg leading-relaxed text-slate-600">This path is kept for compatibility. You are being redirected to the rebuilt scanner at `/online-passive-scanner/`.</p>
+        <a href="/online-passive-scanner/" class="inline-flex items-center gap-2 rounded-full bg-slate-900 px-6 py-3 text-sm font-semibold text-white transition hover:bg-slate-700">Open scanner<span class="text-lg leading-none">&rarr;</span></a>
       </div>
     </section>
   </main>
@@ -29,37 +20,6 @@ <h1 class="text-4xl font-semibold tracking-tight text-slate-900 sm:text-5xl">Sca
 </div>
 <script>
   (function () {
-    var button = document.getElementById('run-passive-scan');
-    var input = document.getElementById('target-url');
-    var error = document.getElementById('scanner-error');
-
-    function showError(message) {
-      error.textContent = message;
-      error.style.display = 'block';
-    }
-
-    function clearError() {
-      error.textContent = '';
-      error.style.display = 'none';
-    }
-
-    button.addEventListener('click', function () {
-      clearError();
-      var value = (input.value || '').trim();
-      if (!value) {
-        showError('Please enter a URL to continue.');
-        input.focus();
-        return;
-      }
-
-      try {
-        var parsed = new URL(value);
-        var destination = '/passive-scanner/report/#q=' + encodeURIComponent(parsed.href);
-        window.location.assign(destination);
-      } catch (err) {
-        showError('The value provided is not a valid URL.');
-        input.focus();
-      }
-    });
+    window.location.replace('/online-passive-scanner/');
   })();
 </script>
diff --git a/passive-scanner/report/index.html b/passive-scanner/report/index.html
index a3190e9..219d8bf 100644
--- a/passive-scanner/report/index.html
+++ b/passive-scanner/report/index.html
@@ -1,7 +1,7 @@
 ---
 layout: default
 title: "OWTF Passive Scanner Report"
-description: "Review passive scan findings in a modern report interface."
+description: "Compatibility route for OWTF passive scanner report."
 ---
 <div class="pointer-events-none absolute inset-x-0 top-0 -z-10 h-[420px] bg-gradient-to-b from-slate-100 via-white to-white"></div>
 <div class="relative flex min-h-screen flex-col">
@@ -10,33 +10,9 @@
     <section class="section-container pb-24 pt-24">
       <div class="max-w-3xl space-y-6">
         <p class="text-xs font-semibold uppercase tracking-[0.4em] text-slate-500">Passive scanner report</p>
-        <h1 class="text-4xl font-semibold tracking-tight text-slate-900 sm:text-5xl">Target Findings</h1>
-        <p class="text-lg leading-relaxed text-slate-600">This report highlights externally visible signals that can indicate weak security posture, such as risky headers, information disclosure, and client-side findings.</p>
-      </div>
-
-      <div class="mt-12 rounded-3xl border border-slate-200 bg-white p-8 shadow-card">
-        <div class="grid gap-6 md:grid-cols-3">
-          <div class="rounded-2xl border border-slate-200 bg-slate-50 p-6 text-sm text-slate-600 md:col-span-2">
-            <p class="text-xs font-semibold uppercase tracking-[0.35em] text-slate-500">Target</p>
-            <p id="report-target" class="mt-3 break-words text-sm font-semibold text-slate-900">No target selected.</p>
-            <p class="mt-2 text-sm text-slate-600">Enter a URL and reopen the report if you need to switch targets.</p>
-          </div>
-          <div class="rounded-2xl border border-slate-200 bg-slate-50 p-6 text-sm text-slate-600">
-            <p class="text-xs font-semibold uppercase tracking-[0.35em] text-slate-500">Actions</p>
-            <div class="mt-3 flex flex-col gap-3">
-              <a id="open-classic" href="/online-passive-scanner/report-legacy.html" class="inline-flex items-center justify-center rounded-full border border-slate-200 px-4 py-2 text-xs font-semibold text-slate-700 transition hover:border-slate-300 hover:text-slate-900">Open classic report</a>
-              <a href="/passive-scanner/" class="inline-flex items-center justify-center rounded-full bg-slate-900 px-4 py-2 text-xs font-semibold text-white transition hover:bg-slate-700">Scan another URL</a>
-            </div>
-          </div>
-        </div>
-      </div>
-
-      <div class="mt-8 rounded-3xl border border-slate-200 bg-white p-6 shadow-card">
-        <div class="flex items-center justify-between">
-          <h2 class="text-xl font-semibold text-slate-900">Report View</h2>
-          <p class="text-xs uppercase tracking-[0.35em] text-slate-500">Embedded legacy engine</p>
-        </div>
-        <iframe id="legacy-report-frame" title="OWTF passive scanner report" class="mt-4 block rounded-2xl border border-slate-200 bg-white" style="width:100%;min-height:980px"></iframe>
+        <h1 class="text-4xl font-semibold tracking-tight text-slate-900 sm:text-5xl">Moved to the online scanner report route</h1>
+        <p class="text-lg leading-relaxed text-slate-600">This route is preserved for compatibility. You are being redirected to `/online-passive-scanner/report.html`.</p>
+        <a id="open-report-link" href="/online-passive-scanner/report.html" class="inline-flex items-center gap-2 rounded-full bg-slate-900 px-6 py-3 text-sm font-semibold text-white transition hover:bg-slate-700">Open report<span class="text-lg leading-none">&rarr;</span></a>
       </div>
     </section>
   </main>
@@ -44,52 +20,9 @@ <h2 class="text-xl font-semibold text-slate-900">Report View</h2>
 </div>
 <script>
   (function () {
-    var frame = document.getElementById('legacy-report-frame');
-    var openClassic = document.getElementById('open-classic');
-    var reportTarget = document.getElementById('report-target');
-
-    function readTarget() {
-      var hash = window.location.hash || '';
-      var match = hash.match(/(?:^#|&)q=([^&]+)/);
-      if (!match) {
-        return '';
-      }
-      try {
-        return decodeURIComponent(match[1]);
-      } catch (err) {
-        return '';
-      }
-    }
-
-    function loadReport() {
-      var target = readTarget();
-      if (!target) {
-        reportTarget.textContent = 'No target selected.';
-        frame.src = '/online-passive-scanner/report-legacy.html';
-        openClassic.href = '/online-passive-scanner/report-legacy.html';
-        return;
-      }
-
-      reportTarget.textContent = target;
-      var encoded = encodeURIComponent(target);
-      var reportUrl = '/online-passive-scanner/report-legacy.html#q=' + encoded;
-      frame.src = reportUrl;
-      openClassic.href = reportUrl;
-    }
-
-    frame.addEventListener('load', function () {
-      try {
-        var doc = frame.contentDocument;
-        if (!doc) {
-          return;
-        }
-        var style = doc.createElement('style');
-        style.textContent = '.github-ribbon,.page-header,.nav,.navbar,#footer{display:none !important;} body{padding-top:0 !important;background:#fff !important;} .container{width:100% !important;max-width:none !important;}';
-        doc.head.appendChild(style);
-      } catch (err) {
-      }
-    });
-
-    loadReport();
+    var target = '/online-passive-scanner/report.html';
+    var hash = window.location.hash || '';
+    document.getElementById('open-report-link').href = target + hash;
+    window.location.replace(target + hash);
   })();
 </script>