OSINT Resource Center

Aggregates public records, social profiles, and contact data. Useful for identity correlation across multiple data sources.

Deep-dive background checks combining criminal records, addresses, relatives, and contact history.

Search public voter registration data by name, address, or county. Useful for locating individuals in U.S. jurisdictions.

U.S. federal court case access. Search civil, criminal, and bankruptcy cases by party name.

Curated directory of free government public record portals across all 50 U.S. states. Covers court records, criminal repositories, vital records, occupational licensing, property records, military records, and more — organized by jurisdiction and record type. A strong gateway for locating the right agency before searching.

Free aggregator for addresses, phone numbers, and relatives. No account required for basic lookups.

Free people search engine aggregating data from 50+ sources. Search by name, phone, email, or address to surface contact details, residential history, property data, and demographic information. Claims coverage of 2.2 billion names, 1.7 billion emails, and 1 billion phone numbers.

Comprehensive people-search combining white pages, criminal records, and social media links.

U.S. white pages directory for reverse phone lookups, address history, and associated names. One of the oldest and most comprehensive people-search aggregators.

Free genealogy-based people search exposing relatives, historical addresses, and age data. Frequently overlooked but highly effective for building subject timelines.

Free reverse phone number lookup returning carrier, owner name, and line type (mobile/landline/VoIP). No account required.

Deep people-search aggregator with address history, business affiliations, social profiles, and court records. Useful for cross-referencing across multiple identity vectors.

Free people search using publicly available data. Returns addresses, phone numbers, and relatives without requiring a subscription.

Free people search engine that scans social networks, public records, and username registrations. Quickly surfaces linked accounts and profiles across platforms from a single name or username query.

People search and address lookup aggregator. Search by name, address, or phone to surface current and historical residences, neighbors, and associated individuals — useful for building address timelines and locating subjects.

Professional-grade identity resolution engine. Aggregates deep web, social, and contact data into unified identity profiles. Widely used by investigators and fraud analysts.

U.S. license plate lookup tool covering all 50 states and Washington D.C. Search by plate number and state to retrieve associated vehicle data. Useful for vehicle attribution during field investigations or when a plate appears in imagery or witness reports.

Consumer background check platform covering criminal records, addresses, phone numbers, emails, and social media. Useful for rapid subject overviews.

Search engine for internet-connected devices. Query banners, open ports, services, SSL certs, and geolocation for any IP or domain.

Internet-wide scan data with certificate transparency, TLS analysis, and host enumeration. Strong API for automation.

Domain registration data including registrant, registrar, and nameservers. Multiple providers for historical data.

Historical DNS, WHOIS, and subdomain enumeration. Track infrastructure changes over time.

Geolocation, ASN, carrier, and abuse contact data for IP addresses. Fast API with 50k free requests/month.

Identify the manufacturer and vendor of any device by its MAC address or OUI prefix. Queries a database of 57,000+ prefixes sourced from IEEE and Wireshark. Supports batch lookups, a free REST API, and downloadable databases in JSON, CSV, and Cisco XML formats — useful for network forensics and device attribution.

Official OUI lookup tool maintained by the Wireshark project. Resolves MAC address prefixes to manufacturer names using the same database bundled with Wireshark. Useful for quick vendor attribution during packet analysis or network forensics.

The authoritative raw OUI registry published directly by the IEEE Standards Association. Plain-text file listing all registered Organizationally Unique Identifiers and their assigned vendors. Useful for offline lookups, scripting, and building custom MAC attribution tooling.

Open-source Python CLI tool for offline MAC/OUI vendor lookups. Queries a locally cached copy of the IEEE OUI database — no internet required after setup. Useful for bulk lookups, scripted workflows, and air-gapped or privacy-sensitive investigations.

Technology profiling for websites — CMS, analytics, CDN, ad networks, and framework detection.

Free DNS recon and research tool. Discover DNS records and visualize domain infrastructure as a graph.

Domain-to-IP lookup with full DNS records, security scoring, tech stack fingerprinting, and enriched network intelligence data. Free tool, no account required.

Instant public IP address lookup. Returns your external IP in plain text or JSON — useful for confirming VPN/proxy exit nodes and verifying source attribution during investigations.

Certificate Transparency log search engine. Query all SSL/TLS certificates ever issued for a domain to enumerate subdomains, discover infrastructure, and identify historically registered assets that may no longer be publicly visible.

All-in-one open-source website intelligence tool. Returns IP info, DNS records, SSL chain, WHOIS, redirect chain, headers, cookies, trackers, server location, linked pages, and more — from a single domain query.

Deep URL and website analysis platform. Scans for phishing, malware, brand impersonation, and tech stack fingerprinting. Useful for vetting suspicious links, investigating lookalike domains, and integrating automated URL scanning via API or Python package.

Generates and searches favicon hashes to cluster related web infrastructure. Identify domains sharing the same favicon — revealing shared hosting, common ownership, or reused templates across both the clearnet and dark web. Pairs well with Shodan favicon searches.

Suite of DNS and network reconnaissance tools in one place. Covers reverse IP lookup, DNS propagation, WHOIS, port scanning, reverse WHOIS, traceroute, and more. Useful for mapping domain infrastructure and identifying shared hosting across multiple domains.

Maps IP addresses to their Autonomous System Number (ASN) and organization. Useful for attributing infrastructure to hosting providers, ISPs, or specific network operators during IP-based investigations.

Real-time social media monitoring across Twitter, Facebook, YouTube, Reddit, and more. Sentiment analysis included.

Intelligence X searches pastes, leaks, and indexed social content. Useful for finding deleted posts and account data.

Snap Map provides public geotagged story content. Useful for event-based geospatial verification.

PushShift and native Reddit search for historical post and comment data. Advanced operators supported.

Enterprise social listening platform with historical data, AI-powered analysis, and influence mapping.

Native advanced search operators for X (Twitter). Filter by date, location, language, engagement, and account. Essential for timeline reconstruction and event monitoring.

Search and analyze Telegram channels, groups, and posts. View subscriber history, post frequency, and cross-channel mentions. Useful for tracking influence networks.

Search engine for social media groups and channels across Telegram, Discord, WhatsApp, Slack, Signal, and Facebook. Filter by category, language, location, and member count — useful for mapping communities and tracking influence networks.

Search engine for YouTube subtitles and transcripts across over 1.6 billion videos. Supports advanced operators including exact phrases, proximity matching, and channel filtering — useful for finding specific spoken content that wouldn't surface through standard YouTube search.

Native TikTok search for accounts, hashtags, and sounds. Combined with browser dev tools, analysts can surface geotagged content and account metadata from public profiles.

Twitter/X analytics tool for searching bios, comparing followers, mapping social graphs, and identifying influential accounts within a target network.

Privacy-friendly X (Twitter) viewer. Browse profiles, posts, and threads without an account or login wall — useful for accessing X content anonymously during investigations without leaving a trace.

Professional SOCMINT platform with Maltego integration. Automates data collection from 150+ social networks, messengers, and blockchain sources for link analysis.

Use Facebook's native search with graph search operators and URL manipulation techniques to find profiles, posts, and connections by location, employer, or name.

Comprehensive emoji reference and search engine. Look up emoji meanings, platform rendering differences, and usage context. Useful for interpreting social media posts and understanding how the same emoji may display differently across devices and platforms.

Custom ChatGPT tool for analyzing mutual friend and connection overlap across social networks. Useful for mapping shared social circles, identifying common contacts between subjects, and visualizing relationship networks during social media investigations.

ESA satellite imagery browser. Multi-temporal analysis across Sentinel, Landsat, and MODIS datasets.

Historical satellite imagery, terrain analysis, and measurement tools. Timeline feature for change detection.

Open, crowdsourced street-level imagery platform — a free alternative to Google Street View. Useful for geolocating images in areas where Google has no coverage, cross-referencing locations, and accessing image metadata including GPS coordinates and timestamps. Public API available for programmatic use.

3m x 3m grid addressing system. Correlate What3Words locations with coordinates for precision verification.

Real-time and historical aircraft tracking. ADS-B based flight data with tail number and route history.

Global AIS vessel tracking. Identify ships by MMSI, IMO, or vessel name with historical voyage data.

Shipping container tracking and supply chain visibility tool. Monitor container locations, status, and movement across global shipping routes — useful for investigating cargo shipments, trade activity, and supply chain intelligence.

Open-source real-time 3D satellite and space object tracking platform. Visualize all catalogued objects in Earth orbit — satellites, debris, and rocket bodies — with launch history, orbital parameters, and sensor coverage data. Useful for space situational awareness and satellite imagery scheduling.

Interactive 3D sun position and shadow simulation for any location and time on Earth. Invaluable for geolocating photos by cross-referencing shadow direction and length, verifying timestamps on imagery, and confirming the plausibility of claimed locations.

Calculates sun position, azimuth, altitude, and shadow length for any location and date. Useful for geolocating imagery by matching shadow angles and direction, verifying photo timestamps, and confirming whether lighting conditions are consistent with a claimed time and place.

Worldwide crowdsourced database of WiFi networks, Bluetooth devices, and cell towers mapped by location. Look up an SSID or BSSID to geolocate a network — useful for pinpointing where a device was used, corroborating claimed locations, and tracing movement patterns.

Crowd size estimation tool. Draw an area on any map and calculate the maximum number of people that could physically occupy it using standard crowd density models. Useful for fact-checking crowd size claims in photos, videos, and news reports.

Real-time power outage aggregation platform covering ~943 U.S. utilities, updated every 10 minutes. Includes NOAA weather radar overlay, historical outage data back to 2016, and county/utility-level breakdowns. Useful for situational awareness during storms, wildfires, or infrastructure incidents — and for correlating outage patterns with other OSINT signals.

Upload or paste an image URL to find similar images, source pages, and related content across the web.

Reverse image search with timestamp data showing where and when an image first appeared online.

Extract metadata from images and files: GPS coordinates, camera model, timestamps, and software signatures.

Browser-based metadata viewer for images and files. Extracts EXIF, XMP, IPTC, ICC, GPS coordinates, file hashes, and PDF metadata — all processed locally with no file upload. Compares output across multiple parsing engines, exports raw JSON, and maps GPS coordinates via OpenStreetMap. Also includes tools for stripping metadata and resizing images.

Video verification toolkit for journalists and analysts. Keyframe extraction, reverse video search, and metadata.

Free deepfake detection tool that analyzes videos for AI-generated facial manipulation. Accepts direct uploads or URLs from YouTube, Facebook, and Twitter, and returns a probability score for face-swap deepfakes. Results are probabilistic — best used as an indicator within a broader verification workflow.

Free AI-generated and deepfake content detection across images, video, audio, and text. Returns probability scores for synthetic content — including segment-level breakdowns for audio. No login required for basic use. Useful for quickly verifying whether media or written content was AI-generated before deeper investigation.

AI-generated content detection for images and text. Identifies the probability of AI generation and attempts to pinpoint which AI model produced the content. For text, highlights specific passages most likely to be AI-written. Free for basic use — useful as a cross-reference tool alongside other AI detection platforms.

Detects AI-generated and cloned voices in audio and video files. Processes audio in 6-second chunks to flag specific segments containing synthetic speech, with support for MP3, WAV, OGG, M4A, MP4, and MOV files up to 10 minutes. Includes background noise removal to improve accuracy. Useful for verifying the authenticity of recorded statements, calls, or media clips.

Browser-based image forensics tool for detecting photo manipulation. Features include clone detection, error level analysis, noise analysis, and a forensic magnifier with histogram equalization — all processed locally with no image upload.

Web-based image forensics tool specializing in Error Level Analysis (ELA) to identify areas of an image that may have been digitally altered. Accepts JPEG, PNG, WebP, HEIC, and AVIF files by upload or URL. Includes tutorials on interpreting results — useful for verifying the integrity of photos before publication or use in investigations.

Face recognition-based reverse image search. Find where a face appears across indexed web content.

Often finds matches that Google misses, particularly for Eastern European and Russian-language content.

Reverse image and facial recognition search tool. Upload a photo to find matching faces and images across the web — useful for identifying unknown subjects, verifying profile photos, and uncovering alternate accounts.

AI-powered image object removal tool. Erase unwanted elements, text, watermarks, or people from photos with a single brush stroke — useful for isolating subjects, cleaning evidence photos, and preparing images for further analysis or reporting.

AI-powered vehicle identification from images. Recognizes make, model, generation, color, and angle across 300+ brands and 3,100+ models — useful for identifying vehicles in surveillance footage, social media photos, or evidence images.

Username enumeration across 300+ social networks. Command-line tool with fast concurrent lookups.

Find and verify professional email addresses by domain. Identify email patterns for organizations.

Reverse email lookup revealing linked accounts, Google ID, and Gravatar profile from an email address.

Locally-runnable Python implementation of WhatsMyName that searches usernames across hundreds of sites using the same community-maintained dataset. Runs on your machine rather than a web interface — supports automated HTML, JSON, and CSV reporting, adjustable concurrency, and full logging. Open-source and free.

Check if an email address has appeared in known data breaches. API available for automated monitoring.

Email reputation API scoring risk, age, associations, and deliverability of any email address.

Multi-AV scanner for files, URLs, IPs, and domains. Graph view shows relationships between IOCs.

Community-reported malicious IP database. Check reputation scores and abuse categories for any IP address.

Open threat exchange with community-shared IOC pulses. Integrates with SIEMs and security tools.

Interactive online sandbox for malware analysis. Real-time behavior monitoring with MITRE ATT&CK mapping.

Threat intelligence platform aggregating feeds, indicators, and risk scores with timeline views.

Enterprise threat intelligence platform. Real-time dark web, technical, and geopolitical threat data.

Free malware sandbox by CrowdStrike. Submits files and URLs for dynamic behavioral analysis with MITRE ATT&CK tagging, network captures, and YARA rule matches.

Abuse.ch's free malware sample repository. Search and download samples by hash, tag, signature, or file type. Integrates with threat feeds and MISP.

Automated URL and website scanner. Captures screenshots, DOM content, resource requests, and IP/certificate data for any submitted URL. Searchable public archive.

Cisco Talos IP and domain reputation center. Check threat scores, email/web reputation, and historical activity for any host or sender.

Abuse.ch IOC sharing platform. Search and export malware indicators (IPs, domains, URLs, hashes) with associated malware family tags and confidence scores.

Community-verified phishing URL database. Submit, verify, and query suspected phishing links. Free API available for integration into security workflows.

Classifies internet background noise — distinguishing mass scanners, bots, and crawlers from targeted attack traffic. Helps analysts filter false positives in threat data.

Threat intelligence sharing platform from IBM. Search IPs, URLs, hashes, and CVEs with community annotations and integration into SIEM/SOAR platforms.

Free cybercrime intelligence tools powered by Hudson Rock's infostealer malware database. Search compromised credentials, infected machines, and corporate exposure from Raccoon, Vidar, Redline, and other stealer logs.

Global interactive index measuring organized crime levels and government resilience across 193 countries. Tracks criminal markets (trafficking, drugs, arms), criminal actor types, and anti-crime capacity — with historical data from 2019–2025 and overlay layers for ports, borders, and infrastructure.

Clearnet search engine for indexed Tor .onion sites. Filters out illegal content and child abuse material.

One of the oldest crawler-based search engines for the Tor network. Indexes .onion hidden services not accessible via surface-web search engines. Unfiltered results — treat all returned links as untrusted until verified. Accessible only via Tor Browser. Useful as a starting point for discovering hidden services and researching threat actor infrastructure.

Search engine for pastes, leaks, and dark web data. Indexes historical and deleted content.

Enterprise dark web monitoring and intelligence platform. Automated alerting for organizational exposure.

Troy Hunt's breach database. Check emails and phone numbers against 12+ billion breached records.

Search breached databases by email, username, IP, name, phone, VIN, or address. Large corpus of historical leaks.

Search indexed exposed databases and services on the internet. Alerts for new exposures by domain.

Fast API-based breach search. Check for specific credentials or domains in known breach datasets.

Employee enumeration, organizational structure mapping, and professional history. Critical for corporate OSINT.

World's largest open database of companies. Search corporate filings, officers, and subsidiaries globally.

U.S. Securities and Exchange Commission filings database. 10-K, 10-Q, 8-K, and insider trading disclosures.

Florida Division of Corporations registry. Search business entities, registered agents, and officers.

Startup and venture capital data. Funding rounds, investors, acquisitions, and executive team changes.

ICIJ's searchable database of offshore entities from the Panama Papers, Pandora Papers, Paradise Papers, and other major financial leaks. Search individuals, companies, and intermediaries across secretive jurisdictions to trace hidden assets and financial networks.

Website traffic analytics and competitive intelligence platform. Estimates monthly visits, traffic sources, audience geography, referral sites, and top keywords. Useful for profiling organizations, assessing web presence, and mapping digital footprint.

Link analysis and data visualization platform. Transforms enable automated OSINT pivoting across entities.

Automated OSINT reconnaissance tool. 200+ data sources, built-in reporting, and HX cloud version available.

Archive.org's historical web capture database. View cached versions of websites and recover deleted content.

Web reconnaissance framework with modular design. Modules for WHOIS, social, geolocation, and reporting.

Gather emails, subdomains, hosts, employee names from public sources. Classic OSINT enumeration tool.

Community-maintained mind-map of OSINT tools organized by category. Essential reference for analysts.

Website change monitoring tool that tracks specific page elements and alerts via email, Slack, Discord, SMS, or webhook when content updates. Supports authenticated pages, PDFs, and maintains a full version history with visual diffs. Useful for monitoring targets, tracking policy changes, and alerting on new content.

Collection of browser bookmarklets that extract hidden metadata and profile data directly from public pages on platforms including Facebook, Airbnb, Flickr, Google Maps, and others. Returns user IDs, creation dates, contact details, and high-resolution images in draggable modal windows with JSON and clipboard export. No software installation required — drag to bookmarks bar and run on demand.

Free web monitoring service for tracking keyword mentions across news, blogs, Twitter, and discussion forums. Set up alerts for names, organizations, events, or topics and receive results via email or RSS — delivered in real-time, daily, or weekly. A reliable alternative to Google Alerts for ongoing subject and narrative monitoring.

Visual website change detection with before-and-after screenshot comparisons and AI-generated change summaries. Monitors for text, code, and visual changes with alerts via email, SMS, Slack, or Teams. Useful for tracking targets, competitor activity, regulatory updates, and content removals.

Google dorking tool with a curated library of search operators and a visual dork builder. Quickly construct advanced queries to surface exposed files, admin panels, misconfigured assets, and indexed credentials. Includes AI-assisted query composition and a PRO tier with extended capabilities.

AI-powered Google dork generator that converts plain-language requests into structured search queries using operators like site:, filetype:, and inurl:. Lowers the barrier to advanced search recon — useful for analysts who know what they're looking for but not the exact dork syntax.

Passive reconnaissance platform that generates 150+ optimized Google dork queries across 12 professional categories. Covers exposed files, credentials, login panels, and misconfigured servers — all processing happens client-side with no server data retention.

Privacy-focused, ad-free search engine that returns unmanipulated results without tracking or profiling. Useful for OSINT research where you want clean, unfiltered results — no filter bubble, no personalization skewing what surfaces. Supports advanced search operators and Lenses for searching curated subsets of the web.

FOIA request platform and document repository. Search filed requests, responses, and government documents.

Upload, analyze, and annotate primary source documents. Full-text search across journalist-submitted materials.

Streamline FOIA requests with automatic agency routing and deadline tracking.

Extract and analyze metadata from PDFs, Office documents, images, and media files for hidden information.

Search engine that indexes publicly accessible open directories across the internet. Useful for discovering exposed documents, backups, and misconfigured file servers — surfaces data that standard search engines don't index.