OSINT Resource Center

Aggregates public records, social profiles, and contact data. Useful for identity correlation across multiple data sources.

Deep-dive background checks combining criminal records, addresses, relatives, and contact history.

Search public voter registration data by name, address, or county. Useful for locating individuals in U.S. jurisdictions.

U.S. federal court case access. Search civil, criminal, and bankruptcy cases by party name.

Curated directory of free government public record portals across all 50 U.S. states. Covers court records, criminal repositories, vital records, occupational licensing, property records, military records, and more — organized by jurisdiction and record type. A strong gateway for locating the right agency before searching.

Free aggregator for addresses, phone numbers, and relatives. No account required for basic lookups.

Free people search engine aggregating data from 50+ sources. Search by name, phone, email, or address to surface contact details, residential history, property data, and demographic information. Claims coverage of 2.2 billion names, 1.7 billion emails, and 1 billion phone numbers.

Comprehensive people-search combining white pages, criminal records, and social media links.

U.S. white pages directory for reverse phone lookups, address history, and associated names. One of the oldest and most comprehensive people-search aggregators.

Free genealogy-based people search exposing relatives, historical addresses, and age data. Frequently overlooked but highly effective for building subject timelines.

Free reverse phone number lookup returning carrier, owner name, and line type (mobile/landline/VoIP). No account required.

Deep people-search aggregator with address history, business affiliations, social profiles, and court records. Useful for cross-referencing across multiple identity vectors.

Free people search using publicly available data. Returns addresses, phone numbers, and relatives without requiring a subscription.

Free people search engine that scans social networks, public records, and username registrations. Quickly surfaces linked accounts and profiles across platforms from a single name or username query.

People search and address lookup aggregator. Search by name, address, or phone to surface current and historical residences, neighbors, and associated individuals — useful for building address timelines and locating subjects.

Professional-grade identity resolution engine. Aggregates deep web, social, and contact data into unified identity profiles. Widely used by investigators and fraud analysts.

Consumer background check platform covering criminal records, addresses, phone numbers, emails, and social media. Useful for rapid subject overviews.

Search engine for internet-connected devices. Query banners, open ports, services, SSL certs, and geolocation for any IP or domain.

Internet-wide scan data with certificate transparency, TLS analysis, and host enumeration. Strong API for automation.

Domain registration data including registrant, registrar, and nameservers. Multiple providers for historical data.

Historical DNS, WHOIS, and subdomain enumeration. Track infrastructure changes over time.

Geolocation, ASN, carrier, and abuse contact data for IP addresses. Fast API with 50k free requests/month.

Identify the manufacturer and vendor of any device by its MAC address or OUI prefix. Queries a database of 57,000+ prefixes sourced from IEEE and Wireshark. Supports batch lookups, a free REST API, and downloadable databases in JSON, CSV, and Cisco XML formats — useful for network forensics and device attribution.

Technology profiling for websites — CMS, analytics, CDN, ad networks, and framework detection.

Free DNS recon and research tool. Discover DNS records and visualize domain infrastructure as a graph.

Domain-to-IP lookup with full DNS records, security scoring, tech stack fingerprinting, and enriched network intelligence data. Free tool, no account required.

Instant public IP address lookup. Returns your external IP in plain text or JSON — useful for confirming VPN/proxy exit nodes and verifying source attribution during investigations.

Certificate Transparency log search engine. Query all SSL/TLS certificates ever issued for a domain to enumerate subdomains, discover infrastructure, and identify historically registered assets that may no longer be publicly visible.

All-in-one open-source website intelligence tool. Returns IP info, DNS records, SSL chain, WHOIS, redirect chain, headers, cookies, trackers, server location, linked pages, and more — from a single domain query.

Deep URL and website analysis platform. Scans for phishing, malware, brand impersonation, and tech stack fingerprinting. Useful for vetting suspicious links, investigating lookalike domains, and integrating automated URL scanning via API or Python package.

Generates and searches favicon hashes to cluster related web infrastructure. Identify domains sharing the same favicon — revealing shared hosting, common ownership, or reused templates across both the clearnet and dark web. Pairs well with Shodan favicon searches.

Real-time social media monitoring across Twitter, Facebook, YouTube, Reddit, and more. Sentiment analysis included.

Intelligence X searches pastes, leaks, and indexed social content. Useful for finding deleted posts and account data.

Snap Map provides public geotagged story content. Useful for event-based geospatial verification.

PushShift and native Reddit search for historical post and comment data. Advanced operators supported.

Enterprise social listening platform with historical data, AI-powered analysis, and influence mapping.

Native advanced search operators for X (Twitter). Filter by date, location, language, engagement, and account. Essential for timeline reconstruction and event monitoring.

Search and analyze Telegram channels, groups, and posts. View subscriber history, post frequency, and cross-channel mentions. Useful for tracking influence networks.

Search engine for social media groups and channels across Telegram, Discord, WhatsApp, Slack, Signal, and Facebook. Filter by category, language, location, and member count — useful for mapping communities and tracking influence networks.

Search engine for YouTube subtitles and transcripts across over 1.6 billion videos. Supports advanced operators including exact phrases, proximity matching, and channel filtering — useful for finding specific spoken content that wouldn't surface through standard YouTube search.

Native TikTok search for accounts, hashtags, and sounds. Combined with browser dev tools, analysts can surface geotagged content and account metadata from public profiles.

Twitter/X analytics tool for searching bios, comparing followers, mapping social graphs, and identifying influential accounts within a target network.

Privacy-friendly X (Twitter) viewer. Browse profiles, posts, and threads without an account or login wall — useful for accessing X content anonymously during investigations without leaving a trace.

Professional SOCMINT platform with Maltego integration. Automates data collection from 150+ social networks, messengers, and blockchain sources for link analysis.

Use Facebook's native search with graph search operators and URL manipulation techniques to find profiles, posts, and connections by location, employer, or name.

ESA satellite imagery browser. Multi-temporal analysis across Sentinel, Landsat, and MODIS datasets.

Historical satellite imagery, terrain analysis, and measurement tools. Timeline feature for change detection.

Open, crowdsourced street-level imagery platform — a free alternative to Google Street View. Useful for geolocating images in areas where Google has no coverage, cross-referencing locations, and accessing image metadata including GPS coordinates and timestamps. Public API available for programmatic use.

3m x 3m grid addressing system. Correlate What3Words locations with coordinates for precision verification.

Real-time and historical aircraft tracking. ADS-B based flight data with tail number and route history.

Global AIS vessel tracking. Identify ships by MMSI, IMO, or vessel name with historical voyage data.

Shipping container tracking and supply chain visibility tool. Monitor container locations, status, and movement across global shipping routes — useful for investigating cargo shipments, trade activity, and supply chain intelligence.

Open-source real-time 3D satellite and space object tracking platform. Visualize all catalogued objects in Earth orbit — satellites, debris, and rocket bodies — with launch history, orbital parameters, and sensor coverage data. Useful for space situational awareness and satellite imagery scheduling.

Interactive 3D sun position and shadow simulation for any location and time on Earth. Invaluable for geolocating photos by cross-referencing shadow direction and length, verifying timestamps on imagery, and confirming the plausibility of claimed locations.

Calculates sun position, azimuth, altitude, and shadow length for any location and date. Useful for geolocating imagery by matching shadow angles and direction, verifying photo timestamps, and confirming whether lighting conditions are consistent with a claimed time and place.

Worldwide crowdsourced database of WiFi networks, Bluetooth devices, and cell towers mapped by location. Look up an SSID or BSSID to geolocate a network — useful for pinpointing where a device was used, corroborating claimed locations, and tracing movement patterns.

Real-time power outage aggregation platform covering ~943 U.S. utilities, updated every 10 minutes. Includes NOAA weather radar overlay, historical outage data back to 2016, and county/utility-level breakdowns. Useful for situational awareness during storms, wildfires, or infrastructure incidents — and for correlating outage patterns with other OSINT signals.

Upload or paste an image URL to find similar images, source pages, and related content across the web.

Reverse image search with timestamp data showing where and when an image first appeared online.

Extract metadata from images and files: GPS coordinates, camera model, timestamps, and software signatures.

Video verification toolkit for journalists and analysts. Keyframe extraction, reverse video search, and metadata.

Free deepfake detection tool that analyzes videos for AI-generated facial manipulation. Accepts direct uploads or URLs from YouTube, Facebook, and Twitter, and returns a probability score for face-swap deepfakes. Results are probabilistic — best used as an indicator within a broader verification workflow.

Free AI-generated and deepfake content detection across images, video, audio, and text. Returns probability scores for synthetic content — including segment-level breakdowns for audio. No login required for basic use. Useful for quickly verifying whether media or written content was AI-generated before deeper investigation.

AI-generated content detection for images and text. Identifies the probability of AI generation and attempts to pinpoint which AI model produced the content. For text, highlights specific passages most likely to be AI-written. Free for basic use — useful as a cross-reference tool alongside other AI detection platforms.

Detects AI-generated and cloned voices in audio and video files. Processes audio in 6-second chunks to flag specific segments containing synthetic speech, with support for MP3, WAV, OGG, M4A, MP4, and MOV files up to 10 minutes. Includes background noise removal to improve accuracy. Useful for verifying the authenticity of recorded statements, calls, or media clips.

Browser-based image forensics tool for detecting photo manipulation. Features include clone detection, error level analysis, noise analysis, and a forensic magnifier with histogram equalization — all processed locally with no image upload.

Web-based image forensics tool specializing in Error Level Analysis (ELA) to identify areas of an image that may have been digitally altered. Accepts JPEG, PNG, WebP, HEIC, and AVIF files by upload or URL. Includes tutorials on interpreting results — useful for verifying the integrity of photos before publication or use in investigations.

Face recognition-based reverse image search. Find where a face appears across indexed web content.

Often finds matches that Google misses, particularly for Eastern European and Russian-language content.

Reverse image and facial recognition search tool. Upload a photo to find matching faces and images across the web — useful for identifying unknown subjects, verifying profile photos, and uncovering alternate accounts.

AI-powered image object removal tool. Erase unwanted elements, text, watermarks, or people from photos with a single brush stroke — useful for isolating subjects, cleaning evidence photos, and preparing images for further analysis or reporting.

AI-powered vehicle identification from images. Recognizes make, model, generation, color, and angle across 300+ brands and 3,100+ models — useful for identifying vehicles in surveillance footage, social media photos, or evidence images.

Username enumeration across 300+ social networks. Command-line tool with fast concurrent lookups.

Find and verify professional email addresses by domain. Identify email patterns for organizations.

Reverse email lookup revealing linked accounts, Google ID, and Gravatar profile from an email address.

Username search across hundreds of websites. Crowdsourced data file maintained by the OSINT community.

Check if an email address has appeared in known data breaches. API available for automated monitoring.

Email reputation API scoring risk, age, associations, and deliverability of any email address.

Multi-AV scanner for files, URLs, IPs, and domains. Graph view shows relationships between IOCs.

Community-reported malicious IP database. Check reputation scores and abuse categories for any IP address.

Open threat exchange with community-shared IOC pulses. Integrates with SIEMs and security tools.

Interactive online sandbox for malware analysis. Real-time behavior monitoring with MITRE ATT&CK mapping.

Threat intelligence platform aggregating feeds, indicators, and risk scores with timeline views.

Enterprise threat intelligence platform. Real-time dark web, technical, and geopolitical threat data.

Free malware sandbox by CrowdStrike. Submits files and URLs for dynamic behavioral analysis with MITRE ATT&CK tagging, network captures, and YARA rule matches.

Abuse.ch's free malware sample repository. Search and download samples by hash, tag, signature, or file type. Integrates with threat feeds and MISP.

Automated URL and website scanner. Captures screenshots, DOM content, resource requests, and IP/certificate data for any submitted URL. Searchable public archive.

Cisco Talos IP and domain reputation center. Check threat scores, email/web reputation, and historical activity for any host or sender.

Abuse.ch IOC sharing platform. Search and export malware indicators (IPs, domains, URLs, hashes) with associated malware family tags and confidence scores.

Community-verified phishing URL database. Submit, verify, and query suspected phishing links. Free API available for integration into security workflows.

Classifies internet background noise — distinguishing mass scanners, bots, and crawlers from targeted attack traffic. Helps analysts filter false positives in threat data.

Threat intelligence sharing platform from IBM. Search IPs, URLs, hashes, and CVEs with community annotations and integration into SIEM/SOAR platforms.

Free cybercrime intelligence tools powered by Hudson Rock's infostealer malware database. Search compromised credentials, infected machines, and corporate exposure from Raccoon, Vidar, Redline, and other stealer logs.

Global interactive index measuring organized crime levels and government resilience across 193 countries. Tracks criminal markets (trafficking, drugs, arms), criminal actor types, and anti-crime capacity — with historical data from 2019–2025 and overlay layers for ports, borders, and infrastructure.

Clearnet search engine for indexed Tor .onion sites. Filters out illegal content and child abuse material.

Search engine for pastes, leaks, and dark web data. Indexes historical and deleted content.

Enterprise dark web monitoring and intelligence platform. Automated alerting for organizational exposure.

Troy Hunt's breach database. Check emails and phone numbers against 12+ billion breached records.

Search breached databases by email, username, IP, name, phone, VIN, or address. Large corpus of historical leaks.

Search indexed exposed databases and services on the internet. Alerts for new exposures by domain.

Fast API-based breach search. Check for specific credentials or domains in known breach datasets.

Employee enumeration, organizational structure mapping, and professional history. Critical for corporate OSINT.

World's largest open database of companies. Search corporate filings, officers, and subsidiaries globally.

U.S. Securities and Exchange Commission filings database. 10-K, 10-Q, 8-K, and insider trading disclosures.

Florida Division of Corporations registry. Search business entities, registered agents, and officers.

Startup and venture capital data. Funding rounds, investors, acquisitions, and executive team changes.

ICIJ's searchable database of offshore entities from the Panama Papers, Pandora Papers, Paradise Papers, and other major financial leaks. Search individuals, companies, and intermediaries across secretive jurisdictions to trace hidden assets and financial networks.

Link analysis and data visualization platform. Transforms enable automated OSINT pivoting across entities.

Automated OSINT reconnaissance tool. 200+ data sources, built-in reporting, and HX cloud version available.

Archive.org's historical web capture database. View cached versions of websites and recover deleted content.

Web reconnaissance framework with modular design. Modules for WHOIS, social, geolocation, and reporting.

Gather emails, subdomains, hosts, employee names from public sources. Classic OSINT enumeration tool.

Community-maintained mind-map of OSINT tools organized by category. Essential reference for analysts.

FOIA request platform and document repository. Search filed requests, responses, and government documents.

Upload, analyze, and annotate primary source documents. Full-text search across journalist-submitted materials.

Streamline FOIA requests with automatic agency routing and deadline tracking.

Extract and analyze metadata from PDFs, Office documents, images, and media files for hidden information.