Research & Queries
Finds and collects information through specific searches or queries.
- 192.comFreemiumPeople and address search focused on the United Kingdom.
- AhmiaFreeSearch engine for publicly indexed Tor onion pages with open source code.
- Aliens EyeFreeA local tool for searching usernames, profile characteristics and possible connections between accounts.
- Analyze IDPaidFinds related websites through shared identifiers and also provides a Username Checker.
- AnnualReports.comFreeFree archive of published annual reports from international companies in HTML or PDF.
- APNIC WhoisFreeOfficial registry for IP addresses and AS numbers in the Asia-Pacific region, complemented by WhoWas historical records.
- ArcGIS Map ViewerFreemiumWeb application for interactive maps in ArcGIS Online: view, combine, filter and style map layers.
OPSEC caution
Commenting on an ArcGIS Online item notifies its owner by email. Replies to comments trigger an email to the person who wrote the comment.
- ArcGIS Wayback ImageryUnknownArchive of earlier versions of Esri's World Imagery map since 2014. Compares aerial and satellite imagery and displays its metadata.
- ArgusFreeLocal Python toolkit for domain, network and website research through a shared command line.
- ARIN Whois/RDAPFreeOfficial registry access for IP networks, AS numbers, organisations and network contacts.
- Ashley Madison Hacked Email CheckerUnknownInterface for checking email addresses against the Ashley Madison dataset.
- asnFreeLocally installable tool for IP, ASN and BGP research, with traceroute, JSON output and its own API server.
- asnmapFreeA local tool and Go library for finding network ranges from an ASN, IP address, domain or organisation name.
- BackTweetsUnknownTraces links and public mentions of a URL and shows its web archive history and AI visibility.
OPSEC caution
The AI readability check retrieves the entered website live and examines its raw HTML and robots.txt, among other things. The target server receives these requests.
- Baidu Image SearchUnknownBaidu's Chinese-language image search finds images by keyword and links to their source pages.
- Bing MapsUnknownMapping service for finding places, viewing maps and obtaining directions.
- BinlistFreemiumIdentifies the card issuer, card type and issuing country from the first six to eight digits of a payment card.
- Bitcoin Who's WhoFreeFinds transactions, web mentions and reports of possible fraud associated with Bitcoin addresses.
- Blockchain.com ExplorerFreemiumSearches transactions, addresses and blocks on Bitcoin, Ethereum, Solana and Bitcoin Cash.
- BlockExplorerUnknownMulti-chain explorer for public blocks, transactions and wallet addresses.
- BuiltWithFreemiumIdentifies website technologies and shows their usage history, as well as websites using matching technologies or keywords.
- CACI DarkBlue Intelligence SuitePrice on requestPlatform for open, deep and dark web research, with searchable datasets and AI-assisted analysis.
- Canada411FreeA Canadian telephone directory with searches by person, address and telephone number.
OPSEC caution
The “Make my address book public” option makes the address book visible to visitors to the online profile. Entries marked as private remain hidden.
- cariddiFreeLocal web crawler for finding URLs, endpoints, files and potentially exposed keys.
- CarrierLookupFreemiumA web service for carrier and line type lookups, with free individual queries and a paid API.
- CensysFreemiumSearch platform for internet services, IP addresses, domains and publicly observed TLS certificates.
- CentralOpsFreemiumOnline tools for WHOIS and DNS data, domain research and technical email checks.
- ChainabuseFreeReporting database for cryptocurrency fraud and suspicious cryptocurrency addresses and websites.
- Charity NavigatorFreemiumDatabase and ratings of US charities, with information on finances, impact and potential alerts.
- Companies HouseFreeOfficial UK company register with company data, officers, filings and annual accounts.
- CompleteDNSFreemiumHistory of domain nameservers, changes and deletion events since 2002, with reverse lookup and an API.
- COREFreeFree search for scholarly publications and openly available full texts from repositories worldwide.
- CourtListener (RECAP Archive)FreemiumSearches the RECAP archive of US federal court records and PACER documents. Includes an API, search alerts and MCP integration.
- crt.shFreePublic search of Certificate Transparency logs by domains, organisations and certificates.
- CrunchbaseFreemiumCompany database covering funding, investors and market information, with AI-assisted company search.
- dark.failFreeDirectory of selected onion services with availability indicators and PGP tools for checking addresses.
- darkdumpFreeLocal tool for searching the darknet and extracting content from matching pages. Includes a web interface, CLI and file export.
- Darkside (District 4 Labs)Price on requestDatabase for people and threat research using compromised data, leaks and other personal information.
- DataSploitFreeLocal Python framework that combines source queries for domains, email addresses, IP addresses and usernames.
- DEA Wanted FugitivesFreePublic wanted-person directory from the US Drug Enforcement Administration, with names and information on alleged offences.
- DeHashedFreemiumSearches collected data breaches by email address, username and other attributes.
- destroylistFreeFree phishing blocklists with domain checks, research reports and an API. Also accessible to AI assistants through MCP.
- Discord Chat ExporterFreeExports Discord messages and attachments to HTML, text, CSV or JSON files that can be read locally.
- DNSdumpsterFreemiumFinds subdomains, DNS records and associated infrastructure from collected internet data.
- DNSReconFreeLocally installable DNS reconnaissance with Python, export features and an optional self-hosted REST API service.
- Domain Research SuiteFreemiumResearches domain registrations, historical WHOIS data and technical connections, and monitors changes.
- domain-diggerFreeOpen-source web application for DNS, WHOIS, IP and certificate information about domains. Can also be self-hosted.
- DomainIQFreemiumDomain and IP research with WHOIS and DNS history, reverse search, monitoring, an API and its own MCP.
- DomainToolsPrice on requestDomain research with historical registration data, passive DNS, infrastructure connections and risk assessments.
- DomainTools Whois LookupFreeShows WHOIS data, registrars, registration dates and technical details for domains or IP addresses.
- Dual MapsFreeFree synchronised view of Google Maps, Street View and oblique aerial imagery. Maps can be shared and embedded.
- EchosecPrice on requestA Flashpoint platform for location-based social media research and ongoing monitoring of places and topics.
OPSEC caution
Flashpoint may store inputs to its AI features, use them for model training and share them with integrated service providers. The terms of use explicitly state this processing.
- Email FormatFreemiumShows observed email address patterns for company domains.
- EniroFreeFree Swedish people and business directory with telephone numbers, addresses and maps.
- EOS LandViewerFreemiumBrowser service for finding, comparing and analysing satellite imagery, with free and paid plans.
- EpieosFreemiumFinds online accounts and public profile data linked to email addresses and telephone numbers.
- Ethereum ETLFreeLocal Python tool for exporting Ethereum blocks, transactions and token data for custom analysis.
- EtherscanFreemiumBlockchain explorer for Ethereum addresses, transactions and smart contracts, with an API and official AI integration.
- EU Sanctions MapFreeExplores EU sanctions by country, person and organisation, and finds the associated legal acts.
- EUIPO eSearch plusFreeFree EUIPO register for trade marks, designs, owners and representatives, with advanced and image searches.
- FaceCheck.IDPaidFacial search engine for public websites. Finds photos of similar faces and links to their source pages.
- Federal Bureau of Prisons Inmate LocatorFreeSearches people in US federal custody since 1982 by name or identifier and checks custody location and release information.
- FindFace MultiUnknownSelf-hosted video analysis software for faces, bodies and vehicles in users' own image and video sources.
- FindomainFreeLocal subdomain search with DNS resolution, result import and monitoring for new subdomains.
- Free Map ToolsFreemiumFree mapping tools for distances, radii and areas. Results can be shared and exported, depending on the tool.
- FreeCarrierLookupFreeA free web lookup for the carrier, line type and SMS/MMS gateway addresses of a telephone number.
- GeoNamesFreemiumGeographical database with place names, coordinates and administrative assignments from around the world.
- GHuntFreeFree Python tool for Google accounts, public profile information and Drive file metadata.
- Gökbörü Intelligence (Gokboru_Intel)FreeLocal research program for telephone numbers and usernames, with a web interface, command line and optional Gemini analysis.
OPSEC caution
The optional Gemini case analysis sends the research subject, summary and source results to Google’s Gemini API.
- Google EarthFreemiumDigital globe with satellite and aerial imagery, 3D terrain and Street View. This profile covers Google Earth on the web.
- Google ImagesFreeSearches web images by keyword and uses Google Lens to find similar images and their source pages.
- Google MapsFreeMapping service for place searches, routes and street-level imagery through Street View. Available in a browser and as a mobile app.
- Google NewsFreeNews search by topic, location and source, with reports from different publishers and additional perspectives.
- Google News ArchiveFreeHistorical newspapers as digitised editions. Browse by newspaper title, year and date.
- Google PatentsFreeSearch patents, applications, inventors and applicants worldwide and open original documents.
- Google VideosFreeFinds videos through Google Search and narrows results by source, duration, date and other criteria.
- GoSearchFreeA local Go program for username searches, public GitHub and Gravatar data, and queries to external leak services.
OPSEC caution
The GitHub module authenticates its queries using your own GITHUB_TOKEN. GitHub can associate these queries with the account used.
- GravatarFreemiumEmail-linked profiles and avatars with public web search and a REST API.
- Grayhat Warfare BucketsFreemiumSearch engine for file names and paths in publicly accessible cloud storage.
- HandelsregisterportalFreeAccess official register entries and documents for German companies, partnerships and associations free of charge.
- harpoonFreeA command-line tool for OSINT and threat intelligence. Combines queries to numerous external data sources.
- Have I Been ZuckeredUnknownInterface for checking telephone numbers against the known Facebook data breach. The provider reports coverage of 106 countries.
- HunterFreemiumMarketing and sales platform for finding and verifying business email addresses and conducting email outreach.
OPSEC caution
Hunter Sequences sends emails and automated follow-ups through the connected email account. Recipients receive the sender’s email address.
- IBM X-Force ExchangeFreemiumResearches threat information about IP addresses, URLs, domains, malware and vulnerabilities and groups it into collections.
OPSEC caution
In the X-Force community, the information in your user profile is accessible to other participants.
- ICIJ Offshore Leaks DatabaseFreeResearch offshore companies, people and their connections across five major leaks.
- ICP CreditPrice on requestCommissioned company and credit report service, particularly for international markets that are difficult to access.
OPSEC caution
When preparing company reports, ICP Credit conducts interviews with the company being investigated.
- ImportYetiFreemiumTrade and supply chain data platform based on US and Mexican customs data, with company search, suppliers and shipments.
- InfobelFreeFree international people and business directory with country-specific search and contact details.
- instagram_monitorFreeMonitors Instagram profiles, posts and follower changes, with local dashboards and notifications.
- Instant Street ViewFreemiumDisplays Google Street View imagery for addresses and place names. Pro adds historical views and image downloads.
- Intelligence XUnknownA search engine and archive for documents and data findings associated with specific identifiers.
- IntelOwlFreeSelf-hosted analysis platform that examines IP addresses, domains, URLs, file hashes and documents using multiple services.
- InVID Verification PluginFreeBrowser extension for checking images and videos using keyframes, metadata and image forensics.
- IPinfoFreemiumAssociates IP addresses with networks and regions and, depending on the plan, provides indicators of VPN, proxy, Tor and hosting use.
- iprangesFreeFree IP range lists for cloud providers, search engines and other services. Available as text files.
- IPVoidFreeFree web tools for IP reputation, WHOIS and IP geolocation.
- IRBIS (ESPY)PaidWeb portal and API for people research, contact verification and connecting digital traces.
- JudyRecordsFreeFree search of collected US court cases, with name search, full-text search and search operators.
- KartaViewFreeFree street-level imagery contributed by the community. Shows capture locations and image metadata and offers a documented API.
OPSEC caution
Your uploads publish the capture route with coordinates and capture times. The API associates the image sequence with the user ID of the account that captured it.
- Leak-LookupFreemiumA data breach search service with a free preview, paid access to individual searches and a separate API.
- LeakCheckFreemiumData breach search with a free preview, paid records, monitoring and an API.
- Lenso.aiFreemiumImage search service for duplicates, similar images and places. Face search is regionally restricted.
OPSEC caution
The “People” face search requires you to submit a photo of yourself. With your consent, Lenso.ai forwards the photo to EYEMATCH AI. Anyone who receives an alert link from a notification email can view the associated alerts and results.
- LinkedIn2UsernameFreeReads a company’s LinkedIn employee profiles and generates possible usernames from them.
- LinkookFreeLocal Python tool that finds profiles, linked accounts and email addresses for a username.
- LittleSisFreeFree database of connections between influential people, companies and organisations.
- Lookup-IDFreeFinds numeric Facebook IDs from profile, group and page URLs.
- LullarFreeA free search for online profiles by username, email address or name across more than 175 platforms.
- LyzemFreeSearch engine for public Telegram channels, posts and group descriptions.
- Maltego EvidencePrice on requestPreserves social media data in cases and analyses profiles, posts, media and connections.
- MapillaryFreeDisplays georeferenced street-level imagery and map objects automatically detected from it.
OPSEC caution
Uploading your own images may make location and route details, as well as the associated profile, visible to others.
- MasscanFreeLocally installable port scanner for IPv4 and IPv6 addresses. Finds open ports and can capture basic service banners.
OPSEC caution
During active scans, the target infrastructure receives the source IP address used. The project documentation describes how scanned services can log these accesses and block the address.
- mitakaFreeA browser extension for quick OSINT and threat intelligence queries from the context menu.
OPSEC caution
Scan requests to HybridAnalysis, urlscan.io and VirusTotal use your own API keys stored in Mitaka.
- Mr.HolmesFreeLocal research suite for usernames, domains, telephone numbers and email addresses, with graphs and maps.
- MxToolboxFreeOnline tools for email headers, DNS data, mail servers and blacklist entries.
- NamechkFreeFree web search for username availability on platforms and domain name availability.
- Newspaper MapFreeFreely accessible world map of newspapers. Helps find regional media rather than search article text.
- NexusXplore (OSINT Combine)PaidOSINT platform for searching, connecting and monitoring data from the open web, deep web and darknet.
- NoimosinyFreemiumSearch by email, telephone number and username across more than 250 modules, with profiles, images and connections.
- OCCRP AlephFreeAn OCCRP research database containing public records, company information, documents and restricted research archives.
OPSEC caution
For copyright or privacy complaints about uploaded materials, OCCRP reserves the right to disclose the uploader’s identity to the complainant.
- OFAC Sanctions List SearchFreeOfficial search of US sanctions lists for people, companies, addresses and other identifiers.
- OneForAllFreeLocal Python tool for finding subdomains from public sources, DNS checks and HTTP reachability checks.
- Open Threat Exchange (OTX)FreeCollects and links threat information about IP addresses, domains, URLs and files from an open security community.
OPSEC caution
Posts and other activities in the OTX community are associated with your username.
- OpenAerialMapFreeOpen catalogue of satellite and drone imagery with a map view, downloads and geospatial interfaces.
- OpenCorporatesFreemiumSearches company registers worldwide and connects companies, officers and official sources.
- OpenCTI Community EditionFreeSelf-hosted platform for collecting, linking and searching your own cyber threat intelligence.
- OpenSanctionsFreemiumSearches international sanctions and watchlists, as well as information on politically exposed persons.
- OpenStreetMapFreeShows places, roads and buildings on an open, collaboratively maintained map.
- OSINT IndustriesPaidFinds online accounts, digital traces and data breach references matching contact details.
- OSINT UIFreemiumWeb platform with 20 OSINT tools, linked research results, reports and optional API and MCP access.
OPSEC caution
OSINT UI sends search values to the connected data providers and makes these queries using your own API keys. The keys are stored in encrypted form in the service.
- OsintgramFreemiumLocal web app for Instagram research with profile comparisons, content analysis, exports and optional local AI.
- PacerMonitorFreemiumSearch US federal court cases, retrieve court documents and track new case developments.
- PeepmailUnknownA small web tool for finding business email addresses using a full name and a domain or company name.
- Pentest-Tools.comFreemiumPlatform for subdomain and infrastructure research, authorised vulnerability scans and penetration tests.
- PimEyesFreemiumFace search engine for publicly accessible web images, with source links in paid plans.
- PiplPrice on requestPeople search using names, email addresses, telephone numbers and usernames. Pipl Search and a separate API, with pricing on request.
- Predicta SearchFreemiumFinds online profiles matching an email address, telephone number, name or username and compiles results into reports.
- PulsediveFreemiumThreat data for domains, IP addresses and URLs, with sources, risk indicators, history and an API.
OPSEC caution
Comments, edits and submissions display your username. This association remains even after the account is deleted.
- pwnedOrNotFreeA local Python program for data breach information from Have I Been Pwned and searches of linked pastes.
- Recon-ngFreeA modular Python framework for OSINT research, with workspaces, a database, a web interface and its own API.
OPSEC caution
When a module is loaded, Recon-ng sends a random user identifier, the module name and the program version to its usage analytics. The developer documentation also mentions the IP address. The --no-analytics startup parameter disables this transmission.
- RecruitEmFreeA free search query generator for public professional profiles on LinkedIn, GitHub, Xing and other networks.
- robinFreeSearches darknet search engines and uses a language model to summarise the pages found.
- RobtexFreemiumDNS, IP and network research with historical connections, WHOIS, an API and MCP.
- Satellites.proFreeFree world map with street and satellite views, address search, distance measurements and shareable map links.
- Search by ImageFreeBrowser extension for reverse image search across multiple search engines.
- Search4FacesFreemiumFace search across separate image collections from VK, Odnoklassniki, TikTok, Clubhouse and public figures.
- SearchPhoneFreeLocal Python program for telephone number data, web matches and data breach references, with JSON and PDF reports.
- SEC EDGAR Company SearchFreeFree SEC database for company filings, financial reports and other published submissions.
- SemrushFreemiumA marketing suite for domain, keyword, backlink and competitor analysis, with API and MCP access.
- ShodanFreemiumSearch engine for publicly accessible devices and services, with IP addresses, open ports and technical service data.
- SkopenowPrice on requestAn OSINT suite for people and company research, link analysis, situational awareness and PDF reports.
OPSEC caution
For employment checks, Skopenow may notify the person concerned if the report contains adverse public record information. The customer’s name and address may be disclosed in this process.
- SL Crimewall (Social Links)Price on requestOSINT platform for searching online sources, analysing relationships and collaborative case work.
- sn0intFreeA local OSINT framework with installable modules for infrastructure, accounts, email addresses and telephone numbers.
OPSEC caution
The modules for detecting HTTP and HTTPS services access the systems found directly.
- Snap MapFreeMap within the Snapchat app showing public community Snaps about places and events. Private friend locations remain separate.
OPSEC caution
When location sharing is enabled, the friends selected for it can see your location.
- SnoopFreemiumA locally installable username search across websites, with a demo and a more extensive full version.
OPSEC caution
Snoop does not check TLS certificates by default. The --cert-on option enables the check.
- Social SearcherFreeFree search interface for publicly indexed social media profiles, posts and images through embedded Google search.
- socialscanFreeLocal Python tool that queries username and email address availability on online platforms.
- Stolen Camera FinderUnknownSearches web photos using the camera serial number in their EXIF data. Currently not accepting new accounts.
- subfinderFreeLocally installable tool that collects subdomains from public sources. Optional DNS resolution and JSONL output.
- SWIFT BIC-SucheFreeOfficial free search for BIC codes and the names and addresses of their associated institutions.
- Sync.MEFreemiumReverse phone lookup and caller identification with names, spam reports and contact synchronisation. Web service and apps for Android and iOS.
OPSEC caution
The “Sync.me Search” app feature requires contact sharing. When searching by name, the person being searched for may receive an SMS request and see your profile.
- Taranis AIFreeA self-hosted OSINT platform for collecting news, AI analysis and report creation.
OPSEC caution
When an external LLM endpoint is configured, the optional AI service sends the content to be analysed to that provider. The endpoint is set in your own installation.
- TelegagoFreeA custom Google search for publicly indexed Telegram content.
- Telegram Phone Number CheckerFreeA locally installable Python tool for looking up Telegram accounts by telephone number or username.
OPSEC caution
Queries use your own Telegram account. Bellingcat warns that Telegram may suspend the account used because of the automation.
- Tesseract IntelligencePrice on requestPlatform for Telegram research, stealer logs and leaked data. With an API, alerts and deployment within your own network.
- The Law PagesFreeSearch criminal judgments and sentences in England and Wales, with information about courts, offences and participants.
- theHarvesterFreeLocally installable OSINT tool for domains, hosts and email addresses, with a command line, its own web interface and a REST API.
- ThisNumber (Numberway)FreeAlso: Numberway, ThisNumberA free phone lookup for number structure, original carrier and US spam reports, with country directories.
- TinEyeFreemiumReverse image search: finds identical or modified copies of images and the web pages where they appear.
- tookie-osintFreeLocal Python tool for username searches with profile detection, a web scraper and TXT, CSV or JSON exports.
OPSEC caution
The optional webhook sends searched usernames, match notifications and the computer name to the configured webhook address.
- TorBotFreeA local Python crawler for websites and onion sites. Shows page titles, descriptions and linked pages.
- TruecallerFreemiumReverse lookup and caller identification with community-supplied names, spam reports and number statistics. Web search and smartphone apps.
OPSEC caution
When you view a profile, Truecaller may notify the person whose profile you viewed and show your profile. “Incognito Mode” allows anonymous profile views.
- UbikronPaidBrowser-based research workspace with a web archive, case notes, full-text search and AI support.
- uncoverFreeLocally installable tool for host searches across multiple internet search services. Returns IP addresses, ports and hostnames.
- urlscan.ioFreemiumAnalyses web pages in a browser sandbox and searches stored scans by technical characteristics.
- UserSearchFreemiumOSINT platform for people, contact details, images, companies and infrastructure, with 18 search types and an AI assistant.
- USGS EarthExplorerFreemiumUSGS portal for satellite imagery, aerial imagery and geospatial data from the EROS archive.
- ViewDNS.infoFreemiumDNS and domain tools with IP history, reverse WHOIS, an API and its own MCP for AI agents.
- VirusTotalFreemiumSecurity reports and infrastructure relationships for files, hashes, URLs, domains and IP addresses.
- WatcherFreeSelf-hosted platform for cyber news, leak indicators and suspicious domains, with AI summaries.
- Wayback MachineFreeFree web archive for earlier versions of web pages, with a timeline, shareable archive URLs and APIs.
- Web ArchivesFreemiumA browser extension for earlier and cached versions of a web page across multiple web archives.
- web-checkFreeAnalyses websites using DNS, WHOIS, TLS and technology checks. Free in a browser or on your own infrastructure.
- WebMiiFreeFree people search that brings together publicly accessible web information about a name.
- WhatIsMyIPAddress IP LookupFreeFree web lookup for the network operator, hostname, ASN and approximate location of an IP address.
- WhatsMyNameFreeFree web tool for finding online profiles using known usernames.
- WHO.ISFreemiumWHOIS, RDAP and DNS lookups with domain history, website monitoring, an API and MCP.
- WhoisologyFreemiumWHOIS archive for historical domain registrants and connections between domains.
- WhoxyFreemiumWHOIS research, historical domain registrations and reverse searches by names, companies and email addresses.
- WiGLEFreeDatabase and map of Wi-Fi, Bluetooth and mobile networks based on community observations.
- WikiLeaks SearchFreeSearch engine for published WikiLeaks documents, with word, phrase and date filters.
- WikimapiaFreeFinds places mapped by contributors, with descriptions, categories, photographs and further links.
- X-osintFreeLocal OSINT menu for telephone, email, IP and vehicle queries, as well as file metadata.
- Yandex ImagesFreeImage search engine for keywords, similar images and web pages where an image appears.
- YasniFreemiumPeople search engine for public web results about names and user-created personal profiles.
OPSEC caution
Changes to another person’s Exposé may trigger an email to its owner. The owner can turn off these notifications.
- YouGetSignalFreeFree network tools with reverse IP search for other domains on the same IP address.
- YouTube Geo Search ToolUnknownOpen reference application for searching for YouTube videos using location details and time filters.
- yt-dlpFreeDownloads videos, audio, subtitles and metadata from YouTube and other video platforms.
OPSEC caution
The --mark-watched option can mark videos as watched in the platform account used. By default, --no-mark-watched is enabled.
- Zauba CorpFreemiumIndian company profiles and paid company reports based on registry documents. Additional AI research with Prime Research.
- Zoom EarthFreemiumInteractive weather and satellite maps for clouds, precipitation, storms, wildfires and weather forecasts.
- ZoomInfoPrice on requestSales and marketing platform with company profiles, professional contacts and AI-assisted research.