Loading...
Loading...
Found 69 Skills
Deep-dive a social media profile — map the account, its network and content, extract location and pattern-of-life signals, and pivot to other identities.
Enumerate a username or handle across hundreds of platforms and pivot from matched accounts to real-identity, contact, and content selectors.
Investigate a phone number — normalize and classify it, identify carrier and line type, and pivot to owner identity, messaging apps, and linked accounts.
Passive reconnaissance workflow for a domain, website, or IP — maps DNS, subdomains, infrastructure, tech stack, history, and ownership without touching the target.
Corporate intelligence and due-diligence workflow — map a company's legal structure, people, infrastructure, footprint, and risk from public records.
Compile OSINT findings into a professional, sourced, and timestamped intelligence report that separates confirmed facts from inference.
Start-here router for any OSINT investigation. Names the workflow and knowledge skills and picks the right one for a given starting selector.
Investigate an email address — validate it, find linked accounts and breaches, and pivot to the owner's identity, usernames, and other contact selectors.
Workflow to build a sourced profile of a named individual from public sources, pivoting across identity, contact, social, and location selectors.
Investigate an email address — MX and syntactic validation, Gravatar lookup, corporate email-format inference, breach exposure, and full mail-header analysis (Received chain, Message-ID, SPF/DKIM/DMARC). Use for email OSINT, verifying whether an address exists, finding accounts registered to an address, guessing a company's email format, or tracing where a message actually came from.
Start-here router and tradecraft baseline for any OSINT investigation. Sets authorized scope, turns a vague request into an answerable intelligence question, writes a collection plan, picks the right workflow skill for the starting selector, and applies source grading and competing-hypothesis discipline. Use for "investigate this person/company/domain", "do OSINT on X", "where do I start", or any open-source intelligence, due diligence, or attribution task.
Investigate a phone number — E.164 normalisation with libphonenumber, phoneinfoga scanning, carrier and line-type identification, VoIP and burner detection, messaging-app registration checks, and reverse-lookup and caller-ID sources. Use for phone OSINT, reverse phone lookup, "who owns this number", identifying a burner or VoIP number, or checking whether a number is on WhatsApp, Telegram, or Signal.