OSINT guides and tutorials
How to investigate an email address, a username or a phone number, read data breaches, spot fake profiles and keep your own footprint small, step by step and within the law.
-
Tutorials
Bulk Email Lookup: Check a Whole List at Once
Upload a CSV of email addresses, see the cost first, then read breaches, accounts and deliverability for every row.
-
Tutorials
Investigation Canvas Tutorial: Map an Email to a Full Case
A step-by-step tour of the investigation canvas: search on the graph, pivot, link and label, arrange, then export a PNG.
-
Tutorials
Set Up Breach Monitoring and Alerts for an Email, Username or Phone
Schedule repeat checks of an email, username or phone number, and get told when a new breach or account turns up.
-
Tutorials
TraceFind API Tutorial: Run Searches and Fetch Reports from Code
Create a token, run a search with curl, Python or Node, poll for the result, handle 429s and export reports. Real endpoints and limits.
-
Guides
Check Before You Pay: Vetting a Seller, Landlord or Marketplace Contact
A calm ten-minute routine to vet an online seller, landlord or marketplace contact before you send money.
-
Guides
Domain and Website OSINT: Investigate Who Is Behind a Site
Date, host and link a suspicious site using RDAP, DNS, certificate logs, archives and shared tracking IDs.
-
Guides
Employee Breach Monitoring: Catch Leaked Logins Early
How leaked employee credentials put company accounts at risk, and how to monitor and respond while respecting employee privacy and GDPR.
-
Investigations
How to Spot Fake Profiles and Sockpuppet Accounts
Practical checks for fake profiles and sockpuppets: account age, reused photos, username patterns and inconsistent details.
-
Guides
Is OSINT Legal? Ethics and GDPR for Online Investigations
Where the legal and ethical lines run in open source investigations, and the habits that keep your work defensible.
-
Privacy
Fitness App Privacy: What Your Strava Profile Shows Strangers
What a stranger can see on your Strava profile, and the privacy controls that keep your routes, home and routines to yourself.
-
Investigations
OSINT Investigation Workflow: One Email to a Full Picture
A fictional walk-through from one email address to a documented, sourced report, with pivots and link analysis along the way.
-
Privacy
How to Find and Shrink Your Digital Footprint
A step-by-step self-audit: find what your email, usernames and phone number expose, then remove old accounts and clean up after breaches.
-
Tutorials
How to Verify an Email Address Exists Without Sending Mail
MX lookups, SMTP RCPT probing, catch-all detection and disposable checks: how email verification works and where it stops being reliable.
-
Tutorials
How to Detect Disposable and Temporary Phone Numbers
Spot receive-SMS and VoIP numbers in signups, combine the signals sensibly and decide what to do with a hit.
-
Tutorials
Telegram OSINT: Investigating Users, Channels and Groups
How to read public Telegram pages for users, channels and groups, analyze a channel's network, and understand which privacy settings apply.
-
Privacy
How to Check If Your Email Was in a Data Breach
Find out which breaches exposed your email, how to read the results, and the exact steps to take afterward.
-
Guides
Reverse Phone Lookup: What a Phone Number Reveals
What a phone number can and cannot tell you: format, carrier, line type, messenger accounts and where it appears online.
-
Guides
How to Find Accounts Linked to an Email Address
Pivot from one email to accounts, breaches, usernames and profiles, then grade every finding. With a worked fraud case.
-
Tutorials
GitHub OSINT: What a GitHub Profile Reveals
What a GitHub profile, its commits and its public keys reveal, and how developers can keep their own email address out of public history.
-
Guides
Username OSINT: How to Find Accounts From a Username
Enumerate accounts from one handle, weed out false positives and prove that two profiles belong to the same person.
-
Guides
What Is OSINT? A Practical Introduction
Open source intelligence explained: where the data comes from, how analysts work through it, and where the legal lines are.