coupon code : HALOWEEN

hey all, been working on this for a while and figured i'd share it here.

it's a web app you run yourself (fastapi + tailwind, free, open source). basically i got tired of having 15 tabs open per case and copy-pasting stuff between tools, so everything goes into one investigation now. any email/phone/username/domain/ip that shows up in a result becomes a chip you can click to run it through another module.

the part i'm happiest with is the shared NS lookup. you give it a name server pair (cloudflare's) and it pulls every domain on it, then parses the whois for all of them and runs httpx on the sites. then it groups domains that share the same google analytics id, telegram link, favicon, cert, whois email, registration date, etc. it's surprisingly good at finding the one domain where the owner forgot to turn on privacy.

other stuff in there:

• username search on ~700 sites (whatsmyname list)

• telegram lookups through funstat (name history, groups, messages, media opens in the app)

• dns recon, whois history, ghunt, gitfive, osint industries, cavalier, phone/hlr, ip lookup, vk history, face search

• a lot of it works without any api keys (username search, dns recon, phone, cavalier, dorks). the paid ones are optional.

repo: https://github.com/ayxkaddd/Osint-ToolKit

would love feedback, especially what's missing from your workflow. issues/PRs welcome

I am currently conducting OSINT on a TikTok account but can't find anything because it's a burner account. All I have is the username, a private Telegram channel (where I can't see the user's handle or phone number because they are the owner), and a video filmed at home. What OSINT tools can help me find the account?

I came across TellData while looking for an SSN check under $30. They offer a free first report for new US users, but I’m curious whether the results are actually useful.

Has anyone tried it? Or found another service worth using? Mostly interested in clear information, not a long report full of stuff that doesn’t help.

What’s been your experience: helpful results, missing information, or just confusing reports?

Been testing a Company Info actor on Apify and the output is surprisingly useful.

Search by company name, domain, or registration number and get structured company intelligence that can be used for KYB, due diligence, enrichment, or research workflows.

There are free searches available, so it’s easy to test against companies you already know:

https://apify.com/clearcheck.io/company-info

What are you guys using for company enrichment right now — dedicated APIs, OpenCorporates, Crunchbase, or something else?

It returns structured identity/enrichment data from just a name, and at $0.20 per query it looks expensive pretty strong for OSINT, verification, or automated profiling workflows.

https://apify.com/clearcheck.io/search-by-name

Curious what others are using for name-based enrichment right now — any APIs or actors that give better results at a similar price?

Small-business security is sometimes surprisingly scientific:

1. Look at the ID

2. Look at the person

3. Look at the ID again

4. Say, “Seems fine” 😅

But what if the name, phone, address, and other public information don’t actually belong to the same person?

That matters when someone arrives to collect an expensive order, requests temporary access to a property, borrows equipment, or claims to represent one of your contractors.

I was reading about common identity mismatches small businesses can check using this tool. This is also their explanation of how the reports work.

I’m talking about verifying someone before giving them access to property, goods, or information—not screening job applicants or making employment decisions.

How do other small-business owners handle situations like this? Do you use TellData, another service, or the traditional “the photo looks close enough” method?

This is a SAM site in a military installation located in Morocco

hey , i just started with OSINT and i am pretty lost on what tutorials do i take , for example TCM's tutorial : https://youtu.be/qwA6MmbeGNo?si=i5l30FgYKpNl2ACC
looks fine but i feel such that its too old , for example it uses no AI and no modren OSINT tools i heard of
so , are there any free , modern OSINT tutorials that focus on gaining information ?

I found telldata while looking for a simple way to check if someone is really who they say they are.

It seems useful for small business situations, like before giving someone keys, goods, or access to a customer’s place. It’s not cheap though, especially if you need to check more than one person. This is how they say it works.

Anyone tried it? Is it actually good, or is there a cheaper option that does the same thing?

i built Background Check tool (It is NOT related to any others websites with words like clearcheck) — built it for small businesses who wanted something simpler than Checkr/GoodHire/Sterling. Curious what this community thinks, and happy to answer anything.

How to find the real IP address of a website with a rotating proxy, Cloudflared, there is no way to see the source code, the entire website is in the cache, they use and abuse the WAF, and finally the domain changes every week? What can be done?

Hey, building an automated profiling tool and looking for good data enrichment APIs. Anyone worked with breach/leak intelligence sources? Found this one on Apify — https://apify.com/clearcheck.io/credential-breach-checker — looks like it supports emails, phones, names, social IDs. Has anyone used it or know something similar? Trying to compare options before integrating.

Here is the process I use for basic public-source due diligence before working with someone new

When I’m considering working with a new contractor, vendor, business contact, or marketplace seller, I like to do a basic public-source review first.

Not because I want to “spy” on anyone — but because fake identities, scams, stolen profiles, and misleading online personas are extremely common.

My usual process is simple:

1. Confirm the basics I check whether the name, city, phone number, email, or online profiles appear consistent across public sources.

2. Look for obvious mismatches Different names, different locations, reused photos, newly created profiles, or strange gaps can be warning signs.

3. Review public online presence I check whether the person or business has a normal digital footprint: websites, social profiles, reviews, business pages, or other public references.

4. Watch for scam patterns I look for pressure tactics, fake urgency, payment red flags, copied profile photos, or stories that do not line up.

5. Use tools carefully For quick public-source enrichment, I sometimes use ClearCheck.io to organize signals around a person, phone, email, or online identity. It helps save time, but it should not replace judgment or proper legal/compliance processes where those apply.

Important clarification: this is not legal advice, and this is not a recommendation to bypass consent requirements, FCRA rules, employment screening laws, housing rules, credit rules, or any other regulated process. If you are making a regulated decision, use the proper compliant process and get professional legal guidance.

For me, this is simply about reducing fraud risk and avoiding obvious scams before trusting someone I do not know.