Blog / Category
Step-by-step methods for username, email and phone pivots, written to be followed at a keyboard.
22 articles matching Guides
Guides9 min
A reverse phone lookup rarely returns a name. It returns a presence map: which of 24 services know the number and what their recovery flows show. This guide covers E.164 formatting, the four module groups, a can-and-cannot table, and how presence maps differ from people-search sites.
Guides9 min
Nine paid OSINT tools ranked by what a hit contains and what the entry tier costs, with every price read from the vendor's own page on 2026-09-05. Hosted social search first, then the specialists for devices, leaks and link analysis, and the platforms sold by demo.
Guides9 min
Seven ways to find out what sits behind an email address, from free manual checks and Holehe to hosted lookups like OSINTsearch, HaveIBeenPwned and Behind the Email, with commands, a comparison table and the one rule that keeps every check silent.
Guides9 min
Twenty minutes of public data before a dating profile gets to matter: reverse image search, a username search across 770 platforms, join dates, bio link chains, a weighted table of mismatch signals, and what to do next without confronting anyone.
Guides9 min
A username search tool checks one handle against hundreds of platforms and returns the live profiles. Here is how the good ones work, what they return beyond a list of links, and how to read the results.
Guides9 min
A handle is a string, not a person. Two real exports, one for a public figure with 59 hits and one for a five-letter handle several people share, show how to read the identity block, sort hits into clusters and follow outbound links before you say who is behind a username.
Guides9 min
A ranked list of eight email OSINT tools with prices and counts taken from each vendor's own page. OSINTsearch first for the account sweep and handle pivot, then the free checkers, the breach services and the discovery tools, each with a best-for line and its scope.
Guides9 min
An email address rarely names its owner, but it confirms, hints and points. What registration checks, masked recovery hints, Gravatar, the local part, breach records and the domain each give away, and how to read them without sending a single message.
Guides9 min
No single field settles whether an Instagram account is fake. Nine checks on platform-assigned data do: numeric id age, join date, former usernames, banned state by id, picture and handle reuse across 770 platforms, bio link chains, follower count vs posts, and breach hits on a linked email.
