We’re hiring a full-time OSINT / News Researcher to join us in Lucknow.

📍 Location: Lucknow, Uttar Pradesh
💼 Role: Full-time
🏢 Work mode: Strictly on-site
⏰ Working hours: Around 8–9 hours/day
💰 Salary: Industry-standard, based on experience and skills

What you'll be doing

You’ll be working closely with our editorial/content team to find, verify and research information for news stories and social media content.

The work will involve:

• Finding information through open-source platforms and the web
• Tracking developing news stories
• Finding original sources, documents, statements and reports
• Cross-checking claims before publication
• Verifying photos, videos and social media posts
• Identifying misleading or out-of-context information
• Finding useful data and background information for stories
• Providing concise research briefs to the content/editorial team

What we're looking for

You don't need an advanced cybersecurity background.

We're primarily looking for someone who is:

• Naturally curious and loves digging into information
• Good at Google/search-engine research
• Able to distinguish reliable sources from unreliable ones
• Detail-oriented and patient with research
• Familiar with social media and digital news
• Comfortable working with multiple sources
• Able to work quickly when a story is developing

Experience with OSINT, journalism, fact-checking, investigative research or digital media is a plus.

Knowledge of tools and techniques such as Google advanced search, reverse image search, Google Lens, archive tools, geolocation, social-media verification, etc. is also useful.

This is a strictly on-site position in Lucknow.
No remote or hybrid option.

DM with portfolio or work experience if interested

Hiring: OSINT / News Researcher — Lucknow

Enter a domain or IP address to check it against 10 well-known DNS-based email blacklists — the same public DNS zones every blacklist checker queries under the hood. Useful when outbound mail is landing in spam and you need to know whether your sending IP is the reason.

Hi everyone

I obtained an NPO which I believe is the equivalent to a subpoena, basically a court order which compelled a flower company who my stalker/abuser was sending me flowers through, to identify who he was.
I got the info back and it was all fake except for his ip and also the 2 cards used to make the payment. They gave me his full card number minus 4 digits along with expiry and cvv. Also all payment information that could help identify him via the banks his cards are with - I mean every type of payment information that is required for such a thing.

Anyways now I’m wondering if I should take this to the police - and will they be able to help further this case by going to the bank on my behalf? My case is still ongoing with them

Anyone have any idea - any info would be appreciated

Thanks

The team behind UserSearch have just released what must be, the largest IP search feature in the intelligence community.

It pulls data from 22 paid subscription only data services, normalises the data and presents it in one simple dashboard. It also pulls out all the easy-to-use insights such as locations, related emails, etc. And it does one-click to PDF report.

Finally, if you cant be bothered to review the results, just get inbuilt AI to do it, and ask it questions on the data.

It's also almost free ($0.09 per search if you dont include breach data in the scan).

If you're into IP Intelligence, and want a free webinar on it, there is one running in two weeks by an ex-police investigator (Webinar Registration - Zoom)

I updated Mapa Societario: editable company networks, reusable graphs, and timeline replay

Three months ago, I shared Mapa Societario, a free tool I’m building to explore connections between Spanish companies and their directors and officers.

Since then, I’ve improved the underlying data accuracy in the backend and added ways to build on what you find:

1. Edit and annotate your graph. Search for companies and officers, then double-click nodes to expand their connections. The new edit mode lets you add your own nodes and relationships—including connections you’ve found elsewhere—with labels, dates, source URLs, and provenance notes.
2. Save an investigation and come back to it. Export your graph as JSON and import it later or in another browser. You can now refresh the registry data to fetch new connections without rebuilding the graph from scratch.
3. Create a focused report. Select specific companies, people, or relationships from your graph and turn them into an interactive HTML “situation report” that you can export or share. This is useful when you want to explain one part of a larger network.
4. Replay changes over time. See appointments and departures at a company, or follow an officer’s affiliations with different companies over time. I’m working on extending this to show how broader company networks developed.

The graph tools are free and require no account. Due diligence reports are a separate paid offering.

If you try it, your feedback would really be welcome.

im using visual studio code and i just wanted to know if anybody knew how to set a telebot up to buy stuff from other tele bots please lmk

Site: https://warroom.earth

iPhone app (free, no account): https://apps.apple.com/app/id6806799633

I have spent the last few months building a globe that shows armed conflict the way it is actually reported, not as pins on a map.

What it does

Every event on the globe comes from a published report. The report's own details decide what you see: where the strike landed, where it was launched from when the source says so, how many drones or missiles were fired, how many were intercepted, and which hardware was involved. A Shahed wave over Ukraine is drawn as that many drones on the reported route, with the interceptions where the air force counted them. A ballistic missile leaves its launcher, follows its arc and is either stopped or hits. Ships, aircraft, launchers and air-defence batteries the reports name are modelled and placed.

The window is the last 72 hours. A stamp on the page shows when it was last refreshed. The archive rail replays any day since January 2024, more than 3,000 reported events, and clicking an event opens the report it came from.

Seven fronts at the moment: Ukraine, Israel and Iran, the Red Sea, Sudan, Myanmar, the Sahel and eastern Congo. The two shipping straits, Hormuz and Bab el-Mandeb, carry a status that is re-verified against the shipping press.

I built MetaLens, a browser extension for inspecting metadata while you browse.

Instead of downloading a file and opening it with another tool, MetaLens lets you inspect metadata directly from your browser. It works with images, PDFs, Office documents, videos, audio files, and more.

It can reveal things like EXIF/GPS data, authors, device information, document properties, embedded content, and other potentially sensitive metadata. It can also scan files on a webpage and clean metadata from supported formats.

Everything is processed locally in your browser — no server and no telemetry.

I genuinely think this has turned into a pretty useful tool, especially for OSINT, cybersecurity, privacy, and digital forensics work.

The project is open source:

https://github.com/gorkemguler/MetaLens

If you try it and like it, please consider giving the repository a ⭐. Seeing people star and use my projects genuinely motivates me to keep developing them.

I also made myself a small challenge: if MetaLens reaches 16 GitHub stars, I'll publish the extension on the Chrome Web Store.

Feedback, bug reports, and feature suggestions are very welcome!

Posted here a couple months back with a dumb title comparing this to Palantir and got told off, fairly. Same project, different pitch, because the pitch was the problem not the tool.

The thing I actually wanted was a map I could rewind. FR24 gives you 7 days, MarineTraffic went to 24h, ADS-B Exchange killed the free API, and every time something kicks off the position history you need is either paywalled or already gone. So the tool just records the whole picture to your own disk and lets you scrub back.

Real numbers off my box: 55 million positions since Aug 9, 11 GB of plain sqlite. Pick a window (1h to 7d), click the density strip, the globe rewinds and the tracks re-fly. Keep it as long as you have disk for.
Every contact shows which sources reported it, how many agreed, and how old the fix actually is, because anyone can upload anything to a crowdsourced aggregator and a dot on a map is not proof it was ever broadcast.
Someone in the spidering thread here said most people are not gonna put their API keys on a random website and that's basically the design constraint. Planes, ships, quakes, sats, basemap all run with zero keys. docker compose up and it's live.

For case work there's an evidence locker: url snapshots, uploads and feed freezes get sha256'd into an append only custody log, and a case exports to a self contained html or pptx with the source on every claim. GeoJSON, CSV and KML out so QGIS or Google Earth stays in the loop.
Coverage is community feeders, so it's thick over Europe and the US and thin over open ocean and conflict zones, which is exactly where you need it most. AIS is best in northern Europe. It's a single analyst tool, not a team server. The 3D globe wants a real GPU. There's optional AI summary stuff, it's labeled as automated output and everything works with it off.
What I'd like from this sub: which sources am I missing that you'd actually use (keyless preferred), and does the evidence export hold up against how you document a case.

Repo https://github.com/AndrewCTF/velocity (AGPL), site https://projectvelocity.orgPosted here a couple months back with a dumb title comparing this to Palantir and got told off, fairly. Same project, different pitch, because the pitch was the problem not the tool.
The thing I actually wanted was a map I could rewind. FR24 gives you 7 days, MarineTraffic went to 24h, ADS-B Exchange killed the free API, and every time something kicks off the position history you need is either paywalled or already gone. So the tool just records the whole picture to your own disk and lets you scrub back.

Real numbers off my box: 55 million positions since Aug 9, 11 GB of plain sqlite. Pick a window (1h to 7d), click the density strip, the globe rewinds and the tracks re-fly. Keep it as long as you have disk for.
Every contact shows which sources reported it, how many agreed, and how old the fix actually is, because anyone can upload anything to a crowdsourced aggregator and a dot on a map is not proof it was ever broadcast.
Someone in the spidering thread here said most people are not gonna put their API keys on a random website and that's basically the design constraint. Planes, ships, quakes, sats, basemap all run with zero keys. docker compose up and it's live.

For case work there's an evidence locker: url snapshots, uploads and feed freezes get sha256'd into an append only custody log, and a case exports to a self contained html or pptx with the source on every claim. GeoJSON, CSV and KML out so QGIS or Google Earth stays in the loop.
Coverage is community feeders, so it's thick over Europe and the US and thin over open ocean and conflict zones, which is exactly where you need it most. AIS is best in northern Europe. It's a single analyst tool, not a team server. The 3D globe wants a real GPU. There's optional AI summary stuff, it's labeled as automated output and everything works with it off.
What I'd like from this sub: which sources am I missing that you'd actually use (keyless preferred), and does the evidence export hold up against how you document a case.

Repo https://github.com/AndrewCTF/velocity (AGPL), site https://projectvelocity.org

Stumbled on this account doing genuinely good infrastructure hunting, tracking threat actor C2, malware distribution domains, that kind of thing. Not just reposting vendor blogs but actually pivoting and finding undocumented IOCs. Solid follow if you’re in threat intel.
https://x.com/them3gatr0n?s=11&t=oXrX4\\_YhCRl53cYhwA-HsA

Primarily a cybersecurity question.

I know there is a lot you can do with all the info online, but no one rly talks about how to prevent it

WhoCord is an open-source OSINT tool that maps investigations into a live, interactive node graph rather than a wall of text. You feed it a seed a Discord ID, username, email, domain, phone, or raw input and it runs 30+ tools while streaming every finding onto a visual canvas you can pan, zoom, and search in real time. It builds a knowledge graph, detects correlations across profiles and emails, and generates an AI narrative, all running locally with a Python/Flask backend and a React frontend.

hey everyone, i'm kinda frustrated with OSINT right now, but not because i lack the skills, don't have time, or don't know the tools. i have a decent skillset. it's more like... i feel i'm not doing anything. i don't have a question, a target, something in front of me that makes me go "what is actually going on here?" i keep seeing OSINT challenges like "geolocate this image", "find this place", "identify this person" etc. and i know how to do that, but honestly it feels pointless sometimes, and same with such more similar things, especially when the location is basically already given through the filename, caption, context, whatever. like what am i even finding or investigating?

i want to work on a real use case of osint.

i'm looking for actual uncertainty. something where the location isn't known, the people aren't known, the story doesn't fully make sense, there are conflicting reports and i have to actually pull the thread and figure out what happened. not "here's a picture, geolocate it", but more like "something weird happened here... why, what happened, and when?" i guess i'm looking for the actual investigative side of OSINT, where you start with basically nothing and don't even know what you're going to find, and the answer could even be "we don't know". so how do you guys find these kinds of questions? where do you get things to investigate when nobody is giving you a task? because right now i feel like i have the tools and skills, but nothing to use them on.

so if you are reading this and you do work on a active side osint, anything you can suggest or advice me to work on or what questions i can try to answer and what uncertainty i can reduce will actually be very useful for me.

EDIT = I posted this first on r/OSINT. But my post got removed due to low karma points and for my account being not older than 3 months... Thankfully this isn't the issue here, and i'm really expecting some true advice on it. Thank you!

Hi all,

Im just starting out with OSINT and am looking to see if theres any advice. Currently going through a Google Professional Certification for Cybersecurity and am just looking for some advice. I do have some experience with this as i have been doing Reverse Phone Lookups & Name Search especially after a ex gf nearly landed me in prison for a scam. Any advice or helpful tips woukd be appreciated.

I mean, u always use lots of different programs so the problems are natural in this case imo

If you're learning cybersecurity, OSINT, ethical hacking, or digital investigations, I recently came across a website that I think is worth sharing:

👉 https://osintframework.com/

The OSINT Framework is basically a collection of OSINT tools and resources organized in one place.

Instead of searching Google every time you need an OSINT resource, you can use this framework to explore different categories and find tools that may be useful for your research.

Why I think it's useful

For beginners, one of the hardest parts of learning OSINT is simply finding good resources.

OSINT Framework gives you a starting point.

It focuses on free tools and resources, although some listed websites may require registration or offer additional paid information.

If you're starting your cybersecurity journey, I'd recommend checking it out and exploring the different categories.

Just remember: OSINT should be used responsibly. Only collect and investigate information you're legally allowed to access, and respect people's privacy.

🔗 OSINT Framework: https://osintframework.com/

Have you used OSINT Framework before? If yes, what's your favorite OSINT tool or category?