Ctrlk
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Name, Phone, Gov Record

People Search/PII

This section covers extensive personal information gathering techniques. While these methods may have limited direct application during penetration testing, they are valuable for discovering comprehensive data about individuals and correlating discovered information back to specific people. For those seeking premium all-in-one solutions, several powerful platforms can streamline and accelerate the data collection process.

People/PII Search tools

  • https://sociallinks.io/ - Premium collection of OSINT tools focusing on data gathered from social media and other sites.

    • Gamayun - Web-based tool designed for conducting OSINT investigations by searching for emails, locations, phone numbers, aliases, and photos.

    • SL-Pro - Professional tool for searching data from social media accounts, the Darknet, blockchains, and internet data leaks. Features API integrations linking to 1,100 search methods across 50+ data sources covering over 800 million identities, making it ideal for performing OSINT investigations on individuals.

  • https://www.melissa.com/v2/lookups/ - Comprehensive people search platform offering extensive tools and resources for searching by name, address, phone number, and more. Additional features include maps, federal data, property records, and various other investigative resources.

  • https://socialcatfish.com - Find connections and verify a person's online identity using a name, image, email address, phone number, username or physical address (paid service).

  • https://effectgroup.io - Powerful tool for searching people by username, email address, real name, or phone number to build comprehensive dossiers on targets. Searches social media sites, data breaches, documents, and more. Requires a paid subscription after the first search.

  • https://medium.com/the-first-digit/osint-how-to-find-information-on-anyone-5029a3c7fd56

Name Search

Name search records can become ambiguous quickly when dealing with common names like "John Smith". However, many tools allow you to refine searches with additional data points such as location or other contextual information. As with any search tool, the more data you provide, the more accurate your results will be. A recommended starting point is Michael Bazzell's Name.html tool, which searches name databases and returns associated data points for building comprehensive target profiles. The next step is to search for public records associated with the name. Remember to use location data to provide additional context and improve search accuracy.

  • Xlek - Searches millions of online records for a given name.

  • Thats Them - Find comprehensive information about individuals including address, email, and vehicle VIN numbers.

  • Public Records - Search public government records for entries relating to your target.

  • Peekyou - Popular people search engine.

  • BeenVerified - People search engine that returns information on individuals, vehicles, property, and contact details (requires paid subscription for full access).

  • https://opensanctions.org/ - Database of persons of interest including those subject to sanctions and watchlists.

Local helper copy: Name.html

Email and username OSINT has its own canonical page. Use this page when the investigation starts from a person, phone number, public record, business record, vehicle, property, or government source; pivot to Username/Email when the identifier becomes an email address or handle.

Username/Email

Telephone Numbers

Telephone Number Lookup Tools

  • Free Carrier Lookup - Enter a phone number and returns the carrier name and whether the number is wireless or landline.

  • NumLookup - Free reverse phone lookup.

  • Twilio Lookup - Validate phone number format and origin country.

  • TrueCaller - Comprehensive caller identification utility with extensive global database coverage.

  • Spy Dialer - Reverse phone number lookup for cell phones, VoIP, and landlines.

  • SEON Phone Analysis - Validate phone numbers and detect origin country, carrier, and number type.

  • 800notes - Crowd-sourced reverse phone number search, particularly useful for identifying scammer numbers.

  • CallerName - Free phone number lookup service for cell phones, VoIP, and landline numbers.

  • WhitePages - Find people, contact information, and background checks.

  • National Cellular Directory - Comprehensive people search directory (requires payment for detailed results).

  • Phone Validator - Determine if a number is a cell phone, landline, or invalid.

  • RocketReach - Professional contact information discovery tool.

  • Reverse Phone Lookup - Identify phone number owners.

Local helper copy: Telephone.html

Government and Business Records

The U.S. government maintains extensive documentation, and thanks to initiatives like the Freedom of Information Act (FOIA), much of this information is publicly accessible. The Business.html tool searches through multiple sources including public records, voter records, and court documents to consolidate business and government-related information.

Legal Records Search Tools
Personnel Records

  • Vital Records Search Tools - Comprehensive toolkit for finding immigration records, census records, vital records, and tools for working with calendars, maps, foreign alphabets, and numerous other applications. These tools fetch data from various websites with enhanced search capabilities compared to native website tools. Created by Stephen P. Morse.

  • Legacy.com Obituary Search - Search obituaries and death notices.

  • Social Security Death Index (SSDI) - Search historical death records maintained by the Social Security Administration. Useful for verifying deceased individuals and historical research.

  • FamilySearch - Free genealogical records including birth, death, marriage, and census records.

  • Ancestry.com - Genealogy and family history platform with extensive historical records (requires subscription).

Property and Real Estate Records

Property records are public documents that can reveal ownership history, property values, tax information, and transaction details. These records are typically maintained at the county level and are valuable for connecting individuals to locations and assets.

  • Zillow - Real estate platform with property values, sales history, tax assessments, and ownership information.

  • Redfin - Real estate website with property details, transaction history, and market data.

  • Realtor.com - Property search with detailed listings and historical sales data.

  • PropertyShark - Comprehensive property records, ownership information, and real estate data (requires subscription for full access).

  • County Tax Assessor Websites - Directory of county assessor and property appraiser websites across the United States.

  • NETR Online - Public record search for property records, deeds, and GIS maps by state and county.

  • FloodFactor - Property-specific flood risk information and environmental data.

  • Regrid - Nationwide parcel boundary data and property information platform.

Professional Licensing and Certifications

Many professions require state or federal licensing, and these databases are often publicly searchable. License verification can confirm professional credentials, disciplinary actions, and current license status.

Vehicle and Transportation Records

Vehicle records can provide ownership information, registration history, accident records, and help identify vehicles associated with individuals.

Voter Registration Records

Voter registration records are public in many states and can provide address history, party affiliation, and voting history. Access and available information varies significantly by state.

  • Voter Registration by State - National Conference of State Legislatures guide to accessing voter registration records by state.

  • VoterRecords.com - Search voter registration information across multiple states (may require payment for detailed records).

  • State Voter File Access - Information on how to request voter files from individual states.

Business Records

  • https://search.gleif.org/ - Look up company information from Global Legal Entity Identifier Foundation (GLEIF).

  • https://opencorporates.com - Giant public database of corporate information.

  • SEC EDGAR - All companies, foreign and domestic, are required to file registration statements, periodic reports, and other forms electronically through EDGAR. Anyone can access and download this information for free. Here you'll find links to a complete list of filings available through EDGAR and instructions for searching the EDGAR database.

  • IRS Form 990 Search - Search tax-exempt organization filings (non-profits). Also available through ProPublica Nonprofit Explorer.

  • State Secretary of State Business Search - Directory of state-level business registration databases. Search by state for LLC registrations, corporation filings, and registered agents.

  • D&B Hoovers - Comprehensive business intelligence platform with company profiles, financials, and contacts (requires subscription).

  • Crunchbase - Database of startups, funding rounds, investors, and key personnel in the technology sector.

  • Pitchbook - Private equity and venture capital database with company financials and deal information (requires subscription).

  • PrivCo - Financial data and intelligence on private companies.

  • ZoomInfo - Business intelligence platform with company information and contact details (requires subscription).

  • ImportGenius - Search U.S. customs import and export data to identify business relationships and supply chains (requires subscription).

  • SAM.gov - System for Award Management - search for government contractors and grant recipients.

  • USA Spending - Track federal government spending, contracts, and grants by recipient.

Local helper copy: Business.html

Deprecated or Unreliable Tools

Tools No Longer Recommended

These tools were previously included but are now deprecated, shut down, or have become unreliable. They are kept here for historical reference.

Phone Number Lookup:

  • sync.me - Service has significantly changed or shut down, no longer reliable for caller identification.

  • EmobileTracker - Less reliable service that may not provide accurate or current information.

  • CallerID check - Service appears outdated with limited functionality.

People Search:

  • gofindwho.com - Service reliability has declined, often returns limited or outdated information.

  • verecor.com - Less reliable people search site with inconsistent results.

  • ufind.name - Service appears to be less maintained with questionable result accuracy.

Investigation MindMaps

PreviousUsername/EmailNextSOCMINT - Social Media

Last updated