Whatever a stranger puts in front of you online, one free page turns it face up 
before you trust it โ 
a kit sorted by the moment you need it. No signup, no install, no skills.
Whatever a stranger puts in front of you online, one free page turns it face up before you trust it โ a kit sorted by the moment you need it. No signup, no install, no skills. โณ THE RULE handle ยท domain ยท wallet ยท channel ยท shop โ check its birthday first
born this month? โ walk
I HAVEโฆ OPEN
any ID ยท handle ยท domain โณ BIRTHDAY
a seller in my DMs ๐งพ THE DM
a channel ยท an invite link ๐ข THE GROUP
a new shop ยท a job offer ๐ช THE SHOP ยท THE JOB
a photo ยท a video ๐ธ THE PIC
a payment screenshot ๐งพ THE PROOF
an unknown number โ๏ธ THE NUMBER
an email address ๐ง THE EMAIL
a card ยท IBAN ยท wallet ยท QR ๐ธ THE PAYMENT
reviews ยท vouches โญ THE VOUCHES
one handle, want the rest ๐ THE PERSON
a PDF ยท installer ยท APK ๐ THE FILE
a short link ยท airdrop URL ๐ THE LINK
a second-hand phone ๐ฑ THE USED PHONE
a place ยท coordinates ๐บ๏ธ THE PLACE
a name โ everything ๐ FIND (the original kit)
my own exposure ๐ช YOU
โณ BIRTHDAY โ I have any ID, handle, link, wallet or domain โ I see the day it was born
Everything online carries its birthday. Fresh is the first tell of a fake.
Discord ยท paste any ID (user, server, channel, message โ right-click โ Copy ID) โ exact creation date, nothing leaves your browser โ discordtimestamp ยท with badges, connected accounts, live status โ discord.dog
X ยท username โ the exact DAY it was created (X itself shows month and year only) โ Sorsa
Instagram ยท TikTok ยท YouTube ยท Threads ยท handle โ its numeric ID โ IDInfo โ that ID โ creation time โ epochconverter
Telegram ยท @username โ registration period โ GramGPT. Telegram gives an estimate โ its IDs carry no date; every platform above gives the exact day.
Reddit โ exact signup date โ Cake Day Checker ยท Steam โ creation date + VAC bans โ Skinflow ยท 
GitHub โ created_atin plain JSON, zero tool โapi.github.com/users/NAME
any domain โ registration date straight from the registry, no ads โ RDAP ยท every TLS certificate ever logged; the earliest one is the day the shop really went live โ MySSL CT
ETH ยท BSC ยท SOL wallet โ first-transaction date, days alive โ CryptoLens
โ Born this month? Walk.
๐งพ THE DM โ a stranger offers a deal โ I see if the seller is real
- in Telegram ยท @username โ permanent numeric ID + Telegramโs own scam and fake flags โ tgkit ยท that ID โ every past @username and display name (renamed to dodge a blacklist = caught) โ username history with
@SangMataInfo_bot - in Discord ยท user ID โ flagged in the cross-server scam database โ AntiScammer
- in your browser ยท handle, wallet, phone or URL โ Safe ยท Caution ยท Danger against 34,000 confirmed scam entries โ GACS
India, official ยท the sellerโs phone, UPI ID, account number, email or handle โ already named in a cybercrime complaint โ NCRP suspect search
handle + platform (Telegram, Discord, Instagram, OnlyFans, Patreonโฆ) โ chargeback and scam report count, CAPTCHA only โ CopyrightShark
username, email or name โ profiles on 175+ platforms in one pass (a โveteran sellerโ with one fresh handle = caught) โ Lullar
โ Nine-day-old handle + zero history anywhere else = no deal.
๐ข THE GROUP โ a Telegram channel or Discord invite โ I see official or clone
- paste the invite โ members, boost level, description, icon โ without joining โ Server Info Viewer ยท server or bot ID โ age โ discordtimestamp
- in Telegram ยท open the channel โ menu โ Go to first message โ the channelโs birth date from Telegram itself โ how
paste the channel or user name โ every Cyrillic, Greek or full-width lookalike letter exposed with its code point โ Homoglyph Detector
โ Lookalike letters, or a channel born last week = clone.
๐ช THE SHOP ยท THE JOB โ a new site, deal or recruiter โ I see when it was born and who is behind it
- domain โ registration date + DNS/SSL + subdomains + reverse-IP neighbours + ownership history, one page โ DomainIntel
shop URL โ 0โ100 risk + which signals fired, against 21,700 known fraud shops โ FakeShops
URL โ a graph of every domain sharing its favicon, certificate, IP or wallet = the whole clone farm โ Alertoscan
official registries ยท company or CIN โ incorporation date, address, directors with DIN โ MCA ยท 
company โ RC number + status โ CAC ยท 
company name โ registered or not โ SECP ยท 
CNPJ โ partners and administrators โ gov.br ยท 
officer search โ Companies House
โ Recruiterโs email domain born last month = fake job.
๐ธ THE PIC ยท THE VIDEO โ a profile photo, a 'proof' video โ I see shot, stolen or generated
drop the JPEG โ re-compression flag = downloaded and re-saved, not shot (runs locally) โ Photovoid
a โphotoโ โ screenshot-of-a-photo verdict from device resolutions + missing camera data โ Scanly ยท a camera JPEG โ its embedded thumbnail against the image = a heatmap of what was edited โ Thumbnail Scanner
image, video or PDF โ Content Credentials: which tool made it, declared AI or not โ TrueScreen C2PA ยท any file โ AI probability + the likely model โ Hive
drop a video โ the encoder or app that last saved it + timestamps, nothing uploaded โ EXIF.pro
reverse image on the Asian web (faces Google misses) โ Bing Visual ยท Sogou ่ฏๅพ ยท Baidu ่ฏๅพ
on the video call ยท ask them to turn the head fully sideways, pass a hand over the face, then hang up and call back โ a live face-swap breaks on all three โ the test
โ Re-saved + no camera data + the face found elsewhere = stolen.
๐งพ THE PROOF โ a payment, earnings or delivery screenshot โ I see real or made
the carrier name in the status bar โ its real country (โUS Zelleโ over a Jio bar = caught) โ MCC-MNC
status-bar style, font, icons โ the iOS year they belong to โ Version Museum ยท Appleโs own icon table โ status icons ยท Android by version โ Googleโs guideline
two or more screenshots from the same person โ battery, clock and notifications must move forward together; a battery that climbs or a clock that runs backwards = made โ the check
upload โ verdict + reasons ยท UPI apps โ ScamDekho ยท Venmo ยท Cash App ยท Zelle ยท PayPal โ ScamCheck ยท edited-in-browser tells โ FauxLens ยท receipts โ checkreal. Feed each one a screenshot you know is real first, then the suspect one.
in your own bank app ยท the only proof is โCompletedโ on YOUR side โ PayPalโs own status list
โ Wrong-country carrier, or a clock running backwards = the money never moved.
โ๏ธ THE NUMBER โ an unknown call or WhatsApp โ I see carrier, burner or scam
- any number โ carrier, line type (VoIP burner), timezone, crowd spam score โ CallTracer ยท scam flag + reports โ Malwarebytes ยท line type + scam risk, in your browser โ Kinvo
- reported in India โ WhoCalledMe ยท Anatel carrier, DDD, type โ BuscaFIPE ยท
spam reports โ NoCall - the name strangers saved it under โ the apps everyone already has: Getcontact ยท Eyecon ยท Truecaller ยท Whoscall
wa.me/NUMBERโ their WhatsApp photo + about without adding them ยทt.me/+NUMBERโ their Telegram profile- TRAI rule ยท promo calls come only from 140-numbers, banks and government only from 1600-numbers โ any other prefix โfrom your bankโ is not your bank
โ VoIP line + fresh Telegram + saved as โscammerโ by 40 strangers = block.
๐ง THE EMAIL โ an address in a DM or an offer โ I see the face and the age behind it
in Google Docs ยท type the Gmail into the Share box โ their real name + photo appear before you share anything
email โ Gravatar photo, name, bio, linked accounts (it hashes for you) โ OxINT Gravatar
at account.microsoft.com ยท type the email โ โno account foundโ, or a password prompt = a Microsoft account exists- the part after @ โ registration date + mail provider (fresh domain, temp-mail) โ U2L whois
โ Domain born last week + no face anywhere = not the company.
๐ธ THE PAYMENT โ a card, IBAN, wallet, PayPal.me, $cashtag or QR โ I see who really gets the money
- first 6โ8 card digits โ issuing bank + country (buyer โin Texasโ, card from Lagos) โ binlist ยท IBAN โ bank, BIC, head office โ IBANok
paypal.me/HANDLEยทcash.app/$TAGโ their public page: real or business name, photo, city- in your own UPI app ยท type the UPI ID in Pay โ the bank-registered name appears before the PIN (NPCI rule) ยท IFSC โ bank + branch โ
ifsc.razorpay.com/IFSC 
BTC ยท ETH ยท TRON + 12 chains โ risk score + who it deals with (exchanges, flagged wallets) โ Cryptnox ยท wallet age โ CryptoLens
a screenshot of a payment QR โ the raw recipient + amount BEFORE you scan it (runs locally) โ QRSprint
โ Name on the page โ name in the chat = donโt send.
โญ THE VOUCHES โ reviews, vouch channels, screenshots โ I see coordinated or real
- on Trustpilot ยท click any reviewer โ their whole history with dates; five 5โ
for unrelated shops on one day = bought
- Amazon listing โ AโF grade, fake %, timing anomalies โ Null Fake ยท paste 3+ reviews with dates โ verified %, same-day clusters โ Fake Review Detective ยท one review โ 0โ100 suspicion + which tells fired โ Reviewz
two vouch texts โ same author or not, 40+ writing fingerprints, in the browser โ Stylometry Lab
the vouch avatar โ every other page that face appears on โ FaceOnLive
โ Same-day cluster + same writing fingerprint = one person.
๐ THE PERSON โ one handle โ I see their other accounts and their timezone
-
github.com/USER.keysยท.gpgยท any commit URL +.patchโ SSH keys, GPG identity, commit email - Reddit username โ deleted and removed posts restored โ Rosint ยท 7ร24 posting heatmap with estimated timezone โ Rosint+ ยท Karmic
- wallet address โ every BitcoinTalk post that ever carried it, with its author โ Talksearch
โ Sleeps 02:00โ09:00 at UTC+5:30 = not in New York.
๐ THE FILE โ a method PDF, an installer, an APK โ I see who made it, when, and what is inside, before opening
PDF or DOCX โ author, company, software trail, revision count, macro and embedded-object flags โ Recosint ยท document or hash โ First Seen date, risk score, the exact CVE โ Analyzer.sh ยท PDF โ malware, signature tamper, content spoofing โ PQ PDF
rebuild it flat with macros and phone-home stripped, open THAT โ Protego ยท read a PDF as text + page images in the browser, nothing runs โ zalt
drop any file โ hashed locally โ verdict; the file never leaves your device โ iMalware ยท entropy heatmap (packed?) + strings + URLs inside โ Binary Inspector ยท .exe โ compile date, publisher, signed or not โ EXE Viewer- APK โ permissions + baked-in keys โ BetaDrop ยท signing cert, packer, every domain in the code โ Pithus
paste the HASH โ what sandboxes already found: family, first seen, score, no upload โ Triage ยท Hybrid Analysis ยท MalwareBazaar ยท Filescan. Get the hash with nothing installed: Windows Get-FileHash fileยท Macshasum -a 256 fileยท phone โ local SHA-256
โ โNew methodโ, first seen 2019 = recycled.
๐ THE LINK โ a short link or an airdrop URL โ I see where it really goes, before clicking
add one character to the short link ยท bit.ly/xxx+ยทtinyurl.com/preview.xxxยทcutt.ly/xxx@ยทis.gd/xxx-โ destination + click stats; the page never loads
URL โ phishing verdict, redirect chain, DNS, tech stack, screenshot โ Cloudflare Radar ยท Googleโs own live verdict โ Safe Browsing- in Telegram ยท link previews on โ title, description and the real domain render before you tap; long-press copies the true URL in Telegram, WhatsApp and Discord
โ Destination โ what the message says = donโt tap.
๐ฑ THE USED PHONE โ a second-hand phone or laptop โ I see stolen, locked, fake or genuine
- dial
*#06#โ the IMEI ยท
lost, stolen, blocked โ CTIA ยท genuine or blacklisted โ KYM, or SMS KYM <IMEI>to 14422 ยท
NEIR ยท 
CA ยท Anatel ยท DIRBS - IMEI โ brand, exact model, chipset, year (the โPro Maxโ is a Pro) โ HiCellTek ยท a fabricated IMEI fails the check digit โ CyTools
serial โ purchase date + warranty; a serial Apple doesnโt know is not an Apple โ Check Coverage ยท 
HP serial โ warranty โ HP
with the seller present ยท power on: โiPhone Locked to Ownerโ = walk โ Apple ยท Android: factory reset; it asks for the previous Google account = still theirs
โ Blacklisted, locked, or a model that isnโt what they said = walk.
๐บ๏ธ THE PLACE โ coordinates or a place name โ I see what is there and who posted from there
place + radius โ every geotagged YouTube video there โ Geofind ยท flickr.com/map/?fLat=โฆ&fLon=โฆโ public photos at that point ยทtiktok.com/place/โฆโ every video tagged there, no login ยท Instagram pins on a map โ InstaHunt
16,900 live traffic, city and port cams + flights + ships on one map โ ARGOS ATLAS ยท the nearest live cams โ OpenCCTV
coordinates โ the exact address record โ Nominatim ยท every ATM, bar, hotel within X km โ FreeMapTools ยท a mountain photo โ every peak labelled (iOS) โ Skyline
โ โLive from Dubaiโ with a Karachi webcam behind them = not Dubai.
๐ FIND โ type one thing, find everything: handle โ email โ photo โ place, each hit leads to the next (the original kit, kept whole)
A name ยท email ยท username ยท photo ยท phone โ free point-and-click sites do the digging. No install, no signup, no skills.
Start with one box
Max Intel โ paste anything (name, email, username, phone, or a photo) and it fans across 960+ sources at once. No account, no keys. ยท Menu view: OSINT Framework
A USERNAME โ every account they own
Sherlock ยท WhatsMyName ยท Fingerprint (700+ platforms, streams live)
AN EMAIL โ whoโs behind it
Epieos (the famous one) ยท Skopio (22+ sources, free daily lookup)
IS IT LEAKED? ยท email ยท password ยท phone in a breach
Have I Been Pwned (the classic โ paste an email, see every breach) ยท InfoBreach (breach dumps + stealer logs)
A PHOTO โ who is it
Yandex (best for faces + places) ยท TinEye ยท PimEyes (face search โ scary-good)
A WEBSITE โ owner + history
ViewDNS (whois, server-neighbours, history) ยท Wayback Machine (deleted / older versions)
The rare tricks โ nobody lists these
A PHOTO โ WHERE on Earth ยท no GPS in the photo needed
ShadowFinder (drops a pin from a shadowโs length โ Bellingcatโs method, in your browser) ยท PhotoRadar (AI reads the visual clues) ยท Weather-locate (a weather-widget screenshot โ when & where) ยท Signal & Shadow (sun-angle calculator)
A VIDEO โ trace it back to the source
Frame Grab (no engine searches video directly โ this pulls one sharp frame in your browser, nothing uploads) โ then reverse-search that frame with Yandex or TinEye above
A PHOTO or VIDEO โ is it even real
Lens (free browser extension โ flags AI-made images as you scroll, checks the hidden watermark first) ยท Specula (upload one photo, get a verdict with the reasoning shown โ free, first load can take a moment to wake up)
AN AUDIO CLIP โ name the song / same voice or not
Vocuno (upload a clip, matches the acoustic fingerprint โ works on voice memos too) ยท Voice Match Checker (upload two clips, get a same-person-or-not verdict)
WATCH THE WORLD LIVE
FlightRadar24 (any plane) ยท ADS-B Exchange (even the private jets FR24 hides) ยท MarineTraffic (any ship) ยท Zoom.earth (live satellite)
A WEBSITE โ every OTHER site the same person runs
DNSlytics โ unmask a whole network by the Google-Analytics / AdSense ID they reuse across their sites
A CRYPTO WALLET โ follow the money
Chainabuse (is it a reported scam?) ยท Breadcrumbs (trace where the coins went)
A PHONE โ who owns it
UserSearch ยท Max Intel ยท Phone ยท Line Type Check (mobile, landline, or a disposable VOIP number)
A PHOTO, FILE or PDF โ its hidden data
Jimpl (drop a photo โ GPS pin on a map + camera model) ยท Metadata2Go (hidden data inside any file) ยท PDFCheck (catches an edited or backdated PDF)
A NAME โ address, phone, relatives ยท US public records
TruePeopleSearch ยท FastPeopleSearch ยท ThatsThem โ all free, no signup
A NAME โ is there a court case on them
CourtListener (free, non-profit โ millions of real US court filings and case law, just search a name)
A COMPANY โ who really owns it, who really works there
OpenCorporates (150M+ companies + their officers) ยท OpenSanctions (sanctions / PEP check) ยท Aleph (OCCRPโs leaks + records archive) โ for the team behind it, search site:linkedin.com/in "company name" on Google, no tool needed
GOOGLE DORKS โ surface whatโs hidden in plain sight
DorkSearch (pre-built Google dorks, click to run โ exposed files, logins, documents)
TELEGRAM โ search channels + people
Lyzem ยท TGStat (channel stats + search)
THE DARK WEB โ search it without getting lost
Ahmia (searches .onion sites โ needs Tor Browser to open a result, thatโs it, nothing else technical)
SEE ANY PLACE โ past + present + what changed
Google Earth (historical-imagery time slider) ยท Historic Aerials (aerial photos back to the 1930s) ยท archive.today (snapshot / read deleted pages) ยท GeoSentinel (draw a box, pick two dates, see exactly what changed)
AN IP ADDRESS โ who, where + is it a VPN
ipinfo.io (geolocation, ISP, VPN/proxy flags โ plain language)
๐ช YOU โ run every box on yourself first โ I see what strangers see, then I delete it
- every SIM issued on your ID + one-click โnot mineโ โ TAFCOP ยท SIMs on your CNIC โ 668 ยท dial
*16001#ยท
lines + wallets on your ID โ the My NTRA app ยท every account, loan and Pix key on your CPF โ Registrato ยท every company you are listed at โ Companies House - your email โ the forgotten avatar and name shown on every WordPress comment โ Gravatar check ยท your number, handle, face โ run CallTracer, Lullar and FaceOnLive above on yourself
a service name โ its direct deletion link + difficulty โ JustDeleteMe ยท the three respected broker opt-out lists โ BADBOOL ยท IntelTechniques workbook ยท Privacy Guides
pull yourself out โ FaceCheck ยท Truecaller ยท Sync.me ยท a 15 min / 30 min / 2 h self-audit โ UofT
โ What you find, they found first. Delete it.
๐ง 10-second how-to โ zero experience
- Pick the box that matches what you have โ a name, email, username, photo, video, audio clip, or phone.
- Open a tool, paste your one thing, hit search.
- Each result is a public breadcrumb โ one leads to the next (username โ email โ photo โ place). The chaining is the whole skill; the tools do the work.
- Something a stranger just handed you? Start with
BIRTHDAY, then the box that matches โ before you pay, join, click or open.
Everything here reads public info only โ no hacking, no logins, no passwords.
โ ๏ธ Use it right
Same tools journalists and security teams use to check who theyโre dealing with โ and to see your OWN exposure. Run your email through Have I Been Pwned right now; look yourself up first.
Links rot โ a tool dies, drop a 
reply with the newest working one. Kept current.
!