# 🃏 You Hold All The Cards Now — Free Pages For Checking Anything Online

**URL:** <https://onehack.st/t/you-hold-all-the-cards-now-free-pages-for-checking-anything-online/52540>\
**Category:** Give-Away and Freebies\
**Tags:** tools, privacy, scam-alert\
**Created:** [June 21, 2019, 6:55pm UTC](https://onehack.st/t/you-hold-all-the-cards-now-free-pages-for-checking-anything-online/52540 "2019-06-21T18:55:12Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![SRZ](https://onehack.st/user_avatar/onehack.st/srz/32/146132_2.png) [@SRZ](https://onehack.st/u/SRZ)\
**Post date:** [June 21, 2019, 6:55pm UTC](https://onehack.st/t/you-hold-all-the-cards-now-free-pages-for-checking-anything-online/52540/1 "2019-06-21T18:55:13Z")

</div>

![Type One Thing. Every Card Turns Face Up](https://onehack.st/uploads/default/original/3X/8/6/86b2084eaf2b5970f09364e6b231259957df6849.jpeg)

### 🃏 Whatever a stranger puts in front of you online, one free page turns it face up 🕵 before you trust it — ✅ a kit sorted by the moment you need it. No signup, no install, no skills.

```plaintext
 ⏳ THE RULE handle · domain · wallet · channel · shop → check its birthday first
                born this month? → walk

 I HAVE… OPEN
 any ID · handle · domain ⏳ BIRTHDAY
 a seller in my DMs 🧾 THE DM
 a channel · an invite link 📢 THE GROUP
 a new shop · a job offer 🏪 THE SHOP · THE JOB
 a photo · a video 📸 THE PIC
 a payment screenshot 🧾 THE PROOF
 an unknown number ☎️ THE NUMBER
 an email address 📧 THE EMAIL
 a card · IBAN · wallet · QR 💸 THE PAYMENT
 reviews · vouches ⭐ THE VOUCHES
 one handle, want the rest 🔗 THE PERSON
 a PDF · installer · APK 📄 THE FILE
 a short link · airdrop URL 🔗 THE LINK
 a second-hand phone 📱 THE USED PHONE
 a place · coordinates 🗺️ THE PLACE
 a name → everything 🔎 FIND (the original kit)
 my own exposure 🪞 YOU

```

> **⏳ BIRTHDAY — I have any ID, handle, link, wallet or domain → I see the day it was born**
>
> Everything online carries its birthday. Fresh is the first tell of a fake.
> 
> - 🎮 **Discord** · paste any ID (user, server, channel, message — right-click → Copy ID) → exact creation date, nothing leaves your browser — [discordtimestamp](https://discordtimestamp.com/snowflake) · with badges, connected accounts, live status — [discord.dog](https://discord.dog/tools/discord-id-lookup)
> - 🐦 **X** · username → the exact DAY it was created (X itself shows month and year only) — [Sorsa](https://api.sorsa.io/playground/account-age-check)
> - 📸 **Instagram · TikTok · YouTube · Threads** · handle → its numeric ID — [IDInfo](https://idinfo.ws/) → that ID → creation time — [epochconverter](https://www.epochconverter.com/snowflake)
> - ✈ **Telegram** · @username → registration period — [GramGPT](https://gramgpt.io/en/tools/telegram-account-creation-date). Telegram gives an estimate — its IDs carry no date; every platform above gives the exact day.
> - 👽 **Reddit** → exact signup date — [Cake Day Checker](https://www.mediafa.st/reddit-cake-day-checker) · 🎮 **Steam** → creation date + VAC bans — [Skinflow](https://skinflow.gg/steam-id-finder) · 🐙 **GitHub** → `created_at` in plain JSON, zero tool — `api.github.com/users/NAME`
> - 🌐 **any domain** → registration date straight from the registry, no ads — [RDAP](https://client.rdap.org/) · every TLS certificate ever logged; the earliest one is the day the shop really went live — [MySSL CT](https://myssl.info/ct)
> - 💰 **ETH · BSC · SOL wallet** → first-transaction date, days alive — [CryptoLens](https://cryptolens.uk/tools/wallet-age)
> 
> → **Born this month? Walk.**

> **🧾 THE DM — a stranger offers a deal → I see if the seller is real**
>
> - ✈ **in Telegram** · @username → permanent numeric ID + Telegram’s own scam and fake flags — [tgkit](https://tgkit.io/get-telegram-id/) · that ID → every past @username and display name (renamed to dodge a blacklist = caught) — [username history](https://tgkit.io/username-history/) with `@SangMataInfo_bot`
> - 🎮 **in Discord** · user ID → flagged in the cross-server scam database — [AntiScammer](https://www.antiscammer.app/lookup)
> - 🌐 **in your browser** · handle, wallet, phone or URL → Safe · Caution · Danger against 34,000 confirmed scam entries — [GACS](https://gacs.app/check)
> - 🇮🇳 **India, official** · the seller’s phone, UPI ID, account number, email or handle → already named in a cybercrime complaint — [NCRP suspect search](https://www.cybercrime.gov.in/Webform/suspect_search_repository.aspx)
> - 💳 handle + platform (Telegram, Discord, Instagram, OnlyFans, Patreon…) → chargeback and scam report count, CAPTCHA only — [CopyrightShark](https://copyrightshark.com/tools/chargeback-scammer-checker/)
> - 👤 username, email or name → profiles on 175+ platforms in one pass (a “veteran seller” with one fresh handle = caught) — [Lullar](https://com.lullar.com/)
> 
> → **Nine-day-old handle + zero history anywhere else = no deal.**

> **📢 THE GROUP — a Telegram channel or Discord invite → I see official or clone**
>
> - 🎮 paste the invite → members, boost level, description, icon — without joining — [Server Info Viewer](https://www.spaulhub.com/tools/discord-server-info-viewer) · server or bot ID → age — [discordtimestamp](https://discordtimestamp.com/snowflake)
> - ✈ **in Telegram** · open the channel → menu → **Go to first message** → the channel’s birth date from Telegram itself — [how](https://www.dominzyloaded.com/2020/12/telegram-channel-date.html)
> - 🔤 paste the channel or user name → every Cyrillic, Greek or full-width lookalike letter exposed with its code point — [Homoglyph Detector](https://geratools.com/homoglyph-detect)
> 
> → **Lookalike letters, or a channel born last week = clone.**

> **🏪 THE SHOP · THE JOB — a new site, deal or recruiter → I see when it was born and who is behind it**
>
> - 🌐 domain → registration date + DNS/SSL + subdomains + reverse-IP neighbours + ownership history, one page — [DomainIntel](https://domainintel.kuku-kube.com/)
> - 🛒 shop URL → 0–100 risk + which signals fired, against 21,700 known fraud shops — [FakeShops](https://fakeshops.online/en)
> - 🕸 URL → a graph of every domain sharing its favicon, certificate, IP or wallet = the whole clone farm — [Alertoscan](https://alertoscan.io/)
> - 🏛 **official registries** · 🇮🇳 company or CIN → incorporation date, address, directors with DIN — [MCA](https://www.mca.gov.in/content/mca/global/en/mca/master-data/MDS/company-master-info.html) · 🇳🇬 company → RC number + status — [CAC](https://icrp.cac.gov.ng/public-search/) · 🇵🇰 company name → registered or not — [SECP](https://eservices.secp.gov.pk/eServices/NameSearch.jsp) · 🇧🇷 CNPJ → partners and administrators — [gov.br](https://www.gov.br/pt-br/servicos/consultar-cadastro-nacional-de-pessoas-juridicas/) · 🇬🇧 officer search — [Companies House](https://find-and-update.company-information.service.gov.uk/)
> 
> → **Recruiter’s email domain born last month = fake job.**

> **📸 THE PIC · THE VIDEO — a profile photo, a 'proof' video → I see shot, stolen or generated**
>
> - 🗜 drop the JPEG → re-compression flag = downloaded and re-saved, not shot (runs locally) — [Photovoid](https://photovoid.com/en/tools/jpeg-quality/)
> - 📱 a “photo” → screenshot-of-a-photo verdict from device resolutions + missing camera data — [Scanly](https://scanly.co/screenshot-scanner) · a camera JPEG → its embedded thumbnail against the image = a heatmap of what was edited — [Thumbnail Scanner](https://scanly.co/thumbnail-scanner)
> - 🏷 image, video or PDF → Content Credentials: which tool made it, declared AI or not — [TrueScreen C2PA](https://truescreen.io/c2pa-viewer/) · any file → AI probability + the likely model — [Hive](https://hivemoderation.com/ai-generated-content-detection)
> - 🎬 drop a video → the encoder or app that last saved it + timestamps, nothing uploaded — [EXIF.pro](https://exif.pro/)
> - 🌏 reverse image on the Asian web (faces Google misses) — [Bing Visual](https://www.bing.com/visualsearch) · [Sogou 识图](https://pic.sogou.com/shitu/) · [Baidu 识图](https://image.baidu.com/)
> - 📹 **on the video call** · ask them to turn the head fully sideways, pass a hand over the face, then hang up and call back — a live face-swap breaks on all three — [the test](https://www.kaspersky.com/blog/how-to-recognize-a-deepfake/55247/)
> 
> → **Re-saved + no camera data + the face found elsewhere = stolen.**

> **🧾 THE PROOF — a payment, earnings or delivery screenshot → I see real or made**
>
> - 📶 the carrier name in the status bar → its real country (“US Zelle” over a Jio bar = caught) — [MCC-MNC](https://mcc-mnc.org/)
> - 🕰 status-bar style, font, icons → the iOS year they belong to — [Version Museum](https://www.versionmuseum.com/history-of/ios) · Apple’s own icon table — [status icons](https://support.apple.com/guide/iphone/learn-the-meaning-of-iphone-status-icons-iphef7bb57dc/ios) · Android by version — [Google’s guideline](https://android.googlesource.com/platform/frameworks/base/+/91b5ecc4869dab333ba15f378c6804eef7f4a688/docs/html/guide/practices/ui_guidelines/icon_design_status_bar.jd)
> - 🔋 two or more screenshots from the same person → battery, clock and notifications must move forward together; a battery that climbs or a clock that runs backwards = made — [the check](https://customdashboards.us/learn/how-to-spot-fake-cash-app-screenshots)
> - 🤖 upload → verdict + reasons · UPI apps — [ScamDekho](https://scamdekho.in/fake-payment-screenshot-checker) · Venmo · Cash App · Zelle · PayPal — [ScamCheck](https://scamcheck.asquaresolution.com/screenshot-scam-checker) · edited-in-browser tells — [FauxLens](https://fauxlens.com/fake-screenshot-detector) · receipts — [checkreal](https://checkreal.ai/fake-receipt-detection). Feed each one a screenshot you know is real first, then the suspect one.
> - 🏦 **in your own bank app** · the only proof is “Completed” on YOUR side — [PayPal’s own status list](https://www.paypal.com/us/cshelp/article/what-does-the-status-of-my-payment-or-money-request-mean-on-my-paypal-account-help668)
> 
> → **Wrong-country carrier, or a clock running backwards = the money never moved.**

> **☎️ THE NUMBER — an unknown call or WhatsApp → I see carrier, burner or scam**
>
> - 🌐 any number → carrier, line type (VoIP burner), timezone, crowd spam score — [CallTracer](https://calltracer.io/) · scam flag + reports — [Malwarebytes](https://www.malwarebytes.com/scam-check/phone) · line type + scam risk, in your browser — [Kinvo](https://kinvophone.com/tools/decode-number)
> - 🇮🇳 reported in India — [WhoCalledMe](https://www.whocalledme.in/) · 🇧🇷 Anatel carrier, DDD, type — [BuscaFIPE](https://buscafipe.com/consulta-numero-telefone/) · 🇮🇷 spam reports — [NoCall](https://nocall.io/ir)
> - 📱 **the name strangers saved it under** → the apps everyone already has: Getcontact · Eyecon · Truecaller · Whoscall
> - 💬 `wa.me/NUMBER` → their WhatsApp photo + about without adding them · `t.me/+NUMBER` → their Telegram profile
> - 🇮🇳 **TRAI rule** · promo calls come only from 140-numbers, banks and government only from 1600-numbers — any other prefix “from your bank” is not your bank
> 
> → **VoIP line + fresh Telegram + saved as “scammer” by 40 strangers = block.**

> **📧 THE EMAIL — an address in a DM or an offer → I see the face and the age behind it**
>
> - 📄 **in Google Docs** · type the Gmail into the Share box → their real name + photo appear before you share anything
> - 🖼 email → Gravatar photo, name, bio, linked accounts (it hashes for you) — [OxINT Gravatar](https://oxint.io/tools/gravatar/)
> - 🪟 **at [account.microsoft.com](http://account.microsoft.com)** · type the email → “no account found”, or a password prompt = a Microsoft account exists
> - 🌐 the part after @ → registration date + mail provider (fresh domain, temp-mail) — [U2L whois](https://u2l.ai/tools/whois-lookup)
> 
> → **Domain born last week + no face anywhere = not the company.**

> **💸 THE PAYMENT — a card, IBAN, wallet, PayPal.me, $cashtag or QR → I see who really gets the money**
>
> - 💳 first 6–8 card digits → issuing bank + country (buyer “in Texas”, card from Lagos) — [binlist](https://binlist.net/) · IBAN → bank, BIC, head office — [IBANok](https://ibanok.com/en/)
> - 🅿 `paypal.me/HANDLE` · `cash.app/$TAG` → their public page: real or business name, photo, city
> - 🇮🇳 **in your own UPI app** · type the UPI ID in Pay → the bank-registered name appears before the PIN (NPCI rule) · IFSC → bank + branch — `ifsc.razorpay.com/IFSC`
> - 🪙 BTC · ETH · TRON + 12 chains → risk score + who it deals with (exchanges, flagged wallets) — [Cryptnox](https://address-analyzer.cryptnox.com/) · wallet age — [CryptoLens](https://cryptolens.uk/tools/wallet-age)
> - 🔳 a screenshot of a payment QR → the raw recipient + amount BEFORE you scan it (runs locally) — [QRSprint](https://qrsprint.com/qr-code-scanner)
> 
> → **Name on the page ≠ name in the chat = don’t send.**

> **⭐ THE VOUCHES — reviews, vouch channels, screenshots → I see coordinated or real**
>
> - 👤 **on Trustpilot** · click any reviewer → their whole history with dates; five 5★ for unrelated shops on one day = bought
> - 🛒 Amazon listing → A–F grade, fake %, timing anomalies — [Null Fake](https://nullfake.com/) · paste 3+ reviews with dates → verified %, same-day clusters — [Fake Review Detective](https://deftbrain.com/FakeReviewDetective) · one review → 0–100 suspicion + which tells fired — [Reviewz](https://reviewz.ai/tools/fake-review-checker)
> - ✍ two vouch texts → same author or not, 40+ writing fingerprints, in the browser — [Stylometry Lab](https://maxintel.org/stylometry.html)
> - 🙂 the vouch avatar → every other page that face appears on — [FaceOnLive](https://faceonlive.com/face-search-online/)
> 
> → **Same-day cluster + same writing fingerprint = one person.**

> **🔗 THE PERSON — one handle → I see their other accounts and their timezone**
>
> - 🐙 `github.com/USER.keys` · `.gpg` · any commit URL + `.patch` → SSH keys, GPG identity, commit email
> - 👽 Reddit username → deleted and removed posts restored — [Rosint](https://rosint.dev/) · 7×24 posting heatmap with estimated timezone — [Rosint+](https://rosintplus.github.io/) · [Karmic](https://karmicproxies.com/tools/user-analyzer)
> - 🪙 wallet address → every BitcoinTalk post that ever carried it, with its author — [Talksearch](https://talksearch.io/)
> 
> → **Sleeps 02:00–09:00 at UTC+5:30 = not in New York.**

> **📄 THE FILE — a method PDF, an installer, an APK → I see who made it, when, and what is inside, before opening**
>
> - 📑 PDF or DOCX → author, company, software trail, revision count, macro and embedded-object flags — [Recosint](https://recosint.com/tools/document-metadata-extractor/) · document or hash → First Seen date, risk score, the exact CVE — [Analyzer.sh](https://analyzer.sh/) · PDF → malware, signature tamper, content spoofing — [PQ PDF](https://pqpdf.com/pdf-malware-scanner.php)
> - 🧼 rebuild it flat with macros and phone-home stripped, open THAT — [Protego](https://protego.me/tools/document-sanitizer) · read a PDF as text + page images in the browser, nothing runs — [zalt](https://zalt.me/tools/pdf-to-text-images)
> - 🔒 drop any file → hashed locally → verdict; the file never leaves your device — [iMalware](https://imalware.com/) · entropy heatmap (packed?) + strings + URLs inside — [Binary Inspector](https://geratools.com/binary-file-inspector) · .exe → compile date, publisher, signed or not — [EXE Viewer](https://omnvert.com/en/tools/exe-viewer)
> - 🤖 APK → permissions + baked-in keys — [BetaDrop](https://betadrop.app/apk-inspector/) · signing cert, packer, every domain in the code — [Pithus](https://beta.pithus.org/)
> - #️⃣ paste the HASH → what sandboxes already found: family, first seen, score, no upload — [Triage](https://tria.ge/reports/public) · [Hybrid Analysis](https://hybrid-analysis.com/) · [MalwareBazaar](https://bazaar.abuse.ch/browse/) · [Filescan](https://www.filescan.io/reports). Get the hash with nothing installed: Windows `Get-FileHash file` · Mac `shasum -a 256 file` · phone — [local SHA-256](https://emn178.github.io/online-tools/sha256_checksum.html)
> 
> → **“New method”, first seen 2019 = recycled.**

> **🔗 THE LINK — a short link or an airdrop URL → I see where it really goes, before clicking**
>
> - ➕ add one character to the short link · `bit.ly/xxx+` · `tinyurl.com/preview.xxx` · `cutt.ly/xxx@` · `is.gd/xxx-` → destination + click stats; the page never loads
> - ☁ URL → phishing verdict, redirect chain, DNS, tech stack, screenshot — [Cloudflare Radar](https://radar.cloudflare.com/scan) · Google’s own live verdict — [Safe Browsing](https://transparencyreport.google.com/safe-browsing/search?url=)
> - ✈ **in Telegram** · link previews on → title, description and the real domain render before you tap; long-press copies the true URL in Telegram, WhatsApp and Discord
> 
> → **Destination ≠ what the message says = don’t tap.**

> **📱 THE USED PHONE — a second-hand phone or laptop → I see stolen, locked, fake or genuine**
>
> - #️⃣ dial `*#06#` → the IMEI · 🇺🇸 lost, stolen, blocked — [CTIA](https://stolenphonechecker.org/spc/consumer) · 🇮🇳 genuine or blacklisted — [KYM](https://ceir.sancharsaathi.gov.in/Device/SancharSaathiKym.jsp), or SMS `KYM <IMEI>` to 14422 · 🇧🇩 [NEIR](https://neir.btrc.gov.bd/) · 🇰🇪 [CA](https://www.ca.go.ke/imei-checker) · 🇧🇷 [Anatel](https://www.consultaaparelhoimpedido.com.br/public-web/welcome?idServicoCarta=5FC92B1C-9A9B-4A4D-B13F-C4A898CB3EFE) · 🇵🇰 [DIRBS](https://dirbs.pta.gov.pk/)
> - 🏷 IMEI → brand, exact model, chipset, year (the “Pro Max” is a Pro) — [HiCellTek](https://hicelltek.com/en/imei-check/) · a fabricated IMEI fails the check digit — [CyTools](https://tools.cyberkendra.com/tools/imei-checker/)
> - 🍎 serial → purchase date + warranty; a serial Apple doesn’t know is not an Apple — [Check Coverage](https://checkcoverage.apple.com/) · 🖥 HP serial → warranty — [HP](https://support.hp.com/us-en/check-warranty)
> - 🔐 **with the seller present** · power on: “iPhone Locked to Owner” = walk — [Apple](https://support.apple.com/en-us/108794) · Android: factory reset; it asks for the previous Google account = still theirs
> 
> → **Blacklisted, locked, or a model that isn’t what they said = walk.**

> **🗺️ THE PLACE — coordinates or a place name → I see what is there and who posted from there**
>
> - ▶ place + radius → every geotagged YouTube video there — [Geofind](https://mattw.io/youtube-geofind/location) · `flickr.com/map/?fLat=…&fLon=…` → public photos at that point · `tiktok.com/place/…` → every video tagged there, no login · Instagram pins on a map — [InstaHunt](https://instahunt.huntintel.io)
> - 📷 16,900 live traffic, city and port cams + flights + ships on one map — [ARGOS ATLAS](https://argosatlas.com/) · the nearest live cams — [OpenCCTV](https://opencctv.org/cameras/webcams-near-me)
> - 📍 coordinates → the exact address record — [Nominatim](https://nominatim.openstreetmap.org/ui/reverse.html) · every ATM, bar, hotel within X km — [FreeMapTools](https://www.freemaptools.com/find-places-within-radius.htm) · a mountain photo → every peak labelled (iOS) — [Skyline](https://apps.apple.com/us/app/skyline-peak-finder-namer/id6786311433)
> 
> → **“Live from Dubai” with a Karachi webcam behind them = not Dubai.**

> **🔎 FIND — type one thing, find everything: handle → email → photo → place, each hit leads to the next (the original kit, kept whole)**
>
> > 🎯 **A name · email · username · photo · phone → free point-and-click sites do the digging.** No install, no signup, no skills.
> 
> ### 🧭 Start with one box
> 
> **[Max Intel](https://maxintel.org)** — paste anything (name, email, username, phone, or a photo) and it fans across **960+ sources** at once. No account, no keys. · Menu view: **[OSINT Framework](https://osintframework.com)**
> 
> * * *
> 
> ### 👤 A USERNAME → every account they own
> 
> [Sherlock](https://sherlock-osint.com) · [WhatsMyName](https://whatsmyname.app) · [Fingerprint](https://fingerprint.to) _(700+ platforms, streams live)_
> 
> ### 📧 AN EMAIL → who’s behind it
> 
> [Epieos](https://epieos.com) _(the famous one)_ · [Skopio](https://skopio.io) _(22+ sources, free daily lookup)_
> 
> ### 🔓 IS IT LEAKED? · email · password · phone in a breach
> 
> [Have I Been Pwned](https://haveibeenpwned.com) _(the classic — paste an email, see every breach)_ · [InfoBreach](https://infobreach.net) _(breach dumps + stealer logs)_
> 
> ### 🖼 A PHOTO → who is it
> 
> [Yandex](https://yandex.com/images) _(best for faces + places)_ · [TinEye](https://tineye.com) · [PimEyes](https://pimeyes.com) _(face search — scary-good)_
> 
> ### 🌐 A WEBSITE → owner + history
> 
> [ViewDNS](https://viewdns.info) _(whois, server-neighbours, history)_ · [Wayback Machine](https://web.archive.org) _(deleted / older versions)_
> 
> * * *
> 
> ## 🆕 The rare tricks — nobody lists these
> 
> ### 🛰 A PHOTO → WHERE on Earth · no GPS in the photo needed
> 
> [ShadowFinder](https://kluter.github.io/ShadowFinder-Web/) _(drops a pin from a shadow’s length — Bellingcat’s method, in your browser)_ · [PhotoRadar](https://photoradar.io) _(AI reads the visual clues)_ · [Weather-locate](https://maxintel.org/weather-chronolocation.html) _(a weather-widget screenshot → when & where)_ · [Signal & Shadow](https://signalandshadow.io) _(sun-angle calculator)_
> 
> ### 🎬 A VIDEO → trace it back to the source
> 
> [Frame Grab](https://alejandrorioja.com/tools/reverse-video-search/) _(no engine searches video directly — this pulls one sharp frame in your browser, nothing uploads)_ → then reverse-search that frame with Yandex or TinEye above
> 
> ### 🤖 A PHOTO or VIDEO → is it even real
> 
> [Lens](https://github.com/thevgergroup/lens) _(free browser extension — flags AI-made images as you scroll, checks the hidden watermark first)_ · [Specula](https://komalsohal-specula.hf.space/) _(upload one photo, get a verdict with the reasoning shown — free, first load can take a moment to wake up)_
> 
> ### 🎧 AN AUDIO CLIP → name the song / same voice or not
> 
> [Vocuno](https://vocuno.com/audio-recognition) _(upload a clip, matches the acoustic fingerprint — works on voice memos too)_ · [Voice Match Checker](https://justbuildthings.com/ai-audio-analysis/same-voice-checker) _(upload two clips, get a same-person-or-not verdict)_
> 
> ### 🌍 WATCH THE WORLD LIVE
> 
> [FlightRadar24](https://www.flightradar24.com) _(any plane)_ · [ADS-B Exchange](https://globe.adsbexchange.com) _(even the private jets FR24 hides)_ · [MarineTraffic](https://www.marinetraffic.com) _(any ship)_ · [Zoom.earth](https://zoom.earth) _(live satellite)_
> 
> ### 🔗 A WEBSITE → every OTHER site the same person runs
> 
> [DNSlytics](https://dnslytics.com) — unmask a whole network by the **Google-Analytics / AdSense ID they reuse** across their sites
> 
> ### 💰 A CRYPTO WALLET → follow the money
> 
> [Chainabuse](https://www.chainabuse.com) _(is it a reported scam?)_ · [Breadcrumbs](https://www.breadcrumbs.app) _(trace where the coins went)_
> 
> ### 📞 A PHONE → who owns it
> 
> [UserSearch](https://usersearch.org) · [Max Intel · Phone](https://maxintel.org) · [Line Type Check](https://www.1lookup.io/tools/phone-line-type-lookup) _(mobile, landline, or a disposable VOIP number)_
> 
> ### 🧾 A PHOTO, FILE or PDF → its hidden data
> 
> [Jimpl](https://jimpl.com) _(drop a photo → GPS pin on a map + camera model)_ · [Metadata2Go](https://www.metadata2go.com) _(hidden data inside any file)_ · [PDFCheck](https://pdfcheck.online) _(catches an edited or backdated PDF)_
> 
> ### 🗳 A NAME → address, phone, relatives · US public records
> 
> [TruePeopleSearch](https://www.truepeoplesearch.com) · [FastPeopleSearch](https://www.fastpeoplesearch.com) · [ThatsThem](https://thatsthem.com) — all free, no signup
> 
> ### ⚖ A NAME → is there a court case on them
> 
> [CourtListener](https://www.courtlistener.com) _(free, non-profit — millions of real US court filings and case law, just search a name)_
> 
> ### 🏢 A COMPANY → who really owns it, who really works there
> 
> [OpenCorporates](https://opencorporates.com) _(150M+ companies + their officers)_ · [OpenSanctions](https://www.opensanctions.org) _(sanctions / PEP check)_ · [Aleph](https://aleph.occrp.org) _(OCCRP’s leaks + records archive)_ — for the team behind it, search `site:linkedin.com/in "company name"` on Google, no tool needed
> 
> ### 🔎 GOOGLE DORKS → surface what’s hidden in plain sight
> 
> [DorkSearch](https://dorksearch.com) _(pre-built Google dorks, click to run — exposed files, logins, documents)_
> 
> ### 💬 TELEGRAM → search channels + people
> 
> [Lyzem](https://lyzem.com) · [TGStat](https://tgstat.com) _(channel stats + search)_
> 
> ### 🕸 THE DARK WEB → search it without getting lost
> 
> [Ahmia](https://ahmia.fi) _(searches .onion sites — needs Tor Browser to open a result, that’s it, nothing else technical)_
> 
> ### 🗺 SEE ANY PLACE — past + present + what changed
> 
> [Google Earth](https://earth.google.com) _(historical-imagery time slider)_ · [Historic Aerials](https://www.historicaerials.com) _(aerial photos back to the 1930s)_ · [archive.today](https://archive.ph) _(snapshot / read deleted pages)_ · [GeoSentinel](https://cooljapan.tech/geosentinel/) _(draw a box, pick two dates, see exactly what changed)_
> 
> ### 🌐 AN IP ADDRESS → who, where + is it a VPN
> 
> [ipinfo.io](https://ipinfo.io) _(geolocation, ISP, VPN/proxy flags — plain language)_

> **🪞 YOU — run every box on yourself first → I see what strangers see, then I delete it**
>
> - 🇮🇳 every SIM issued on your ID + one-click “not mine” — [TAFCOP](https://tafcop.sancharsaathi.gov.in/telecomUser/) · 🇵🇰 SIMs on your CNIC — [668](https://cnic.sims.pk/) · 🇧🇩 dial `*16001#` · 🇪🇬 lines + wallets on your ID — the My NTRA app · 🇧🇷 every account, loan and Pix key on your CPF — [Registrato](https://www.gov.br/pt-br/servicos/gerar-relatorio-de-contas-e-investimentos-ccs) · 🇬🇧 every company you are listed at — [Companies House](https://find-and-update.company-information.service.gov.uk/)
> - 🖼 your email → the forgotten avatar and name shown on every WordPress comment — [Gravatar check](https://gravatar.com/site/check) · your number, handle, face → run CallTracer, Lullar and FaceOnLive above on yourself
> - 🧹 a service name → its direct deletion link + difficulty — [JustDeleteMe](https://justdeleteme.xyz/) · the three respected broker opt-out lists — [BADBOOL](https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List) · [IntelTechniques workbook](https://inteltechniques.com/data/workbook.pdf) · [Privacy Guides](https://www.privacyguides.org/en/data-broker-removals/)
> - 🚫 pull yourself out — [FaceCheck](https://facecheck.id/en/RemoveMyPhotos) · [Truecaller](https://www.truecaller.com/unlisting) · [Sync.me](https://sync.me/unsubscribe/) · a 15 min / 30 min / 2 h self-audit — [UofT](https://security.utoronto.ca/best-practices-tips/open-source-intelligence-osint-self-audit-for-researchers/)
> 
> → **What you find, they found first. Delete it.**

* * *

> **🧠 10-second how-to — zero experience**
>
> 1. Pick the box that matches what you have — a name, email, username, photo, video, audio clip, or phone.
> 2. Open a tool, paste your one thing, hit search.
> 3. Each result is a public breadcrumb — one leads to the next (username → email → photo → **place** ). The chaining is the whole skill; the tools do the work.
> 4. Something a stranger just handed you? Start with ⏳ BIRTHDAY, then the box that matches — before you pay, join, click or open.  
> Everything here reads **public** info only — no hacking, no logins, no passwords.

> **⚠️ Use it right**
>
> Same tools journalists and security teams use to check who they’re dealing with — and to see your OWN exposure. Run your email through [Have I Been Pwned](https://haveibeenpwned.com) right now; look yourself up first.

* * *

Links rot — a tool dies, drop a ❌ reply with the newest working one. Kept current.

---

_[View the full topic](https://onehack.st/t/you-hold-all-the-cards-now-free-pages-for-checking-anything-online/52540)._