Alexandre Ohayon
Intelligence Analyst
Some of my research tools at your disposition for free— 42 instruments
Investigation Workflow
./investigation-workflow
Unified OSINT investigation — infrastructure enumeration, identity correlation, breach intelligence, metadata analysis
Identity & Account Footprint
./email-to-accounts
Account enumeration across 54+ platforms
./phone-to-accounts
Phone number footprint across 13+ services
./username-to-accounts
Public profile discovery across 48+ platforms
./breach-checker
Credential exposure analysis via Have I Been Pwned
./phone-to-name
Reverse phone lookup — Pages Blanches, 118712, Truecaller, Sync.me, Google OSINT queries, mobile vs landline strategy
./person-timeline
Chronological identity reconstruction — RCS director mandates (Pappers), Google, LinkedIn, Wayback, press, Societe.com
./alias-correlation
Cross-platform username scan — GitHub, Reddit, HackerNews, Keybase, Steam, Twitch, Mastodon, GitLab, npm, PyPI, 25+ platforms
Media & Visual Intelligence
./reverse-image-search
Multi-engine OSINT image lookup — SauceNAO, Google Lens, Yandex, TinEye
./facial-osint
Face-based reverse image search — PimEyes, FaceCheck.ID, Search4Faces, Yandex, Social Catfish, Lenso.ai
./exif-extractor
Image metadata extraction — GPS coordinates, device, timestamp
Infrastructure & Network
./domain-osint
DNS, WHOIS/RDAP, mail security analysis — SPF, DMARC, MX provider
./ip-osint
Network attribution and geolocation — ASN, PTR, CIDR, timezone
./cert-transparency
Subdomain discovery via certificate logs — crt.sh SSL transparency
./url-scanner
Redirect chain analysis, shortlink expansion, phishing domain detection
./http-headers-audit
HTTP security posture assessment — HSTS, CSP, info disclosure
Credentials & Hash Analysis
./password-check
Credential leak verification via k-anonymity SHA-1 (HIBP Pwned Passwords)
./hash-identifier
Hash type identification and plaintext lookup — CrackStation 15B+ entries
Privacy & Data Rights
./rgpd-opt-out-generator
GDPR erasure request generator — 35 data brokers covered
./data-broker-database
35 data broker profiles — verified opt-out URLs
Telecom Security — SS7 & SIM
./imsi-catcher-detect
IMSI catcher detection via OpenCelliD tower database — isolated 2G towers, abnormal range, unknown MCC/MNC operator
./number-portability
French mobile number prefix lookup — initial operator allocation (ARCEP), portability status, number type classification
./radio-osint
ANFR CartoRadio license search by holder name or address — frequencies, technologies, GPS coordinates, station IDs
./ss7-exposure-check
SS7 vulnerability assessment by phone number — location tracking, SMS interception, call redirection risk by country
./sim-swap-risk
SIM swap exposure assessment — country risk scoring, port freeze availability, documented incidents, defense matrix
Blockchain & Darknet Intelligence
./wallet-tracer
Bitcoin / Ethereum address tracing — balance, transaction history, exchange attribution heuristics
./darknet-exposure
Email, domain, IP, or crypto address exposure across breach databases and darknet indices
Communications & Signal Analysis
./telegram-footprint
Public Telegram channel, group, and bot enumeration — subscriber count, type, description
./whatsapp-probe
Passive WhatsApp presence surveillance — hourly activity heatmap, timezone inference, behavioral profiling (Baileys)
./signal-metadata
Communication metadata analysis — activity heatmap, response times, participant share, timezone inference
Geospatial & Satellite Intelligence
./geo-correlation
Multi-source GPS coordinate correlation — EXIF, posts, check-ins — centroid, radius, temporal span
./satellite-delta
Sentinel-2 imagery timeline via Copernicus STAC — temporal change detection, cloud cover, 10m resolution
Corporate Intelligence — France
./corporate-osint
Pappers + Infogreffe + Bodacc — directors, capital, financial statements, collective proceedings, establishments
./beneficial-owner
Beneficial ownership register (RBE) — real ownership chains, direct/indirect stakes, control thresholds
./network-map
Corporate relationship graph — cross-mandates, capital links, leadership history — force-directed visualization
Social Media — Archives & Ghost
./instagram-ghost
Instagram profile lookup via Wayback Machine — archived stories, ghost viewers, indexed content without account
./twitter-deleted
Deleted tweet recovery via Wayback Machine CDX — twitter.com + x.com archives, Politwoops, Memory.lol
Behavioral Surveillance
./typing-pattern
Keystroke dynamics analysis for biometric identification — dwell time, flight time, digraph timing, exportable signature
./online-presence-heatmap
Cross-platform activity aggregation (WhatsApp, Telegram, Instagram, Twitter) — unified 24h/7d presence heatmap
Transport & License Plates
./license-plate
French license plate lookup SIV/FNI — vehicle inspection history (UTAC-OTC), department decode, Histovec, lien check FCA
Physical Surveillance — Air & Maritime
./flight-tracker
Aircraft tracking by ICAO24 hex — live ADS-B position, altitude, speed, operator, aircraft metadata via OpenSky Network
./vessel-tracker
Maritime vessel tracking by MMSI — country decode from MID, vessel type, live AIS position via MarineTraffic / VesselFinder