We built a chain-first OSINT terminal. Paste a wallet, a tx hash, a domain or an IP. Twenty passive sources run in parallel, an analyst model reads them, and you get a report you can question. Free. No account. osint.money/scan

Paste one thing. Address, tx hash, domain or IP. Twenty passive sources, an analyst model, a report you can question. Free once a day, more if you hold solana:A2vPDnxfugHouzsJd7kiQkE8zqN4MXjazaT5zHG2qg11. No account, no analytics, Tor mirror. osint.money/scan

Deletion is a rumour. Archiving is a fact. The Wayback Machine keeps the old team page, the removed disclaimer, the previous project on the same domain. The CDX index shows when the story changed. Check it before you trust "we've always been transparent".

Tor hides where you came from. Tor does not hide that you are the only person on Tor buying a three-letter domain at 4am in your own name. Anonymity is behaviour, not software.

Spend from two addresses in one transaction and chain analysis assumes one owner. That's the multi-input heuristic. WalletExplorer applies it to all of Bitcoin for free. Ten years of "new address every time" collapse the moment you consolidate.

Someone sent you 0.00001 BTC. It is not a gift. It is a tracer. Spend it together with your other coins and the cluster is complete. Leave dust where it lands.

Reused handles de-anonymise more people than malware does. Same username on a 2014 forum, a GitHub with a real name, a Keybase proof. Linked in seconds. WhatsMyName checks 1,500+ sites. Fresh identity means a fresh handle. Every time.

The name, symbol and logo of a Solana token can be rewritten after launch if the metadata update authority is still set. The "official" token in your wallet can be renamed tomorrow. Check the authority, not the logo.

Domain age is the fastest scam tell. RDAP: registration date. Certificate logs: first cert issued. Wayback: first capture. A "trusted since 2015" site registered last Tuesday is lying. All three run in one scan.

A VPN moves your trust from your ISP to a company with a marketing budget. Useful. Not anonymity.

Your photos talk. EXIF carries device model, GPS, timestamp, editing software. Screenshots strip that but keep your status bar: carrier, time zone, notifications. Strip before you post. exiftool -all= file.jpg does it in one line.

"Mint authority renounced" is one checkbox out of five. Freeze authority. Transfer fee config. Withheld-fee collector. Metadata update authority. Read all five before you buy anything. Including ours.

OFAC publishes crypto addresses on its sanctions list. BTC, ETH, XMR, TRX, USDT, USDC. Touching one can freeze your exchange account. The list is public. Check before you interact. Every scan on the terminal runs it first: osint.money/scan

Your wallet address is a username you can never change. Every payment you ever received is attached to it forever. Act accordingly.

Passive OSINT reads what's already public: chain data, DNS, certificate logs, archives. The target never knows. Active OSINT touches the target and leaves traces. Most investigations never need the active side. Ours is passive by design.