SpiderFootgithub.com
OSINT automation framework with 200+ modules. Give it a domain, IP, email, name or username and it recursively correlates findings in a web UI.
domainip / asnemailreal nameusernamephonecryptodetails
tools / crosstrace
CrossTrace
One identifier in, one reconciled view out: runs an email, username, phone or domain across the OSINT APIs you hold keys for (OSI, Dehashed, Opsis) and merges results with per-source attribution.
freeacct reqweb
field note
Free to use. It's bring-your-own-keys, so any paid data providers you connect (e.g. Dehashed) are billed by them directly. Keys are stored in Settings. Names and locations it surfaces can be pivoted on from the results.
similar tools
Leak-Lookupleak-lookup.com
Breach data search engine with a free check of which breaches contain a selector, and paid access to the full records.
emailusernameip / asnphonedomaindetails
LeakCheckleakcheck.io
Breach search by email, username, phone, or domain that shows breach sources and dates. Paid plans include leaked fields such as passwords.
emailusernamephonedomaindetails
OSINT Industriesosint.industries
Commercial real-time lookup of an email, phone, or username across hundreds of modules, with linked accounts, names, photos, and a timeline view.
emailphoneusernamedetails
BreachDirectorybreachdirectory.org
Free breach lookup by email, username, or phone that shows matching breaches and partial password hashes with source names.
emailusernamephonedetails
DeHasheddehashed.com
Searchable breach database that queries by email, username, name, IP, phone, address, or password hash and returns raw leaked records.
emailusernamereal nameip / asnphonelocationdetails