OSINT Archivi - Mario Santella https://www.mariosantella.com/category/osint/ Security- OSINT - IT Thu, 13 Nov 2025 18:06:50 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.3 How to Background Check an Italian Company in 10 Minutes https://www.mariosantella.com/how-to-background-check-an-italian-company-in-10-minutes/ Thu, 13 Nov 2025 11:09:18 +0000 https://www.mariosantella.com/?p=1927 You need to assess an Italian company — fast. Here’s the workflow: start with Tesari AI (paid), then layer free, public checks. Total time: ~10 minutes. All open source. Step 0: Tesari AI — your starting point Enter the company info like this: Tesari will return a very long report: Legal structure (Registro Imprese) PEC,...

L'articolo How to Background Check an Italian Company in 10 Minutes proviene da Mario Santella.

]]>
You need to assess an Italian company — fast.

Here’s the workflow: start with Tesari AI (paid), then layer free, public checks. Total time: ~10 minutes. All open source.


Step 0: Tesari AI — your starting point

Enter the company info like this:

Tesari will return a very long report:

  • Legal structure (Registro Imprese)
  • PEC, headquarters, administrators
  • Offshore links, past mergers/acquisitions
  • Sanctions or legal proceedings (if publicly reported)
  • National media coverage (e.g., La Repubblica, Il Sole 24 Ore)
  • Known domains and corporate network

This isn’t the full picture — but it’s the map. While your job is running on Tesari, you can proceed with the following steps…


1. WHOIS + reverse WHOIS

In Italy and for .it domains the way to go is: whois.nic.it (registrant info is public by law).

Got a name/surname? Run a reverse lookup:

  • ViewDNS.info
  • Or: “Name Surname” site:whois.domaintools.com

If the same person registered blockchain-italia-example.io, ai-consulting-2024-example.com, and your target — that’s a pattern, not a coincidence. It’s up to you.


2. Legal address → Google Maps + Street View

Is it a business center, a coworking space, or a residential flat?

Also: check Google Maps reviews.

Even B2B companies get reviews:

  • “Contracted them for service X — never delivered.”
  • “Great support during implementation.”

Look for verified reviews, recurring themes, and whether they respond professionally. You can find many signals in Google reviews.

For this purpose, also check:

  • Trustpilot
  • ScamAdviser (for domain + review cross-check)
  • Industry-specific forums (e.g., Server Fault for tech vendors) – only if you have extra time.

3. Financials — no “visura” needed

ufficiocamerale.it shows, for free:

  • Revenue
  • Net profit
  • Employee count
  • ATECO code

If they claim “enterprise scale” but report €80k revenue and 3 employees, that’s useful context.


4. Find PDFs everywhere (not just their site)

Use these dorks:

"Company Name" filetype:pdf
"CEO Name" filetype:pdf
"Founder Surname" filetype:pdf
site:slideshare.net "Company Name"
site:company.it filetype:pdf

People present at external events, conferences, university talks. Those decks often leak:

  • Real tech stack
  • Actual clients
  • Internal org structure

And they’re public.


5. LinkedIn: Company Page → People tab

Don’t just scroll posts. Go to Company Page → People.

Filter by “Current employees.”

Compare:

  • How many actually list the company?
  • Are key roles (CTO, CISO, Head of Ops) filled?
  • Do profiles match the narrative (e.g., “ex-Microsoft AI team” → check timeline)?

In small firms, this tab is more honest than the “About” section.

Also: scroll recent posts. The same 3–4 names liking everything? Those are your real stakeholders.
I know a lot of other tool to investigate companies (check out The OSINT Rack for more) but we’re handling with a 10 minute task, so we will skip that part and keep moving on with the next step.


That’s it.

Today AI tools like Tesari AI can boost this activity, and give the starting point, a decent good one; the other steps enrich the report and are easily approachable also for non-OSINT people.

The rest is on you.

L'articolo How to Background Check an Italian Company in 10 Minutes proviene da Mario Santella.

]]>
Golden Owl Syntax https://www.mariosantella.com/golden-owl-syntax/ Fri, 31 Oct 2025 11:40:56 +0000 https://www.mariosantella.com/?p=1890 AI-powered Dork Generator that simplifies advanced OSINT query building. https://syntax.goldenowl.ai/

L'articolo Golden Owl Syntax proviene da Mario Santella.

]]>
AI-powered Dork Generator that simplifies advanced OSINT query building.

https://syntax.goldenowl.ai/

L'articolo Golden Owl Syntax proviene da Mario Santella.

]]>
Sherlockeye – AI-driven OSINT Tool https://www.mariosantella.com/sherlockeye-ai-driven-osint-tool/ Fri, 01 Aug 2025 09:24:28 +0000 https://www.mariosantella.com/?p=1715 In the ever-evolving world of OSINT (Open Source Intelligence), automation is now essential — especially when investigations span emails, domains, usernames, phone numbers, and more. Today I’m taking a look at Sherlockeye, a web-based AI-powered platform designed to speed up reconnaissance and threat analysis activities. Here’s my take based on real usage and testing. 🧪...

L'articolo Sherlockeye – AI-driven OSINT Tool proviene da Mario Santella.

]]>
In the ever-evolving world of OSINT (Open Source Intelligence), automation is now essential — especially when investigations span emails, domains, usernames, phone numbers, and more.
Today I’m taking a look at Sherlockeye, a web-based AI-powered platform designed to speed up reconnaissance and threat analysis activities.

Here’s my take based on real usage and testing.


🧪 First Impressions & Interface

Sherlockeye’s homepage is sleek and dark-themed — a nice touch for late-night analysts (we’ve all been there).
At the core is a single input field where you can choose your input type:

  • Auto (smart detection)
  • Bucket
  • CNPJ / CPF (Brazilian identifiers, especially useful for LATAM investigations)
  • Domain
  • Email
  • IP
  • Phone
  • Username

Switching between modes is smooth, and the UI is intuitive for both beginners and experienced OSINT researchers.


🔄 Enrichment & Search Progress

Once you start a search (in this case I used my old nickname mariosantella — yes, that one, the infamous international hacker 😅), Sherlockeye displays a clear progress indicator:

  1. Initial data gathering
  2. Integration with external sources
  3. Systemic enrichment with AI

I genuinely appreciate this level of transparency. It shows that the data isn’t just pulled from static lists, but actively enriched in real time.


📊 Results: Structured and Rich

This is where Sherlockeye shines.
Results are grouped by account type (GitHub, Trello, StackOverflow, TikTok, etc.), and each result includes:

  • Blog/profile URLs
  • Full name
  • Creation date
  • Comment count
  • Other contextual metadata

Each result is tagged, hyperlinked, and sortable — with filtering options to refine your view. This is extremely helpful for focused investigations.


🌍 Geolocation & Map Tab

Another useful feature is the Map view. When Sherlockeye extracts location hints from sources (as with GitLab in my test), it places them on an interactive map.

A quick note here: you’ll get the most out of this feature when starting from a Gmail or Google-related email address — these tend to be far more fruitful than simple usernames.


💰 Plans & Limitations

Sherlockeye claims to tap into 300+ reliable data sources, but as expected, the free plan is intentionally limited. You’ll get:

  • Partial results from a smaller subset of sources
  • Shallow data without deep enrichment
  • No access to exclusive or confidential data

And that’s totally fair.
The tool works well, the interface is clean, and if you want full power — it makes sense to go PRO. It’s a reasonable, sustainable model for a serious OSINT platform.


⚖ Verdict: Is It Worth It?

✅ Pros:

  • Clean and smooth interface
  • Solid enrichment logic (AI + external sources)
  • Support for many input types (email, phone, domain, username, etc.)
  • Advanced visualizations: timeline, graph, map
  • API available for automation or integration
  • Beginner-friendly while still powerful

❌ Cons:

  • Free plan is limited — best for exploration or testing

👨‍💻 Final Thoughts

Sherlockeye is a promising OSINT tool — especially for quickly spinning up reconnaissance across multiple entity types.
and significantly lowers the entry barrier for professional digital investigations.

If you work in cybersecurity, digital forensics, or are simply curious about what hides behind a name or account — Sherlockeye is worth a try.
Just be ready to upgrade if you want to unlock its full potential.


L'articolo Sherlockeye – AI-driven OSINT Tool proviene da Mario Santella.

]]>