Vassago • OSINT & external exposure reference

Platforms & extensions

Third-party services that sit alongside the bookmarklet catalog: evidence capture and preservation, and the upstream source of the catalog itself.

These are third-party services listed as references, not endorsements. Each has its own terms, pricing, and account requirements. Evidence-handling claims (signing, hashing, court admissibility) are the vendor's — validate them against your own jurisdiction and engagement requirements before relying on them in a matter.

Forensic OSINT

An evidence-capture platform aimed at preserving what an investigator actually saw, in a form attorneys and courts can work with. Positioned around capture and preservation rather than discovery — it complements the bookmarklet catalog rather than overlapping it. forensicosint.com

Browser extension

Full-page capture with automatic scrolling, digitally signed and timestamped PDF reports, embedded images/media and page source, hash verification, and video capture from TikTok, Facebook, Instagram and YouTube. Desktop Chrome. Free community edition plus paid tiers (Essential, ELITE).

Subject Dossier

Links multiple profiles and captures into a single investigative record.

Case organisation

Groups related captures, adds electronic notes, custom report branding, and secure export/import for offline transfer.

Free tools 6

Usable without a subscription; a free account registration is required. Most run client-side — IP Lookup and Username Search call APIs.

IP Lookup →

Geolocation and ISP detail for any IP address.

Domain to IP Lookup →

Resolves DNS records, scores security posture, and fingerprints the technology stack.

OSINT Timestamp Decoder →

Decodes hidden timestamps out of web pages, URLs, and API responses.

Email Header Analyzer →

Traces sender routing and checks SPF/DKIM/DMARC to spot spoofing.

Forensic Image EXIF Reader →

Pulls metadata including GPS coordinates, camera serials, and edit history.

Forensic Hash Calculator →

MD5, SHA-1, SHA-256 and SHA-512 hashes for file verification.

My OSINT Training

Source of the 55-bookmarklet catalog on this site, snapshotted 2026-08-05. The upstream catalog is maintained and versioned, so entries here can drift out of date. tools.myosint.training

Staying current

The upstream export ships an update-checker bookmarklet (version stamp 2026-08-05T12:48:23Z). Install it and run it to see whether any catalogued tool has been revised since this snapshot.

↕ Drag to install update checker
Active vs Passive

The Active/Passive labels on the tool catalog come from the upstream site and are preserved verbatim. Passive means page-local processing; Active means extra network or API requests, which makes it a scoped testing activity requiring written approval.