ip-api
Geolocation, ISP, ASN, and proxy/VPN/hosting flags.
Data Sources
TrenchLink aggregates OSINT from trusted providers across every seed type. Toggle sources per investigation in your profile settings.
IP
AbuseIPDB
Abuse confidence score, report history, and usage category.
IPInfo
Network owner, privacy detection, and enriched geolocation.
VirusTotal
Malware and reputation verdicts from security vendors.
BGPView
BGP prefix, ASN, and upstream/downstream routing context.
Domain
WHOIS/RDAP
Registrar, registration dates, nameservers, and status codes.
Certificate Transparency
TLS certificate history and associated subdomains.
URLScan
Page snapshots, technologies, and linked resources.
Wayback Machine
Historical snapshots and first/last seen archive dates.
VirusTotal
Domain reputation and malicious activity detections.
Have I Been Pwned
Known breach exposures and compromised data classes.
Google/Instagram
Account registration signals on Google and Instagram.
Account Enumeration
Cross-platform account existence checks from email seeds.
Gravatar
Profile avatar, display name, and linked accounts.
EmailRep
Deliverability, reputation score, and suspicious activity flags.
Username
Public profile metadata, karma, and account age.
GitHub
Profile details, repositories, and public activity.
Steam
Public profile, avatar, and account visibility status.
YouTube
Channel metadata, subscriber counts, and public videos.
Twitch
Streamer profile, follower stats, and broadcast history.
Telegram
Public username resolution and account type detection.
WhatsMyName
Username presence across hundreds of social platforms.
Phone
IPQS
Carrier, line type, fraud score, and spam risk indicators.
NumVerify
Number validity, country, carrier, and line type validation.
Discord
Discord API
Snowflake decode, account creation date, and public profile data.