The Netherlands is the most OSINT-friendly country in the world. And now also one of the easiest countries in the world to investigate. Why? Because everything is structured, standardized, and publicly documented. I made a page and a couple sub pages of resources where I cover nearly every public register or starting point. https://www.cultrodistro.com/nederland The subpages cover Anti Money Laundering-Compliance, Politically Exposed Persons and Governance. Due to the original Dutch names of the registers, the page appears Dutch. Use your browser to translate if necessary. 📚 1. Public Registers Everywhere The country runs on high-quality public data: - Basic Registries (addresses, buildings, land, companies, property value) - Chamber of Commerce (companies, foundations, political parties) - RDW vehicle data - BIG medical register - Financial regulators (AFM, DNB) These form the national OSINT backbone. 🏯 2. Clear Government Layers Dutch governance is simple and consistent: National → Provinces → Municipalities → Water Authorities → Agencies Each layer publishes decisions, subsidies, and FOIA releases (Woo). 🚰 3. Extreme Transparency Council documents, open-data portals, spatial plans — the Netherlands documents everything. If you know where to look, you can map entire ecosystems in minutes. 🙏 4. Start With Yourself First check what the system exposes about you: business data, vehicles, land records, property, registrations. Understand your own footprint → you understand everyone’s.

Your Phone Number Is the Most Unique Identifier You Own! You might think your picture/face, name, email, or IP address gives you away. Wrong. Your phone number is the single most persistent, unique, traceable metric about you online. You change emails, usernames, locations, even devices, but your phone number? Most people keep it for years, sometimes decades. That makes it an OSINT goldmine. And that’s where PhoneInfoga comes in. I’ve made instructions on how to use PhoneInfoga in a Cloud Shell. If you’re unfamiliar with a shell the best way to start in with Google Cloud Console. I’ve linked a video about that as well. 📞 What Is PhoneInfoga? PhoneInfoga is an OSINT tool that allows you to investigate a phone number using publicly available information. It doesn’t hack, exploit, or brute-force, it simply gathers what’s already out there. With PhoneInfoga, you can: • Check which country the number belongs to • Identify the carrier / line type • See if the number appears in breaches • Scan search engines for footprints • Find connected (social) accounts or metadata • Perform reconnaissance without alerting the target It’s one of the fastest ways to understand who is behind a number, or how exposed your own number is. https://youtu.be/27Pb5g7bEAA?si=VDe-x6xRGaaBa7jj

Before you start any OSINT investigation, verify that your setup isn’t leaking information. A quick privacy audit on https://2ip.io/privacy/ shows you exactly how exposed (or protected) you are. These are the key indicators you should test: 1. HTTP Proxy Headers Checks if your browser is revealing proxy-related headers that expose your setup. 2. Open HTTP / Web Proxy Ports If proxy ports are open, websites can flag you as suspicious or identify your proxy service. 3. Open VPN Ports Detects whether your VPN ports are visible from the outside, a fingerprint that gives away your tools. 4. Suspicious Hostname Some hostnames expose VPNs, companies, or hosting providers. Your hostname should be neutral and unremarkable. 5. Time Zone Mismatch If your browser and IP time zones differ, you stand out immediately. Your setup should blend in, not look synthetic. 6. Tor Network Attribution Checks if your IP belongs to the Tor exit node list. Useful to confirm you’re not unintentionally using Tor or being flagged for it. 7. Browser Turbo Mode Compression proxies (common on mobile browsers) leak fingerprinting clues. Keep this off during investigations. 8. Hosting Provider Detection If your IP belongs to a data center, you won’t blend in with regular traffic. Some targets block these ranges. 9. Proxy/Tunnel Fingerprinting Detects whether scripts or ping tests reveal tunnels, proxies, or MTU anomalies. 10. DNS Leak Check Shows whether your DNS resolver belongs to your VPN or leaks your real network. 11. VPN Fingerprint Even when your identity is hidden, your method may not be. 2ip.io can detect protocols like OpenVPN, IPsec, WireGuard, etc. 12. WebRTC IP Leak One of the most common leaks on browsers, exposes your real IP even when using VPN. 🎭 In the upcoming 101 Anonymity course I’ll teach you how to turn of WebRTC and everything you need to know to become a ghost. 🎭

Need to reach someone but their contact info’s hidden? RocketReach crawls public web data (including LinkedIn) to uncover professional emails and profiles. Use it to: • Find verified business emails • Cross-check job titles & domains • Map company hierarchies fast ⚠️ Remember: verify before you reach out, respect GDPR, and never scrape beyond platform TOS. In OSINT and outreach — precision > volume. https://rocketreach.co/dashboard

In OSINT, your first target is often yourself. Use Have I Been Pwned to check if your email or phone has appeared in any known data breach. It’s fast, free, and reveals how much of your digital life is already public. If your info shows up: • Change passwords — use a strong generator and max out character limits. • Enable MFA — prefer Google or Microsoft Authenticator, avoid SMS codes or untrusted apps. • Turn on “Notify me” — get alerts the next time you’ve been PWND.