What is osintme.com?

Updated

osintme.com is an English-language blog and resource site for OSINT investigators, written by an author publishing as "Matt." It is not a tool or a data platform — it is a collection of hands-on articles, reviews, and curated resource lists on investigation techniques. If you want practical write-ups on browsers, Linux setups, Reddit research, darkweb sources, or threat actor tracking, this site is aimed at you. If you need a searchable database, an API, or a training course, it is not that.

What the site covers

The published article list shows a consistent focus on the working environment and methods of an investigator rather than news of the day:

  • Investigator tooling — "Web browsers for OSINT investigators" reviews dedicated browsers and third-party solutions; "Linux desktop apps for your OSINT machine" recommends Linux Mint native desktop apps for OSINT and general productivity.
  • Platform-specific techniques — "OSINT tools and techniques for research on Reddit" lists Google dorks and third-party tools the author says were hands-on tested.
  • Threat actor and domain research — "Pro-Iranian threat actor Handala – new websites" gives an overview of psy-op domains associated with a pro-Iranian threat actor group.
  • Website-level investigation — "The importance of favicons in website OSINT research" explains how favicon research is used.
  • Resource collections — "Darkweb OSINT resources for investigators – 2025" (Tor links and resources), "OSINT resources for researching ransomware" (sources and datasets), and "List of recommended OSINT newsletters."
  • Reading and career material — an annual reading list ("OSINT & online crime books for investigators – the Osint Me 2026 reading list") and a first-person account of preparing for and passing the ISC2 CISSP exam.

Who writes it and how it is structured

All listed articles carry the byline "Matt" with a publication date and, in most cases, a later update date — for example, the Handala piece is dated 22/03/2026, and the browser review is dated 30/09/2026 and updated 02/10/2026. That pattern suggests articles are revisited after publication rather than left static.

The archive is paginated, running to at least 14 pages, so the site has a substantial back catalogue rather than a handful of posts. Several articles show reader comments (one on the Handala post, four on the Reddit post, three on the favicon post), which indicates an audience that engages rather than a purely read-only publication.

What it is useful for, and what it is not

Use case Fit
Learning specific OSINT techniques with tool names and steps Good — articles are technique- and tool-focused
Finding curated link lists (darkweb, ransomware, newsletters) Good — these are recurring formats
Following a single threat actor or campaign over time Limited — coverage is article-by-article, not a tracking feed
Getting a structured beginner course Not indicated — content is presented as articles and personal recommendations
Accessing tools or datasets directly Not indicated — the site describes and links to resources rather than hosting them

Two caveats worth noting before you rely on it. First, the author describes some material as personal — the reading list is "a personal list of reading recommendations," and the CISSP piece is explicitly a first-person account of how he planned, studied, and passed. Treat those as one practitioner's experience, not institutional guidance. Second, dated resource lists such as the 2025 darkweb edition will age; check the publication and update dates before using any link collection for current work.

How to start

If you are new to the site, the most efficient entry points are the technique articles that match a task you already have — for instance, if you are building an investigation workstation, start with the browser review and the Linux desktop apps piece; if your target is a social platform, start with the Reddit article. Use the paginated archive to browse older material, and check each article's update date, since the author appears to revise posts after publication.