Investigations, methods, tools
Technical writeups on blockchain forensics, OSINT methodology, and phishing investigations. Written for practitioners.
How to trace a mixer transaction (2026 guide)
Mixers break the naive assumption that 'crypto is traceable.' But they don't break it entirely. This guide walks through the actual techniques investigators use — from deposit pattern analysis to anonymity-set reasoning and cross-chain hops.
InvestigationsHow to trace stolen crypto: a real recovery guide
When crypto is stolen, speed matters more than almost anything else. This is the exact process professional investigators follow in the first 48 hours after a theft — and why some recoveries succeed while others don't.
InvestigationsWhat is OSINT investigation? A practical guide
OSINT (Open Source Intelligence) is the practice of collecting and analyzing publicly available information to answer a specific investigative question. This guide covers what it is, what it isn't, and the tools professionals actually use.
InvestigationsThe best blockchain forensics tools in 2026 (honest comparison)
An honest comparison of blockchain forensics platforms — what they cost, who they're for, and where each one breaks. Written by people who've used several of them.
InvestigationsWHOIS history: the most underrated OSINT signal
Most investigators run WHOIS once and move on. WHOIS history shows how a domain has changed hands, what infrastructure moved, and who was there before — often revealing the owner behind privacy protection.
InvestigationsHow to investigate a phishing cluster in 90 minutes
One phishing domain is a single data point. Investigators who understand cluster analysis can go from a single suspicious email to a map of the whole campaign in under two hours.