usefulweb.siteDependable little tools for people and AI agents. OBSCURIQ
Theme: Auto

Theme

OSINT case desk

OBSCURIQ

Organize public-source research: cases, a research log, pivots and indicators.

Launch OBSCURIQ → Tutorials

OBSCURIQ is a local-first desk for open-source research. Keep separate cases with a timestamped research log of sources, indicators, notes, opened pivots and inspected files; review and date every entry, filter the log and follow the case on a timeline. Open web searches, Internet Archive, ICANN Lookup and blockchain explorer pivots only when you choose, run usefulweb.site lookups on domains, URLs and transactions, extract and defang indicators, inspect files locally and export a case report. Nothing is collected automatically.

Free · runs in your browser · no sign-up · Version 2.0.0

Screenshots

Features

  • A case for every question

    Separate cases in one workspace, each with a brief, a purpose note, a status (open, paused, closed) and its own research log.

  • Timestamped research log

    Sources, indicators, notes, opened pivots and inspected files, each recorded with time, context, tags and an optional event date.

  • Review and assess

    Mark entries as reviewed or needing follow-up, rate sources high, medium or low and pin the key leads — your judgment, never presented as verification.

  • Filter, search and sort

    Filter by type, review status, tag or pins, search titles, values, context and tags, and sort by recorded time, event date or title.

  • Case timeline

    Dated entries on a month-by-month timeline with the first and last event, so gaps and sequences stand out.

  • User-initiated pivots

    Paste a URL, domain, e-mail, IP, hash or phrase: OBSCURIQ offers web searches, Internet Archive and ICANN Lookup links, opened only when you click and logged in the case.

  • Lookups through site tools

    Domain history, DNS and certificates, certificate transparency, archive changes, transaction decoding, scam signals and look-alike characters — each run on request, with the result saved to the log.

  • Crypto trace pivots

    Bitcoin addresses with checksum check, Ethereum addresses and transaction hashes, links to public explorers and one-click leads in the case.

  • Indicator extractor

    Paste a report or e-mail and pick out URLs, domains, e-mails, IPs, hashes and crypto identifiers — add the ones you want to the case in one step.

  • Defang and refang

    Make indicators safe to share (hxxps://example[.]org) or restore them for analysis; copy a defanged indicator list of the whole case.

  • Local file inspector

    SHA-256, SHA-1 and SHA-512 hashes, hash comparison, PNG/GIF/JPEG dimensions and selected EXIF fields, computed in your browser without uploading; full metadata and MD5 are optional server checks.

  • Query builder and URL cleaner

    Prepare exact-phrase, PDF and site: searches and strip campaign tracking parameters from links before you record or open them.

  • Case reports and exports

    Printable case report (PDF via print), plain text, Markdown, CSV of the log, defanged indicator list and the workspace JSON.

  • Workspaces that travel

    Autosave and recent workspaces in this browser, workspace files, share links, undo/redo, six example templates and Google Drive saving.

  • Local and lawful by design

    No automated collection, scraping or monitoring: every external request starts with your click, and the case keeps a purpose note.

  • API, MCP and App Bridge

    Four engine tools plus the lookups over JSON API and MCP; reports and tables go to other premium apps, text and images come in from them.

Templates

Start from a ready-made project and change it to fit.

Built-in tools

OBSCURIQ uses these tools. Each one also has its own page and works on its own, in the browser, through the JSON API and through MCP.

For AI agents

OBSCURIQ runs on a deterministic engine. The same functions are available as tools with a JSON API and MCP, so scripts and AI agents get exactly the results the app shows.

  • OSINT Indicator Extractor – Find URLs, domains, IPs, e-mails, hashes and crypto identifiers in pasted text.
    Tool page · POST https://obscuriq.usefulweb.site/api/v1/tools/obscuriq-indicator-extractor/calculate · MCP obscuriq_indicator_extractor
  • IOC Defang and Refang – Make common indicators less clickable or restore them for analysis.
    Tool page · POST https://obscuriq.usefulweb.site/api/v1/tools/obscuriq-ioc-converter/calculate · MCP obscuriq_ioc_converter
  • OSINT URL Tracking Cleaner – Remove common campaign tracking parameters while retaining the original link.
    Tool page · POST https://obscuriq.usefulweb.site/api/v1/tools/obscuriq-url-cleaner/calculate · MCP obscuriq_url_cleaner
  • OSINT Search Query Builder – Prepare focused public-web searches without submitting them.
    Tool page · POST https://obscuriq.usefulweb.site/api/v1/tools/obscuriq-search-query-builder/calculate · MCP obscuriq_search_query_builder
  • Domain History Graph – Registration, DNS, hosting networks, certificates and Wayback captures of a domain as a timeline.
    Tool page · POST https://obscuriq.usefulweb.site/api/v1/tools/domain-history-graph/calculate · MCP domain_history_graph
  • DNS + Certificate Explorer – DNS records, e-mail security, CAA, live TLS certificate and CT history for a domain.
    Tool page · POST https://obscuriq.usefulweb.site/api/v1/tools/dns-certificate-explorer/calculate · MCP dns_certificate_explorer
  • Certificate Transparency Explorer – Every logged certificate for a domain: history, issuers, subdomains, wildcards and expiry.
    Tool page · POST https://obscuriq.usefulweb.site/api/v1/tools/certificate-transparency-explorer/calculate · MCP certificate_transparency_explorer
  • Internet Archive Change Explorer – See how a web page changed in the Wayback Machine: capture timeline plus the changes that matter.
    Tool page · POST https://obscuriq.usefulweb.site/api/v1/tools/internet-archive-change-explorer/calculate · MCP internet_archive_change_explorer
  • Transaction Decoder – See what an EVM transaction actually did: call, events, token transfers, fee, finality.
    Tool page · POST https://obscuriq.usefulweb.site/api/v1/tools/transaction-decoder/calculate · MCP transaction_decoder
  • Scam Signal Checker – Check a message or link for common scam and phishing warning signs — without clicking.
    Tool page · POST https://obscuriq.usefulweb.site/api/v1/tools/scam-signal-checker/calculate · MCP scam_signal_checker
  • Unicode Inspector – Every code point with name, script and bytes, plus hidden characters and look-alikes.
    Tool page · POST https://obscuriq.usefulweb.site/api/v1/tools/unicode-inspector/calculate · MCP unicode_inspector
  • EXIF Inspector & Cleaner – See all photo metadata (EXIF, GPS, XMP, IPTC, MakerNotes) and download a cleaned copy.
    Tool page · POST https://obscuriq.usefulweb.site/api/v1/tools/exif-inspector-cleaner/calculate · MCP exif_inspector_cleaner
  • Hash & HMAC Calculator – MD5, SHA-2, SHA-3, BLAKE2, CRC32 and HMAC of text or files, with checksum compare.
    Tool page · POST https://obscuriq.usefulweb.site/api/v1/tools/hash-hmac-calculator/calculate · MCP hash_hmac_calculator

Build a project through the API, then open it in the app with a link to https://obscuriq.usefulweb.site/app#project=<base64url JSON>.

Import & export

Import

  • OBSCURIQ workspace (.obscuriq.json, versions 1 and 2)
  • Workspace link (#project=…)
  • Text and CSV with indicators (paste, file or App Bridge)
  • Any local file for hashing; PNG, GIF and JPEG headers
  • Images from other apps (App Bridge)

Export

  • OBSCURIQ workspace (.obscuriq.json)
  • Case report (print/PDF, plain text, Markdown)
  • Research log (CSV)
  • Defanged indicator list (text)

Keyboard shortcuts

Keyboard shortcuts in OBSCURIQ
KeysAction
NAdd an entry to the research log
Ctrl + Z / Ctrl + YUndo / redo
Ctrl + SSave workspace file
Ctrl + OOpen workspace file
1 … 6Log, timeline, pivots, indicators, files, report
/Search the research log
Alt + ↑ / Alt + ↓Previous / next case
?Keyboard shortcuts (single-key shortcuts can be switched off)

Frequently asked questions

Does OBSCURIQ collect information automatically?

No. There is no crawling, scraping, monitoring or scheduled collection. You record what you find; an external page opens only when you click its link, and a lookup runs only when you press its button.

Who sees my searches and lookups?

A pivot link sends your query or URL to the provider you open (for example Google, the Internet Archive, ICANN Lookup or a blockchain explorer); their terms and privacy policies apply. A lookup sends the value to the usefulweb.site tool API, which queries public sources such as RDAP, DNS, certificate transparency logs, the Wayback Machine or a public Ethereum node and does not store it. Some lookups, such as the live TLS certificate check, connect to the domain itself — the desk says so next to the button.

Where is my workspace stored?

In this browser (IndexedDB) while you work, with a list of recent workspaces. Save a workspace file or use Google Drive for a backup; files and share links are not encrypted, so handle them like the research itself.

Does OBSCURIQ verify evidence or identify people?

No. Review status and source assessment are your own notes. Explorer labels, registration data and metadata can be wrong or altered, and activity on an address does not show who controls it. Corroborate with independent sources before you rely on anything.

What may I use it for?

Lawful research on public information: security triage, fact-checking, due diligence, journalism and consumer research. Respect privacy and data-protection law, the terms of the sites you visit and the rights of the people involved; do not use it to stalk, harass or profile individuals. Note the purpose of each case in its purpose field.

Are the file hashes and EXIF data reliable?

Hashes are computed exactly in your browser with Web Crypto and identify the bytes of the file you have. Image headers and EXIF fields are read as stored; metadata is easy to edit or strip, so treat it as a hint. The local inspector only says whether a GPS tag exists; the optional full-metadata check (which uploads the file to the EXIF Inspector) also shows the coordinates.

Can AI agents use OBSCURIQ?

Yes. The four engine tools and the lookups are available through the JSON API and MCP on obscuriq.usefulweb.site. Agents can also build a workspace following /project.schema.json and hand it over with /app#project=….

Limitations

What OBSCURIQ does not do (yet):

  • No automated collection: OBSCURIQ does not crawl sites, monitor accounts, scrape social networks or retrieve records in the background.
  • Lookups depend on public sources (RDAP, DNS, certificate transparency, Wayback Machine, public Ethereum nodes) that can be slow, rate-limited or incomplete; only Ethereum mainnet transactions can be decoded.
  • Bitcoin addresses are checksum-checked; Ethereum addresses and all transaction hashes are format checks only. No check proves that an identifier exists or who controls it.
  • Indicator extraction covers ASCII URLs, domains, e-mail addresses, IPv4, MD5/SHA-1/SHA-256 hashes and Bitcoin/Ethereum identifiers; IPv6, Unicode domains and unusual e-mail forms are not recognized.
  • The local file inspector reads PNG, GIF and JPEG headers and selected JPEG EXIF fields and only reports whether a GPS tag exists; other formats are hashed only. Full metadata (including GPS coordinates) and MD5 need the optional server checks, which upload the file.
  • Browser storage can be cleared, and workspace files and share links are not encrypted. Keep backups and handle sensitive research appropriately.

Tutorials

Learn OBSCURIQ step by step.

  1. Your first case in five minutesOpen the look-alike login domain example, read the research log, filter and review entries, and add your own source with a date and tags.Beginner 5 min
  2. Pivots and lookupsTurn a domain, URL, e-mail address, IP or phrase into search, archive and registration links, run usefulweb.site lookups on request and record what you opened.Beginner 7 min
  3. Indicators and safe sharingExtract indicators from an e-mail or report, add the ones you need to the case, defang them for sharing and spot indicators that appear in several cases.Intermediate 6 min
  4. Crypto leads and local filesCheck Bitcoin and Ethereum identifiers, open public explorers on request, hash and inspect files in your browser and record what you found.Intermediate 7 min
  5. Timeline, report and sharingFollow a case by event date, narrow down when something changed, print or export the case report and move workspaces between devices and apps.Intermediate 6 min

Ready to try it?

Launch OBSCURIQ →

Other premium apps