OSINT Privacy Detective
Explore a simulated online world, connect scattered clues, and notice how quickly small pieces of public information can become a detailed profile.
🚀 How to Explore
Open the challenge, select Next, click the sleeping computer screen to wake it, and investigate the simulated sites. Return here to check each answer.
Practice Target Only
Do not use this process to expose, embarrass, contact, track, or investigate a real person. Publicly available information can still create privacy and safety risks.
1Prepare
Before You Begin
Know what you are looking for, but stay open to unexpected connections.ExploreOpen the simulated environment.
ConnectCombine websites, posts, records, and images.
CheckSelect an answer below to reveal feedback.
DefendAsk how the clue could be protected or misused.
OSINT means open-source intelligence: collecting and analyzing information from publicly available sources. Reconnaissance is the broader information-gathering process that can include OSINT.
2. 📍 Which two towns did Tony previously live in?
3. 🎂 What is Tony’s current age?
4. 🗓️ What is his birth date?
5. 🪪 What is his middle name?
6. 💍 What is his wife’s full name?
7. 👨👩👧 Which list places his children in alphabetical order?
8. 🚴 What is his hobby?
9. ⚾ What is his favorite team?
10. 🐶 Which description matches the family pet?
11. 💰 Research checkpoint: What value range does the live challenge report?
The public answer copy does not reliably preserve the selected range. Open the live challenge, locate the property-value clue, and record the range you find instead of accepting an unverified answer.
Open the live challengeThis research checkpoint is intentionally not auto-graded.
12. 🏡 Which group matches the home features?
13. 🌎 Bonus: Where was the recent vacation?
Version note: The auto-graded answers follow the current 2024 challenge version. Question 11 is a research checkpoint because the public answer copy does not reliably preserve the selected home-value range.
2Connect the clues
Why These Clues Matter
The risk grows when separate facts are combined.Addresses, schedules, geotags, property photos, and live vacation posts can create stalking, burglary, or unwanted-contact risk.
Names and relationships help attackers impersonate trusted people and write convincing emergency stories.
Birth dates, hobbies, teams, and pet names can support password guessing, security-question attacks, and targeted messages.
Home values, purchases, occupations, and lifestyle clues help scammers estimate wealth and personalize fraud.
References
- Cyber Innovation Center. (2024). OSINT personal data challenge. https://d2hie3dpn9wvbb.cloudfront.net/osint-pd/OSINT_PD_Challenge.html
- Cybersecurity and Infrastructure Security Agency. (n.d.). Recognize and report phishing. https://www.cisa.gov/secure-our-world/recognize-and-report-phishing
- National Institute of Standards and Technology. (n.d.). Privacy framework. https://www.nist.gov/privacy-framework