A list of a couple hundred data enrichments for Ubikron (Next-generation OSINT tool).
- What is Ubikron?
- What is "data type" and extraction?
- What is enrichment?
- How to add enrichment in Ubikron?
- How to add many enrichments at once
- Value Function
- I developed an online tool. How can i make Ubikron users use it in enrichments
- Emoji in enrichments descriptions
- Enrichments list
- VIN
- Aviation
- Maritime
- Crypto
- Bank cards
- GEOINT
- Person Background
- People Search Google Dorks
- Alias
- Phone
- Socmint
- Dating
- Recruting
- Government
- Business
- TV/Radio
- Newspapers
- Science
- Archives
- Search Engines
- Open Directories/Torrents
- Video
- Streaming
- Books
- Photos
- Music
- Website
- Google Vulnerable Files Search
- URL
- IP
- Hash
Ubikron is a Chrome Extension that add dozens of new features to your browser to make your intelligence work more efficient. It can automatically save page text and screenshots, extract key data (emails, phone numbers, usernames) and search for them in dozens of #osint tools. Analyse information and write reports using AI prompts. Actually, it has many other features.
YouTube: Complete Video Tutorial
After Ubikron saves the text and screenshot of the page into a project, it extracts well known entities (emails, phone numbers, nicknames, ISBN etc) from it using regular expressions. This is called entity extraction.
Default extractions are: GPS coordinates, name, IPV6, email address, phone number, url, alias, crypto address, hashtag, website, domain, hash, ip address and cidr.
To see what extra extractions you have and to set up new ones, go to the menu Settings -> Entity extractions.
If you right-click on a string of extracted data (such as a phone number), a contextual menu opens with quick links to collect information about it. For example, search for social media profiles with Epieos and check against the ScamSearch database.
By default, there are only a few universal enrichments for each data type, but you can remove the unnecessary ones and install additional ones that best suit the goals of your investigation.
Go to Settings -> Entity Enrichments.
Click "Add new action" button.
Specify the name of the data enrichments (any name you feel comfortable with)
Optionally, set the priority (where the enrichment will be displayed in the context menu).
Select one or more data types for which this enrichments will be active. If a data type is missing from the list, open Entity extraction and add it there (just copy the regular expression from this repository or another source).
Specify the URL for enrichment. This should be a site that can be manipulated to download data using URL parameters (GET requests). Replace the parameter value with {value}. You can see many examples of such sites below in this repository.
Click "Save".
Press F5 to finally add enrichment to the context menu.
You can export your enrichments list as a TXT file to import into your other projects or share with other users.
Use the buttons in the bottom right corner to do this.
To import all the enrichments mentioned in this list you can import one file: all_advanced_enrichments.txt
Sometimes the format of the extracted data does not match the format used by a particular search tool. A simple example: ISBN (International Standard Book Number) is extracted with dashes, but Amazon Books uses the number without dashes as the URL parameter. This problem is solved by using the stripPunct function:
https://www.amazon.com/s?i=stripbooks&rh=p_66%3A{value:stripPunct}
Also, sometimes it is only necessary to find information on a portion of the extracted data. For example, username from an email address or last name from a full name:
https://www.truthfinder.com/results/?firstName={value:firstName}&lastName={value:lastName}
Just add :functionName to value. Here's a list of functions that can be added now:
| Function name | Description | Input value | Output value |
|---|---|---|---|
| firstName | Get first name from full name (first word from two) | Porting Notfound | Porting |
| lastName | Get first name from full name (second word from two) | Porting Notfound | Notfound |
| domainFromEmail | Get domain name from email address | kosie123.kramer@kramer.com | kramer.com |
| stripPunct | Remove anything that is not A-Z or a-z or 0-9 | 978-2-13-060852-3 | 9782130608523 |
| spaceToNothing | Delete spaces from string | Porting Notfound | PortingNotfound |
| stripPhone | Replace all no digits symbols to dashes | +1 086 123 1234 | -1-086-123-1234 |
| spaceToDash | Replace all spaces to dashes | +1 086 123 1234 | +1-086-123-1234 |
| spaceToSlash | Replace all spaces to slashes | +1 086 123 1234 | +1/086/123/1234 |
| firstIP | Remove symbols after / from IP string | 192.1.56.10/96 | 192.1.56.10 |
| noEndcoding | By default, all values are handled by the encodeURI() standard JavaScript function. This function cancels encoding. | https%3A%2F%2Fwww.facebook.com%2FCristiano | https://www.facebook.com/Cristiano |
| userFromEmail | Get username from email address | kosie@kramer.com | kosie |
| splitByCommaAndTrim | Split string by comma and remove spaces | abc , def | abc |
Ubikron has the ability to add an unlimited number of extractions using regular expressions (PCRE). But keep in mind that too many regular expressions can slow down data extraction from web pages. Therefore, we recommend disabling those that don't fit the purpose of your current investigation.
Here is a list of extractions that are not added to Ubikron by default, but are used in enrichments from the list below.
| Extraction name | Description | Regex | Match example |
|---|---|---|---|
| vin | Venicle Identification Number | \b([A-HJ-NPR-Z0-9]{17})\b | 6ZZ0000PV35400637 |
| bank-card-number | Bank Card Number | \b(?:\d[ -]?){16}\b | 4166 6766 6766 6746 |
| shipping container | Shipping Container Number | \b([A-Z]{3}[UJZ])\d{6}\d\b | MSCU5285725 |
| flight-number | Flight Number | \b([A-Z]{2,3}\d{1,4}[A-Z]?)\b | AA6881 |
| doi | Digital Object Identifier | 10.\d{4,9}/[-._;()/:A-Z0-9]+ | 10.1007/BF00137611 |
| cin | Corporate Identification Number | \b[LUlu][0-9]{5}[A-Za-z]{2}[0-9]{4}[A-Za-z]{3}[0-9]{6}\b | U45203WB1995PTC074213 |
PS: All of the extractions can be imported from this file: all_advanced_extractions.txt.
If you've made some sort of information gathering tool, it's legal and it can be run via a link with a URL parameter, we'd probably be happy to add it to this one on the list. Write about it in the issues to this repository.
In this list, we tried to focus on tools that provide at least some of the information for free and without registration. We also try to mention tools that do not violate the law. But there are some exceptions, which are marked with appropriate emoji:
🔑 - login required
💰 - paid subscription required
Please, first import all_advanced_extractions.txt before importing enrichments files. Like discussed before, an enrichment works on a type. If the type is not available, the enrichment wont work. Most of the enrichements here work on system types, but some are working on their own type.
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| VINDecoderz - Venicle Info | vin | https://www.vindecoderz.com/EN/check-lookup/{value} | |
| Searchquarry - Venicle and Car Model Info | vin | https://www.searchquarry.com/vin-decoder/search/{value} | |
| FaxVIN - Venicle Info | vin | https://www.faxvin.com/order/decoder?vin={value} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| Google Flight Number Info | flight-number | https://www.google.com/search?q={value} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| SeaRates - Container Route and Vessel Info | marine-shipping-container-number | https://www.searates.com/container/tracking/?number={value} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| 3xpl - Bitcoin Address Status | crypto-address | https://3xpl.com/bitcoin/address/{value} | |
| Blockchain.com - Wallet Explorer | crypto-address | https://www.blockchain.com/explorer/search?search={value} | |
| Blockchair - Bitcoin Walllet Explorer | crypto-address | https://blockchair.com/bitcoin/address/{value} | |
| BlockPath - Transanctions list | crypto-address | https://blockpath.com/search/addr?q={value} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| Bincheck - bank/card info | bank-card-number | Check bank and card information | https://bincheck.io/details/{value:spaceToNothing} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| Open Street Map | usa-address | https://www.openstreetmap.org/search?query={value}&zoom=13 | |
| Google Maps | usa-address | https://www.google.com/maps/search/{value} | |
| Pastvu - Old Photo Map | gps-coordinates | https://pastvu.com?g={value:noEndcoding}&z=17&s=osm&t=kosmosnimki&type=1 | |
| Copernix - Geotagged Wikipedia Articles | gps-coordinates | https://copernix.io/#?where={value:noEndcoding},4&?query=&?map_type=hybrid | |
| FIRMS - NASA Fire Map | gps-coordinates | https://firms.modaps.eosdis.nasa.gov/map/#d:24hrs;@{value:noEndcoding},4.0z | |
| Ventusky - Weather History Map | gps-coordinates | https://www.ventusky.com/?p={value:noEndcoding};1800&l=temperature-2m |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| True People Search | email-address | https://www.truepeoplesearch.com/resultemail?email={value} | |
| ThatsThem | email-address | https://thatsthem.com/email/{value} | |
| WHOISFreaks - WHOIS History Search | email-address | WHOIS History email search | https://whoisfreaks.com/tools/whois/reverse/search/email/{value}?includes=all |
| MailMeteor - Email Validation | email-address | Email address validation | https://mailmeteor.com/email-checker?email={value} |
| Serif.ai - Email Variations Generator | email-address | When searching for email information in data leaks and other sources, keep in mind that people often use email variants with extra dots to register multiple accounts to a single address. Look for different variants. | https://www.serif.ai/tools/gmail-generator?email={value} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| Instant Username | alias | https://instantusername.com/?q={value} | |
| NameCheck - Domain Names Search | alias | https://namechk.com/namechk-plugin-search-results/?n={value} | |
| NameVine - Domain Names Search | alias | https://namevine.com/#/{value} | |
| Telegago Telegram CSE | alias | https://cse.google.com/cse?q=+&cx=006368593537057042503:efxu7xprihg#gsc.tab=0&gsc.q=%20{value}&gsc.sort=date%22 |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| TruePeopleSearch | phone | https://www.truepeoplesearch.com/results?phoneno={value} | |
| USA White Pages Mentions | phone | https://www.whitepages.com/phone/{value} | |
| 🔑 TrueCaller - People Search | phone | https://www.truecaller.com/search/us/{value} | |
| CyberBackgroundChecks - People Search | phone | https://www.cyberbackgroundchecks.com/phone/{value} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| Badoo Wayback Collection - Mentions Search | name | https://web.archive.org/collection-search/{value:firstName}/ | |
| Tinder Profile | alias | https://www.tinder.com/@{value} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| Google CV Search | name | https://www.google.com/search?q=%22{value:firstName}+{value:lastName}%22+AND+%28%22Resume%22+OR+%22Curriculum+Vitae%22+OR+%22CV%22%29 | |
| Indeed CV Search | name | https://resumes.indeed.com/search?q={value:firstName}+{value:lastName} | |
| Linkedin People Search | name | https://www.linkedin.com/search/results/all/?keywords={value:firstName}%20{value:lastName} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| Archive.org TV news - Search TV Captions since 2009 | name | https://archive.org/details/tv?q={value} | |
| American Archive of Public Broadcasting Search | name | https://americanarchive.org/catalog?q={value} | |
| Television Vanderbilt News Archive - News since 1968 | name | Be patient, loading results may be slow | https://tvnews.vanderbilt.edu/search?query={value} |
| BBC Archive Search | name | https://www.bbc.co.uk/search?q={value} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| Library of congress - archive Search | name, alias, domain | https://www.loc.gov/search/?new=true&q={value} | |
| Google Newspapers Search | name, alias, domain | https://www.google.com/search?q={value}&tbm=bks&tbs=bkt:s&source=newspapers | |
| Newspapers.com - Archive Search | name, alias, domain | 🔑 Archive search | https://www.newspapers.com/results/?keyword={value}&locale=en-US |
| Newspaper Archive - search since 1700 | name | https://newspaperarchive.com/tags/?pf={value:firstName}&pl={value:lastName}/ | |
| United Kingdom national Archive Search | name | https://www.nationalarchives.gov.uk/search/results?_q={value} | |
| The British Newspaper Archive Search | name | https://www.britishnewspaperarchive.co.uk/search/results?basicsearch={value} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| BaseSearch | name,doi | https://www.base-search.net/Search/Results?lookfor={value} | |
| Google Scholar Search | name,doi | https://scholar.google.com/scholar?q={value} | |
| CrossRef Search | doi | https://search.crossref.org/search/works?q={value}&from_ui=yes | |
| ResearchGate | doi | https://www.researchgate.net/search/publication?q={value} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| Wayback Machine Main Page Snapshots | domain,url | https://web.archive.org/web/20250000000000*/{value} | |
| Pagecached - Cached/Archived Pages in Different Services | url,domain | https://pagecached.com/?url={value} | |
| Webcitation Archive Snapshots | domain, url | https://www.webcitation.org/query?url={value} | |
| Archive.is Snapshots | domain, url | http://archive.is/newest/{value} | |
| Arquivo.pt Snapshots | domain, url | http://archive.wikiwix.com/cache/index2.php?url={value} | |
| Archive-it.org Mentions | domain, url | https://archive-it.org/explore?q={value} | |
| Troove Snapshots | domain, url | https://trove.nla.gov.au/search/category/websites?keyword={value} | |
| Stanford Web Archive Snapshot | domain, url | https://swap.stanford.edu/was/*/{value} | |
| Ghost Archive | domain | https://ghostarchive.org/search?term={value} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| Google Search | alias, name, domain, crypto-address | https://www.google.com/search?q={value} | |
| Yandex Search | alias, name, domain, crypto-address | https://yandex.ru/search/?text={value} | |
| Bing Search | alias, name, domain, crypto-address | https://www.bing.com/search?q={value} | |
| Wikipedia Search | alias, name, domain | https://wikipedia.org/w/index.php?search={value} | |
| Marginalia Search | alias, name, domain | Search blogs, plain text files, wikis, forums and other "no standard" sources | https://marginalia-search.com/search?query={value} |
| Wolfram Alpha | alias, name, domain, ip-address | https://www.wolframalpha.com/input?i={value} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| FilePursuit - Open Directories Search | alias,name | Open directories search engine | https://filepursuit.com/pursuit?q={value}&type=all |
| ODCrawler - Open Directories Search | alias,name | Open directories search engine | https://odcrawler.xyz/search/{value} |
| EyeDex - Open Directories Search | alias,name | Open directories search engine | https://www.eyedex.org/search/?q={value} |
| BTDIG - Torrents Search | alias,name | BitTorrent search engine | https://btdig.com/search?order=0&q={value} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| Filmot - YouTube 1.3B+ subtitles search | alias, name | https://filmot.com/search/{value}/1?gridView=1 | |
| YouTube Search | name,alias,domain, hashtag | https://www.youtube.com/results?search_query={value} | |
| Vimeo Search | name,alias,domain, hashtag | https://vimeo.com/search?q={value} | |
| DailyMotion Search | name,alias,domain, hashtag | https://www.dailymotion.com/search/{value}/top-results | |
| Rumble Search | name,alias,domain,hashtag | https://rumble.com/search/all?q={value} | |
| Playeur Search | name,alias,domain,hashtag | https://playeur.com/search?q={value} | |
| TikTok Search | name,alias,domain, hashtag | https://www.tiktok.com/search/user?lang=en&q={value} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| Twitch Search | name,alias,domain, hashtag | https://www.twitch.tv/search?term={value} | |
| Kick Search | name,alias,domain, hashtag | https://kick.com/search?query={value} | |
| Trovo Search | name,alias,domain, hashtag | https://trovo.live/search?q={value} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| ViaLibri - Search for ADS for Old Books for Sale | isbn-number | https://www.vialibri.net/searches?all_text={value} | |
| Open Liblary - Books Search | name, alias | archive.org books search | https://openlibrary.org/search?q={value}&mode=everything |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| Flickr Search | name, alias, hashtag | https://www.flickr.com/search/?text={value} | |
| DepositPhotos Search | name, alias, hashtag | https://depositphotos.com/photos/{value}.html?filter=all | |
| ShutterStock Search | name, alias, hashtag | https://www.shutterstock.com/search/{value} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| SoundCloud Search | name, alias, hashtag | https://soundcloud.com/search?q={value} | |
| Spotify Search | name, alias, hashtag | https://open.spotify.com/search/{value} | |
| Deezer Search | name, alias, hashtag | https://www.deezer.com/search/{value} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| Seositechekup - Traffic Analyze | domain | https://seositecheckup.com/seo-audit/{value} | |
| ZoomEye - Domain Lookup | domain | https://www.zoomeye.org/searchResult?q={value} | |
| WHOIS - Domain Lookup | domain | https://www.whois.com/whois/{value} | |
| ReverseWhois.op - Domain Lookup | domain | https://www.reversewhois.io/?searchterm={value} | |
| GreyNoise - Domain Lookup | domain | https://www.greynoise.io/viz/ip/{value} | |
| Domaintools - Whois Lookup | domain | https://whois.domaintools.com/{value} | |
| ViewDNS - Reverse WHOIS Search | domain | https://viewdns.info/reversewhois/?q={value} | |
| DNSLytics - Domain Lookup | domain | https://dnslytics.com/ip/{value} | |
| Domain Digger - Domain Lookup | domain | https://digger.tools/lookup/nytimes.com{value} | |
| URL Hause - Check malicious URLs Database | domain,url | Check malicious URLs database | https://urlhaus.abuse.ch/browse.php?search={value} |
| Email Format Discovery Google CSE | domain | https://cse.google.com/cse?cx=f7b8419d790c84f19&q=%22{value}%22 | |
| BigDomainData - Domain Lookup | domain | https://www.bigdomaindata.com/whois/{value} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| UNFURL - URL Paramaters Analysis | url | https:// dfir.blog /unfurl/?url={value} | |
| Carbon Dating - Webpage Creation Date | url | https://carbondate.cs.odu.edu/#{value} |
| Name | Data types | Additional notes | Enrichment |
|---|---|---|---|
| Decrypt Tools - MD5 Decryption | hash | https://decrypt.tools/client-server/decrypt?type=md5&{value} | |
| Decrypt Tools - Sha1 Decryption | hash | https://decrypt.tools/client-server/decrypt?type=sha1&string={value} |
We plan to add more advanced enrichments in the near future.
Don't miss our updates! Linkedin YouTube
Enrichments that can be found in Ubikron by default, right after installation.
Click "Reset to deafault" to undo all changes you have made to enrichments (including deleting added ones).