Skip to Content
OSINTDarknet Market & OSINT Correlation

Darknet Market & OSINT Correlation

tactic

Core idea

Cross-references on-chain clusters with open-source intelligence, forum posts, vendor listings, or leaked databases, to tie an address to a darknet-marketplace persona.

When to use

Investigating narcotics, stolen-data, or contraband sales where the suspect uses a pseudonymous marketplace identity.

Avoid when

OSINT sourcing must be lawfully obtained and documented, and the authenticity of forum data may need further corroboration.

Example

A vendor’s reused withdrawal address posted in a forum signature links their darknet persona to an on-chain cluster.

Address Clustering (Common-Input-Ownership Heuristic)

Last updated on