fatcousin
// case comparison

online doxxing vs cyberstalking

both surface PII and harassment — but doxxing is post-event triage after publication; cyberstalking is ongoing multi-platform surveillance and impersonation.

primary tools · side by side

ordered entry points from the case-type taxonomy. highlighted rows appear in both case types' editorial tool lists.

case a

online doxxing (post-event triage)

PII already published — paste sites, social posts, republish chains. post-event triage: scope exposure, trace author + platform, preserve for takedown and safety planning.

  1. 01doxxing victim investigation kitdrop social posts + pii exposure logs + threat messages · build victim safety report · runs locally
  2. 02osint normalizerpaste osint dump · extract emails phones ips crypto handles · disposable tor private heuristics · e.164 · five tabs · per-category csv · runs locally
  3. 03multi-source entity resolverdrop forensic csvs · resolve names emails usernames ips across sources · probabilistic entity profiles · runs locally
  4. 04investigation knowledge graph builderdrop forensic csv exports · extract entities and relationships · knowledge graph visualization · hub and path analysis · runs locally
  5. 05domain reputation analyzerpaste domains or IPs · score by entropy · TLD risk · homoglyph detection · DGA patterns · punycode abuse · age heuristics · no external lookup · runs locally
  6. 06ioc extractordrop any file or paste text · extract indicators of compromise · ips · domains · urls · hashes · emails · cves · export stix · csv · runs locally
  7. 07url redirect chain tracerpaste shortened URLs · trace full redirect chain via proxy · detect malicious redirects · show final destination · flag suspicious hops · runs locally
  8. 08ai chatbot multi-account correlation analyzercorrelate AI chatbot accounts, sessions, and devices across platforms · detect multi-account usage, shared devices, account switching · runs locally
case b

cyberstalking

broader than stalkerware-app: social-graph harassment, doxing, multi-account impersonation, location-leak surfaces.

  1. 01ai chatbot multi-account correlation analyzercorrelate AI chatbot accounts, sessions, and devices across platforms · detect multi-account usage, shared devices, account switching · runs locally
  2. 02multi-source entity resolverdrop forensic csvs · resolve names emails usernames ips across sources · probabilistic entity profiles · runs locally
  3. 03investigation knowledge graph builderdrop forensic csv exports · extract entities and relationships · knowledge graph visualization · hub and path analysis · runs locally
  4. 04osint normalizerpaste osint dump · extract emails phones ips crypto handles · disposable tor private heuristics · e.164 · five tabs · per-category csv · runs locally
  5. 05natural language writing sample authorship comparatordrop multiple text files or paste writing samples · compute 40 plus stylometric features · sentence length distribution · vocabulary richness · function word frequencies · punctuation patterns · produce similarity score with confidence intervals between samples · runs locally
  6. 06ios significant locations forensic extractordrop routined Cache.sqlite · parse significant places visits · home work inference · visit timeline · runs locally
  7. 07android google timeline artifact forensic extractordrop Google Timeline JSON, Takeout location history files, semantic location history exports, or Maps activity artifacts · parse places, visits, activity segments, coordinates, confidence values, and edit metadata · reconstruct Google-derived movement history · runs locally
  8. 08domain reputation analyzerpaste domains or IPs · score by entropy · TLD risk · homoglyph detection · DGA patterns · punycode abuse · age heuristics · no external lookup · runs locally

editorial overlap

12 tools mapped to both case types in the editorial taxonomy — useful when the investigation spans both surfaces.
ai chatbot multi-account correlation analyzercase report generatordomain reputation analyzeremail impersonation pattern detectorfatcousin cross export ioc hash correlatorfatcousin multi tool super timeline correlatorinvestigation knowledge graph buildermulti-source entity resolveronline defamation harassment litigation kitosint normalizerurl redirect chain tracernatural language writing sample authorship comparator

lean toward…

disambiguation signals derived from case-type descriptions and common practitioner confusion points.

lean toward online doxxing if you see…

  • PII already published on paste sites, republish chains, or indexed social posts — triage is post-exposure
  • single dump or coordinated republish event — scope what's exposed, trace author, preserve for takedown
  • exposure inventory (address, phone, employer) without a sustained multi-account harassment timeline

lean toward cyberstalking if you see…

  • weeks-to-months of multi-account impersonation or harassment across dating, social, and email
  • authorship and entity-correlation patterns spanning accounts — not a one-shot PII dump
  • location or contact leaks via ongoing surveillance and OSINT — not post-event paste-site triage alone
ready