fatcousin
// case comparison

sextortion vs cyberstalking

both involve targeted harassment — but sextortion is payment demand tied to intimate imagery; cyberstalking is broader multi-platform surveillance and impersonation.

primary tools · side by side

ordered entry points from the case-type taxonomy. highlighted rows appear in both case types' editorial tool lists.

case a

sextortion

extortion via real/fake intimate imagery. evidence is the threat channel + payment demand + (often) deepfake or scraped imagery.

  1. 01email header analyzerpaste raw email headers · trace hop-by-hop routing · SPF · DKIM · DMARC · detect spoofing · visualize delivery path · runs locally
  2. 02ios imessage deletion artifact detectordrop ios sms.db · rowid gaps · join orphans · deleted_messages tombstones · ck_sync_state=2 · two-db guid compare · bulk deletion · runs locally
  3. 03iOS WhatsApp artifact forensic extractordrop iOS WhatsApp ChatStorage.sqlite and Contacts.sqlite · parse all chats, messages, groups, and media references · reconstruct conversation timelines with delivery status · surface location shares, contact cards, and deleted message placeholders · runs locally
  4. 04android whatsapp database forensic analyzerdrop an Android WhatsApp msgstore.db · parse all messages, chats, groups, and media metadata · reconstruct conversation timelines · surface message delivery status, forwarding metadata, location shares, and contact cards · detect deleted message gaps · runs locally
  5. 05ai generated image provenance analyzerpng tEXt chunk inventory · sd metadata · stripped metadata flag · provenance csv · runs locally
  6. 06face swap artifact detectordrop an image · jawline color mismatch · compression boundary heuristics · face-region signal table · runs locally
  7. 07bitcoin transaction decoderpaste raw transaction hex · decode inputs outputs scripts · fees · locktime · segwit · p2pkh p2sh p2wpkh · runs locally
  8. 08crypto tx graphpaste json csv btc hex · directed graph · hub peel fan patterns · ascii viz · stats · csv json export · runs locally
case b

cyberstalking

broader than stalkerware-app: social-graph harassment, doxing, multi-account impersonation, location-leak surfaces.

  1. 01ai chatbot multi-account correlation analyzercorrelate AI chatbot accounts, sessions, and devices across platforms · detect multi-account usage, shared devices, account switching · runs locally
  2. 02multi-source entity resolverdrop forensic csvs · resolve names emails usernames ips across sources · probabilistic entity profiles · runs locally
  3. 03investigation knowledge graph builderdrop forensic csv exports · extract entities and relationships · knowledge graph visualization · hub and path analysis · runs locally
  4. 04osint normalizerpaste osint dump · extract emails phones ips crypto handles · disposable tor private heuristics · e.164 · five tabs · per-category csv · runs locally
  5. 05natural language writing sample authorship comparatordrop multiple text files or paste writing samples · compute 40 plus stylometric features · sentence length distribution · vocabulary richness · function word frequencies · punctuation patterns · produce similarity score with confidence intervals between samples · runs locally
  6. 06ios significant locations forensic extractordrop routined Cache.sqlite · parse significant places visits · home work inference · visit timeline · runs locally
  7. 07android google timeline artifact forensic extractordrop Google Timeline JSON, Takeout location history files, semantic location history exports, or Maps activity artifacts · parse places, visits, activity segments, coordinates, confidence values, and edit metadata · reconstruct Google-derived movement history · runs locally
  8. 08domain reputation analyzerpaste domains or IPs · score by entropy · TLD risk · homoglyph detection · DGA patterns · punycode abuse · age heuristics · no external lookup · runs locally

editorial overlap

5 tools mapped to both case types in the editorial taxonomy — useful when the investigation spans both surfaces.
case report generatordomain reputation analyzerfatcousin cross export ioc hash correlatorfatcousin multi tool super timeline correlatorurl redirect chain tracer

lean toward…

disambiguation signals derived from case-type descriptions and common practitioner confusion points.

lean toward sextortion if you see…

  • explicit payment demand (crypto, gift cards, wire) tied to threat of releasing intimate imagery
  • deepfake or scraped intimate imagery with a dedicated extortion channel — not general doxing
  • victim contacted on a single platform with a clear pay-or-publish ultimatum

lean toward cyberstalking if you see…

  • multi-account impersonation or doxing across social platforms without a payment ultimatum
  • location leaks via public posts, OSINT, or social-graph mapping — not intimate-image extortion
  • sustained harassment and authorship patterns spanning accounts with no coercive payment demand
ready