safety — before you run anything

cyberstalking cases often sit inside domestic violence, workplace retaliation, or post-breakup escalation. if you are supporting someone being targeted, start with safety planning and advocate intake — then return here for technical proof on synthetic reference data only.

  • US suicide & crisis lifeline: 988
  • US national DV hotline: 1-800-799-7233
  • victim safety comes before attribution — preserve evidence only when the survivor agrees and an advocate says it is safe.
  • preserve without confronting. exporting AI chat logs, screenshotting posts, or requesting platform data can notify the stalker via login alerts or shared accounts.
  • work on workstations and accounts the stalker does not control — if the victim must keep a compromised Google or iCloud login, assume timeline edits and login history are visible to the abuser.
// reference investigation

ellis-cyberstalking — multi-platform harassment and doxing

Elena Ellis cyberstalked via linked ChatGPT/Claude burner accounts, cross-platform entity resolution, authorship match on forum posts, iOS Significant Locations + Google Timeline edits, and lookalike domains. Fully synthetic.

what this proves

  • all eight cyberstalking primary engines produce deterministic, fixture-locked output — verified by npm run check:flagship (280/280 fleet · 8 for this scenario).
  • every output is generated 100% locally in your browser — chat exports, forum CSVs, and location artifacts never upload.
  • shared burner email across ChatGPT and Claude exports, entity clusters, authorship match on forum posts, iOS Routined gym routine, google timeline edits, and lookalike domains like m1crosoft-login.tk surface without sending evidence to a server.

primary engines locked to this fixture

build the case binder

runs all eight primary engines on the synthetic evidence zip and opens a self-contained html binder. uses the default binder renderer for cyberstalking — no upload.

runs all 8 primary engines locally on the synthetic evidence zip · opens a self-contained html binder · no upload

download the synthetic evidence

MIT-licensed, fully synthetic. includes ChatGPT and Claude harassment exports, reddit and forum CSVs, OSINT scrape, writing samples, stalker activity log, iOS Cache.sqlite, google timeline semantic json + edits export, and lookalike domain list.

built deterministically from scripts/fixtures/build-ellis-cyberstalking.mjs. seed: ellis-cyberstalking:v1.

methodology

cyberstalking is multi-platform — export AI chat logs first for the shared burner email, then walk entity resolver → knowledge graph → OSINT normalizer → authorship match → iOS significant locations → google timeline edits → domain reputation for lookalikes. read the full cyberstalking guide →

after the playbook

run each primary locally — or export findings from the binder — then drop every csv/json into fatcousin-multi-tool-super-timeline-correlator. one timestamp-sorted timeline across AI chat exports, entity graph pivots, OSINT scrapes, location edits, and lookalike domain hits — still zero upload.

synthetic scenario only · no real victim · no real dox · grading rubric

ready