🔍 OSINTNova 2026 – WIC Investigation Report
Date: 2026-07-11
Status: Concluded — Observation Period Ongoing
Classification: Public Intelligence
Prepared by: WinterGate Intelligence Collective (WIC)
⚠️ COMMUNITY WARNING
OSINTNova sells access to your personal data without your consent.
OSINTNova is a commercial OSINT platform offering "PRO" services that allow users to look up:
- People by name
- Phone numbers with country codes
- Vehicle information (VIN/license plate)
- Discord IDs
- Social media profiles (Instagram, Facebook, YouTube, Steam)
- Breach data and dark web intelligence
- Financial and crypto wallet information
- Behavioral profiling via "Oracle"
WARNING: Purchasing from this platform may expose your own information to criminal actors.
THIS IS NOT OSINT. THIS IS A DATA BROKER OPERATING WITHOUT CONSENT.
Executive Summary
OSINTNova (app.osintnova.com) is a commercial OSINT platform offering intelligence-gathering tools. A direct copycat, LittleNuan, has appeared on BuiltByBit, branding itself as a "cheaper version of OSINTNova."
Key Finding: OSINTNova aggregates and sells access to Personally Identifiable Information (PII) through its "PRO" tier, with no visible privacy policy, terms of service, or consent mechanisms.
Status: Concluded | Risk Level: HIGH (Legal violations identified)
Platform Overview – High Risk Services
People Intelligence: Direct PII sales without consent
Phone Intelligence: Federal crime (18 U.S.C. § 1039)
Breach Intelligence: Potentially trafficking stolen data
Vehicle Intelligence: Location tracking without consent
Discord Intelligence: ToS violation + PII scraping
Oracle: Algorithmic behavioral profiling
DorkGPT: Automated exposure of sensitive data
Dark Web Intelligence: Commercializing illicit data access
Crypto Wallet Analysis: Financial surveillance
WhoAmI: Comprehensive PII aggregation
LittleNuan – The Copycat
Listed on BuiltByBit (May 3, 2026). Price: $47.88 (one-time). 0 purchases, 1 download. Explicitly says: "cheaper version of OSINTNova." Likely scam or same service rebranded. No evidence of functional platform or active user base.
Alarming Questions That Must Be Asked
- Is LittleNuan the same service under a different name?
- Where does OSINTNova source its data? (Discord data is scraped, phone records are illegal)
- Are users unknowingly breaking the law? (CFAA, 18 U.S.C. § 1039, CCPA)
- Why no privacy policy, ToS, or consent mechanisms?
- Who is behind OSINTNova? (Young domain, anonymous, low trust score)
- Is it an unregistered data broker?
- What happens to data users submit?
Legal Violations (Summary)
18 U.S.C. § 1039 – Selling confidential phone records (FEDERAL CRIME)
CCPA/CPRA – Sale of PII without consent or opt-out
CFAA (18 U.S.C. § 1030) – Unauthorized scraping of social media platforms
FTC Act § 5 – Unfair or deceptive trade practices
California Civil Code § 1724 – Unlawful sale of data obtained via crime
Platform ToS – Discord, Meta, Google, Steam scraping violations
GDPR – Processing EU citizen data without compliance
Regulatory Exposure:
- Federal Trade Commission (FTC) action possible
- State Attorney General investigations
- Department of Justice (DOJ) criminal exposure
- Civil lawsuits from affected individuals
- Platform enforcement actions
Red Flags Summary
- PII sales without consent
- Phone record sales (federal crime)
- Breach data commercialization
- No privacy policy or ToS
- No opt-out mechanisms
- No data source disclosure
- Social media scraping (ToS violations)
- Algorithmic doxing
- Dark web data access
- Defensive/hostile response to questions
- Unregistered data broker
- Copycat product exists
- No ownership disclosure
- Young domain
Associated User Investigation
A user named Goofisded (guns.lol/goofisded, GitHub: Goofisded) was observed holding root and sudo roles in OSINTNova's Discord server, being defensive, dismissive, and hostile when questioned about the platform's legality, and timing out an investigator who asked legitimate legal questions.
Assessment: Likely staff or close affiliate. Defensive behavior indicates awareness of legal exposure and inability to defend the platform.
The Bigger Picture
OSINTNova Is Not a Legitimate OSINT Tool — It's a Data Broker. Legitimate OSINT tools help investigators find publicly available information. OSINTNova sells access to private phone records, scraped Discord data, breach data, and behavioral profiles. This is not OSINT. This is commercialized surveillance.
The Community Is at Risk. OSINT practitioners who use this platform may be violating platform ToS, breaking federal and state laws, exposing themselves to legal liability, and funding the commercialization of stolen data.
The Pattern Is Clear: Create a platform that looks like an OSINT tool, aggregate PII from questionable sources, sell access to that data, offer no transparency or consent, and act defensive and hostile when questioned.
What's Not Being Said
- Is OSINTNova the same as LittleNuan? If yes, they're operating under multiple names to evade scrutiny.
- Where does the data come from? If it's from breaches, it's stolen. If it's scraped, it's ToS violations.
- Who owns the platform? Anonymous ownership makes accountability impossible.
- Is this legal? Multiple federal and state laws suggest it is not.
- Why is there no privacy policy? Because they don't want to disclose what they're doing.
- Why are they defensive when questioned? Because they know they're operating in a gray area.
Recommendations
For Community Members:
- DO NOT use OSINTNova for OSINT work
- DO NOT enter personal or client information
- DO NOT purchase services from the platform
- REPORT suspicious activity to the FTC or state Attorney General
- CHANGE any passwords or credentials shared with the platform
For Regulators and Investigators:
- Review the platform's service offerings
- Verify the lack of privacy policy, ToS, and consent mechanisms
- Investigate potential violations of CCPA, CFAA, and 18 U.S.C. § 1039
- Consider enforcement action
- Warn the public
Resources
Platform: https://app.osintnova.com
LittleNuan: https://builtbybit.com/resources/littlenuan.105653/
ScamAdviser: https://www.scamadviser.com/check-website/osint.nova-saas.com
Associated User: https://guns.lol/goofisded
FTC Report: https://reportfraud.ftc.gov
California AG: https://oag.ca.gov/contact/consumer-complaint-against-business-or-company
DOJ: https://www.justice.gov
Status: Concluded | Evidence: Complete | Community Notified: Yes
██████╗ ███████╗██╗███╗ ██╗████████╗███╗ ██╗ ██████╗ ██╗ ██╗ █████╗
██╔═══██╗██╔════╝██║████╗ ██║╚══██╔══╝████╗ ██║██╔═══██╗██║ ██║██╔══██╗
██║ ██║███████╗██║██╔██╗ ██║ ██║ ██╔██╗ ██║██║ ██║██║ ██║███████║
██║ ██║╚════██║██║██║╚██╗██║ ██║ ██║╚██╗██║██║ ██║╚██╗ ██╔╝██╔══██║
╚██████╔╝███████║██║██║ ╚████║ ██║ ██║ ╚████║╚██████╔╝ ╚████╔╝ ██║ ██║
╚═════╝ ╚══════╝╚═╝╚═╝ ╚═══╝ ╚═╝ ╚═╝ ╚═══╝ ╚═════╝ ╚═══╝ ╚═╝ ╚═╝
WINTERGATEIC ❄️
#Privacy #OSINT #DataBroker #Infosec #CyberSecurity
WinterGate Intelligence Collective (WIC) is a cybersecurity research initiative focused on infrastructure abuse documentation, threat actor tracking, open vulnerability disclosure, threat intelligence, infrastructure defense, and community empowerment. All research is public. All data is free. No consulting. No private sales. No paywalls. Just evidence and defensive tools for the security community. WIC does not accept payment for disclosures. Infrastructure abusers are documented. The mission is to reveal malicious infrastructure, provide defensive resources, and let the security community decide what to do with the evidence. The account is operated and governed by AnonCatalyst, founder of WIC.
