🕵️‍♂️ Legendary Crypto x OSINT & Blockchain Investigation Resources

A curated one-pager of blockchain explorers, OSINT tools, APIs, compliance resources, abuse databases, and investigation workflows. For CTI, AML, and forensic investigations.
These come various open source startpages, LinkedIn posts, the legendary (Stay Sharp Legends) Rick Harmsen, myself and more.

📑 Table of Contents

• Blockchain Explorers
• OSINT & Visualization Tools
• Abuse & Scam Databases
• APIs & Data Sources
• Compliance, Risk & AML
• Learning Resources
• Certifications
• Specialized Analytic Services
• Exchanges & Wallets
• Investigation Workflows
• NFT Resources

---

🔗 Blockchain Explorers

• Bitcoin:
  Blockchain.com · Blockstream.info · BTCScan · WalletExplorer · Mempool.space · Blockcypher · HASHXP · Bitcoin Paths · Blockonomics · BTC.com · btc.cryptoid.info · btcsniffer.com · explorer.bitcoin.com · explorer.b.tc · 3xpl · Crystal Blockchain Explorer · CoinCodex · Awebanalysis · TRM · Lampyre · Bitquery.io · CipherTrace · Coinfirm · Whale Alert · BTCparser · Arkham Intelligence · MetaSleuth · SpyderLab

• Ethereum:
  Etherscan · EthVM · Beaconcha.in · Ethtective · MyEtherWallet Explorer · Optimistic Etherscan · Blockscout · Ethplorer · TrackEnn · Ward Graph · Socketscan

• Other Chains:
  Arbiscan (Arbitrum) · PolygonScan · SnowTrace (Avalanche) · FTMScan (Fantom) · Cardanoscan · AdaStat · AlgoExplorer · NearBlocks · Mintscan (Cosmos) · TzStats (Tezos) · TzKT (Tezos) · Solscan · TronScan · XRPSCAN · BlockCypher LTC · XMRChain · moneroblocks.info · xmrhunter.com · SoChain

• Lightning Network:
  Amboss · 1ML

• Multi-chain:
  Blockchair · Tokenview

• Network Statistics:
  Bitnodes · Coin.Dance

• Layer 2:
  Optimistic Etherscan (Optimism) · Basescan (Base) · zkSync Explorer · Starkscan (Starknet) · LineaScan (Linea) · Scroll Explorer (Scroll)

• Privacy Coins:
  Zchain (Zcash) · Blockchair ZEC · Dash Insight · Blockchair DASH · Horizen Explorer

---

🔬 OSINT & Visualization Tools

• Tracing & Graphing:
  Breadcrumbs · Blockpath · GraphSense · Orbit (OS) · Shard · C-Hound · BlockSci · Chainflyer · GraphSense Maltego Transform · Etherscan Maltego Transforms · Onchain.industries · Cielo

• Clustering & Analysis:
  WalletExplorer · BitInfoCharts · KYCP · Bitcoin Who’s Who

• Forensics Platforms:
  Maltego + CipherTrace · Spiderfoot · SICP (RU)

• Wallet & Key Recovery / Quick Checks:
  BTCrecover · BitRef

---

🛡 Abuse & Scam Databases

• Blacklists:
  BitcoinWho’sWho · CheckBitcoinAddress · Scorechain Explorer · CryptoBlacklist

• Scam Trackers:
  Scam-Alert · BadBitcoin · Bitcoinais · Cryptscam · CryptoScamDB · ScamCrypto.net · IsScamToken · ScamSearch

• Community Intel:
  Chainabuse · Ransomwhere · RansomWatch · Know Your Coin Privacy · SPLC Addresslist · Vivigle

• Phishing:
  PhishTank · OpenPhish

---

📊 APIs & Data Sources

• Blockchain Data:
  CryptoAPIs · Bitquery GraphQL · Blockchair API · BTC.com API · Etherscan API · SoChain API

• Abuse/Scam APIs:
  BitcoinAbuse API · BitcoinWho’sWho API

• Market & Metrics:
  0x · 1inch · Alchemy Ethereum · apilayer coinlayer · Binance · Bitcambio · BitcoinAverage · BitcoinCharts · Bitfinex · Bitmex · Bittrex · Block · Blockchain · blockfrost Cardano · BraveNewCoin · BtcTurk · Bybit · CoinAPI · Coinbase · Coinbase Pro · CoinCap · CoinDCX · CoinDesk · CoinGecko · Coinigy · Coinlib · Coinlore · CoinMarketCap · CoinMetrics · Coinpaprika · CoinRanking · Coinremitter · CoinStats · CoinLayer · CryptAPI · CryptoCompare · CryptoMarket · CryptingUp · Cryptonator · dYdX · Ethplorer · EXMO · FTX · Gateio · Gemini · Hirak Exchange Rates · Huobi · icy.tools · Indodax · INFURA Ethereum · Kraken · KuCoin · Localbitcoins · Mempool · MercadoBitcoin · Messari · Nexchange · Nomics · NovaDax · OKEx · Poloniex · Solana JSON RPC · Technical Analysis · VALR · WorldCoinIndex · ZMOK

• Enrichment Tools:
  IntelligenceX · ENS Domain Checker · Hudson Rock Cybercrime Intelligence Tools

• Threat Intel:
  Abuse.ch Crypto Lists · PhishStats

• NFT & Web3 Analytics:
  Nansen · Dune

---

🛡 Compliance, Risk & AML

• Chainalysis · Elliptic · TRM Labs Blog
• Coinfirm · CipherTrace · Crystal Blockchain
• AMLBot · Scorechain · Merkle Science · AnChain.AI

---

📚 Learning Resources

• Courses & Reports:
  MIT Crypto Course · Chainalysis Crypto Crime Reports

• DataExpert Courses:
  DataExpert Cryptocurrency Investigations · DataExpert Ethereum Basics · DataExpert Ethereum Advanced · DataExpert Cryptocurrency Investigations Expert

• DataExpert-led TRM Courses:
  TRM Labs Crypto Fundamentals · TRM Advanced Crypto Investigator · TRM Crypto Compliance Specialist · TRM Certified Crypto Investigator

• DataExpert-led Chainalysis Courses:
  Visit DataExpert's website for more information!

• Guides & Blogs:
  CipherTrace 101 · Elliptic Casebook · OXT Articles
  Lampyre Bitcoin Forensics

• Special Topics:
  Privacy Coins 101 · Bitcoin Tracking for Law Enforcement
  Decoding Lightning Payment Requests

• Books:
  Mastering Bitcoin (Antonopoulos) · Cryptoassets: The Innovative Investor's Guide (Chris Burniske & Jack Tatar) · The Basics of Bitcoins and Blockchains (Antony Lewis)

• Research & Standards:
  NIST Blockchain Forensics · European Union Blockchain Observatory Reports

---

🎓 Certifications

• CCE – Certified Cryptocurrency Expert
• CCA – Certified Cryptocurrency Auditor
• CCFI – McAfee Institute
• CCI – Certified Crypto Investigator
• CTCE – CipherTrace Examiner
• ACAMS Virtual Currency Certificate
• Cellebrite CCIT
• Chainalysis Certifications (CCFC, CISC, Reactor)
• CCSSA – CryptoCurrency Security Standard Auditor
• ACFE Crypto Investigations Training
• NIST/NICE Aligned Certifications

---

💼 Specialized Analytic Services

• Crystal Blockchain · CipherTrace · Chainalysis
• Elliptic · Coinfirm · AMLBot
• Scorechain · Merkle Science

---

💱 Exchanges & Wallets

• Exchanges: Coinbase · Kraken · Binance US · Crypto.com · Gemini · Bitstamp · Poloniex · HitBTC · BitMEX · LocalBitcoins · Paxful

• Wallets: Electrum · Trezor · MetaMask · Samourai Wallet · Wasabi Wallet · ZenGo · Venly · Blockchain.com Wallet · MyEtherWallet

• Mixers / Tumblers (OSINT-relevant targets): Wasabi Whirlpool · ChipMixer

---

🧵 Investigation Workflows

Bitcoin Address

1. Check Blockstream.info for TX history.
2. Cluster on WalletExplorer.
3. Cross-check with BitcoinAbuse & CheckBitcoinAddress.
4. Visualize in Breadcrumbs or GraphSense.

Ethereum Address

1. Lookup on Etherscan.
2. Verify on Ethtective.
3. Trace ERC-20 activity via Tokenview.
4. Visualize in Breadcrumbs.

ENS (.eth) Domain

1. Look up the domain on ENS Domains.
2. Identify the linked Ethereum 0x address at the top.
3. Check if the ENS name appears in transaction history on Etherscan.
4. Cross-check connected accounts (e.g., Lens Protocol, social links, GitHub, Twitter).
5. Review NFT activity on OpenSea, LooksRare, or other NFT marketplaces.
6. Expand to other chains/platforms using the same ENS name (multi-chain investigation).
7. Visualize relationships with tools like Breadcrumbs or GraphSense.

Scam/Abuse Check

• Query across Chainabuse, and BadBitcoin.

Lightning Network Payment Check

1. Decode invoice with Lightning Decoder.
2. Map channels with Amboss.
3. Cross-check node IDs against OSINT sources (GitHub, Twitter, Reddit).

NFT Wallet Profiling

1. Review activity on Dune & Nansen.
2. Check NFT metadata for IPFS/Arweave links (OSINT expansion).