What the work looks like
You start from one thing: a scam website, a phone number, a crypto wallet or a fake recruiter's profile. From there you check the domain's registration history, its hosting, certificates, page source and tracking IDs, reused images, and any job ads or social accounts tied to it. You log every lookup, including the ones that went nowhere. The result is a report that maps the operation as far as public sources allow.
What you’ll do
- Pivot from one scam artefact outward through open sources
- Map the infrastructure, assets and personas behind it
- Record dead-end pivots so they are not repeated
- Hand anything that corroborates other cases to the Longview team
- Write the full report
- Spend about 20–30 minutes a day reviewing incoming reports with the rest of the team, and flag promising leads to your team lead.
What you’ll bring
- Familiarity with OSINT techniques: WHOIS and DNS, certificate search, reverse image search
- Methodical note-taking
- Good judgement about privacy and what not to publish
What you’ll get
- Published work with your name on it
- Hands-on time with real investigation tooling and data
- A path to running your own investigations