1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Background Check Websites - How do they work ? Where do thet get all that information from

Discussion in 'BlackHat Lounge' started by PremiumServicesOne, Nov 15, 2014.

  1. PremiumServicesOne

    PremiumServicesOne Junior Member

    Joined:
    Feb 2, 2014
    Messages:
    112
    Likes Received:
    14
    Hello guys

    I had a question maybe somebody might know the answer of. These sites like Intellius and InstantCheckmate, or others how do they look up all this information from simple things like somebody's name.

    Now the real part of the question is, has anybody seen somebody selling a script (PHP) of a background check website. I would like to possibly purchase if it has been done and is up for sale.

    Will really appreceite some possible answers
     
  2. Bestindabiz

    Bestindabiz Regular Member

    Joined:
    Dec 29, 2012
    Messages:
    348
    Likes Received:
    142
    Gender:
    Male
    Occupation:
    I have many
    Location:
    United States
    Home Page:
    I would also like to get one of these.
     
  3. PremiumServicesOne

    PremiumServicesOne Junior Member

    Joined:
    Feb 2, 2014
    Messages:
    112
    Likes Received:
    14
    Guess nobody knows. Was really counting on bhw haha
     
  4. 1ksao

    1ksao Regular Member

    Joined:
    Jul 18, 2013
    Messages:
    209
    Likes Received:
    53
    Occupation:
    Full time Web Developer/SEO
    Location:
    Texas, baby.
    I'm sure CodeCanyon or another one of those PHP script sites would have something like this.
     
  5. PremiumServicesOne

    PremiumServicesOne Junior Member

    Joined:
    Feb 2, 2014
    Messages:
    112
    Likes Received:
    14
    Checked them all. They dont. Guess its a secret then
     
  6. Repulsor

    Repulsor Power Member

    Joined:
    Jun 11, 2013
    Messages:
    712
    Likes Received:
    267
    Location:
    PHP Scripting ;)
    Its not actually the script that matters, but the huge database they have built somehow. I dont know the sources, but they might be scrapping stuffs off for years to build something like this.
     
  7. concourse

    concourse BANNED BANNED

    Joined:
    Oct 28, 2014
    Messages:
    50
    Likes Received:
    10
    These companies typically aggregate their data from a mix of credit reporting agencies and publicly available sources (e.g. property records, court records or even the whitepages). Lots of it is scrapped electronically, but some of it is manually inputted. It's possible to write a script that will allow you to pull data from their databases automatically, but you'll still need an account with them and probably some sort of business or reseller account if you're pulling data in bulk.
     
    • Thanks Thanks x 1
  8. PremiumServicesOne

    PremiumServicesOne Junior Member

    Joined:
    Feb 2, 2014
    Messages:
    112
    Likes Received:
    14
    Yes this is also the same conclusion i have reached. Its more scraping then anything else. However they do have access to classified databases and they're definitely paying for that access. Will definitely dig further into this and try to create such a network
     
  9. Capo Dei Capi

    Capo Dei Capi Power Member

    Joined:
    Oct 23, 2014
    Messages:
    716
    Likes Received:
    1,546
    Home Page:
    Couldn't they also have apps that they created under a shell company to collect data on ios,android and facebook users?
     
  10. archon10

    archon10 BANNED BANNED

    Joined:
    Oct 10, 2011
    Messages:
    1,181
    Likes Received:
    1,660
    Yes, this is the answer. A long time ago, I integrated Securint API (not sure if they are even in business anymore) into a company system (none of that WP bullshit junk). They would even give you info on your neighbors if you did a lookup. It's mostly aggregated data from public records.
     
  11. concourse

    concourse BANNED BANNED

    Joined:
    Oct 28, 2014
    Messages:
    50
    Likes Received:
    10
    If you haven't already, you should probably take a look at business services offered by companies like Equifax and TransUnion which started collecting these datasets decades ago for credit reporting purposes. They've since moved into providing data for background investigations, as well as customer acquisition.

    If may I ask, what are you looking to accomplish? Are you looking to aggregate data to generate your own database, or are you looking to access data in a scalable fashion from existing databases, or maybe something else?
     
    Last edited: Nov 17, 2014
  12. concourse

    concourse BANNED BANNED

    Joined:
    Oct 28, 2014
    Messages:
    50
    Likes Received:
    10
    That's overkill unless you're the NSA and want to see what users are doing on their phones or social media accounts. For the purposes of aggregating names and associates phone numbers, addresses and what not, you're better off just purchasing existing datasets from app developers or retailers with significant user/customer databases.
     
  13. cburton81

    cburton81 Elite Member

    Joined:
    Dec 2, 2010
    Messages:
    1,722
    Likes Received:
    712
    Occupation:
    Self Employed
    Location:
    NY United States
    Home Page:
    Have you done a google search looking for this information? I'm sure theres good info out there on exactly how they do this.
     
  14. Capo Dei Capi

    Capo Dei Capi Power Member

    Joined:
    Oct 23, 2014
    Messages:
    716
    Likes Received:
    1,546
    Home Page:
    But it costs money to buy data from existing app developers, when one can have them made and make money off the apps to fund a private database on people.
     
  15. concourse

    concourse BANNED BANNED

    Joined:
    Oct 28, 2014
    Messages:
    50
    Likes Received:
    10
    But it also costs money to develop and market your app. Moreover, while it's possible to acquire an existing dataset within weeks or even days, generating a dataset large enough to be useful from a proprietary app can take months, if not years. What we really have to ask is: are you looking to source data or new installations for your app?