Pigfox

Blog

Field notes on OSINT, security checks, SEO, and safer hiring and vendor due diligence.

  • How Phishing & BEC Email Analyzer surfaces email risk signals

    2026-10-15

    Phishing & BEC Email Analyzer turns a suspicious email into inspectable signals, from sender alignment to payment-redirection cues. The value is not a verdict. It is a structured way for you to verify what the message claims and where your workflow is exposed.

  • What PDF Structure Tells You About Document Integrity

    2026-10-14

    PDFs hide revision history in their structure. This article explains how Document Authenticity Check reads incremental updates, appended content, cross-reference anomalies, and date drift as signals you can verify.

  • Counterparty checks start with observable technical signals

    2026-10-13

    Counterparty Due-Diligence Check gives you a structured first pass on a supplier, client, or partner by combining website trust signals with optional contact-email breach exposure. The value is in what you can inspect and verify, and in how those signals should change your follow-up process.

  • Website Legit Check and the engineering of fast site triage

    2026-10-12

    Website Legit Check pulls core website trust signals into one pass, covering domain age, TLS, redirects, email-security DNS, and security headers. The value is in faster inspection, clearer verification, and better reading of weak signals across layers.

  • How to Read Email Headers Like an Engineer

    2026-10-11

    Email headers expose the transport facts behind a message. This piece explains how to read the Received hop chain and SPF, DKIM, and DMARC results as a coherent set of signals to investigate.

  • FIX Lab and the engineering of FIX session recovery

    2026-10-10

    FIX Lab shows the part of FIX most teams fail to test well, session recovery after message loss. The value is in the transcript: sequence numbers, resend handling, replay behavior, and the final state you can verify.

  • WebSocket Lab and the engineering of measured fan-out

    2026-10-09

    WebSocket Lab demonstrates a core real-time pattern, one upstream connection feeding many subscribers, with observed timing instead of guesswork. The value is in what you can inspect: sequence integrity, latency spread, queue behavior, and failure modes under churn.

  • Timeline Discrepancy Checker and the engineering of résumé consistency

    2026-10-08

    Timeline Discrepancy Checker turns a résumé into a structured timeline and surfaces internal-consistency signals worth checking. Its value is in narrow, reviewable output, overlapping roles, date mismatches, gaps, and impossible tech or certification dates, without pretending to decide intent.

  • What P2P Lab shows about browser peer transfer

    2026-10-07

    P2P Lab shows a small, inspectable browser peer exchange: two browsers, one relay, and block retrieval by hash. The value is in the engineering boundary it exposes, relay role, transport path, and local integrity verification.

  • Candidate Photo Verify and the engineering of image evidence

    2026-10-06

    Candidate Photo Verify shows where else a candidate's photo appears online, giving recruiters image-based signals to investigate. The value is in careful interpretation: inspect context, verify source quality, and treat matches as evidence to review, not a verdict.