Since our launch in May 2025, Indicator has published 225 articles. These articles link to 45 spreadsheets with 2,990 named digital entities tied to the fishy behavior we investigated. We’ve also linked to 2,837 academic articles, investigations, platform disclosures, and third-party reports in our weekly Briefing.
You can now search through all of this data in the Entity Vault, the first element of Indicator’s new Intelligence Center. Indicator members can search the Vault to see if a phone number, domain, handle, company, or ad account has appeared in Indicator reporting. We also catalog findings from major platforms’ threat reports and open-source datasets like Wikipedia’s sockpuppet investigations or X’s Community Notes.

I built the Entity Vault, first and foremost, because I need it. While writing about a scam that impersonated Costco employees and used websites built on Lovable, I realized only the day before publication that Craig had already written about the platform.
Since then, I’ve dipped into the Entity Vault to verify leads and to generate new ones. Bad actors are lazy — or at least cost-sensitive — so they reuse accounts and identifiers, or create new ones using the same pattern or infrastructure. When I wanted to see if there were still AI nudifiers advertising on Meta in September, I pulled every domain we had documented in prior articles and used a script to search for those domains and simple variations of them. I repeated the methodology when a reporter asked me if I had seen more TikTok accounts impersonating Spanish-language news anchors and media outlets ahead of the US midterms.
Now we’re sharing this archive with you. You can search by an entity’s name or by the platform where it operated. We also include context from each article, so you can find connections by searching for affected entities like an impersonated brand.
The Entity Vault has a few limitations that you should know about:
It is primarily based on Indicator’s work, which is just a small corner of digital deception. We do pull from outside sources we monitor and plan to add more, but it will always be a restricted sample.
The records aren’t uniform. Our spreadsheets don’t always capture the same fields. More importantly, the entities themselves do very different things: an account spreading a clickbaity hoax about Latvian women is not the same as the advertiser for an AI nudifier. And both are different from an operation disrupted by Anthropic or OpenAI.
Many of the cited accounts are no longer active, precisely because we or others have reported on them.
Still, we think Indicator members will find value in the Vault, which we’ll update weekly.
You may also find it interesting to see how we built and run it, which is outlined in the “How this works” section of the Vault.

This is part of our effort to provide tools to our members – like Navigator – because they build on and complement our reporting, guides, and training. We expect to add more tools to the Intelligence Center, starting with the external research and reports we highlight in each edition of the Briefing. If you’re a member, check out the Entity Vault (you will need to authenticate the first time).
If you’re not a member, now is a great time to upgrade.


