yilsem/aiturk-hermes-ide
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 5 Wiki Activity

Import AITURK IDE 1.0.0-beta.1 from Hermes 63279301; preserve MIT license

Browse Source
This commit is contained in:
yilsem
2026-09-05 13:26:46 +03:00
commit 03634b1ca3
11340 changed files with 3442369 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
optional-skills/security/unbroker/references/brokers/addresses.json
+52
View File
@@ -0,0 +1,52 @@
{
"id": "addresses",
"name": "Addresses.com",
"category": "people_search",
"priority": "standard",
"jurisdictions": [
"US"
],
"covered_by": "intelius",
"search": {
"method": "url_pattern",
"url": "https://www.addresses.com/",
"fetch": "web_extract",
"match_signal": "result",
"by": [
"name"
],
"url_patterns": {
"name": "https://www.addresses.com/people/{First}+{Last}"
},
"url_format_quirks": [
"Name people page: /people/{First}+{Last} (a literal '+' joins first and last). Surfaced a real subject listing during the OSINT cross-check.",
"It is a PeopleConnect/Intelius FRONT-END: every 'report' link resolves to tracking.intelius.com. The data is the Intelius cluster's."
]
},
"optout": {
"tier": "T1",
"method": "web_form",
"url": "https://suppression.peopleconnect.us/login",
"requires": {
"profile_url": false,
"email_verification": true,
"captcha": false,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false
},
"inputs": [
"contact_email"
],
"notes": "COVERED BY THE INTELIUS/PEOPLECONNECT CLUSTER -- do NOT file a separate opt-out. addresses.com is a front-end (report links -> tracking.intelius.com), and 'addresses' is listed in intelius.owns, so one PeopleConnect suppression (see intelius.json) removes it too. Recorded here only so the scan cross-check has the URL pattern and knows it maps to the parent. After the intelius suppression confirms, re-scan this URL to verify it dropped.",
"quirks": [
"Front-end only; holds no independent removal channel. The PeopleConnect Suppression Center is the lever."
],
"est_processing_days": 7,
"reappearance_risk": "medium"
},
"last_verified": "2026-07-03",
"source": "field_verified",
"confidence": "documented"
}
optional-skills/security/unbroker/references/brokers/advancedbackgroundchecks.json
+50
View File
@@ -0,0 +1,50 @@
{
"id": "advancedbackgroundchecks",
"name": "AdvancedBackgroundChecks",
"category": "people_search",
"priority": "high",
"jurisdictions": ["US"],
"search": {
"method": "url_pattern",
"url": "https://www.advancedbackgroundchecks.com",
"fetch": "web_extract",
"match_signal": "result",
"by": ["name", "phone", "address"],
"url_patterns": {
"name": "https://www.advancedbackgroundchecks.com/name/{first}-{last}",
"name_state": "https://www.advancedbackgroundchecks.com/name/{first}-{last}/in/{ST}",
"phone": "https://www.advancedbackgroundchecks.com/phone/{digits10}",
"address": "https://www.advancedbackgroundchecks.com/address/{num}-{street-with-type}-{city}-{ST}-{zip}",
"person_profile": "https://www.advancedbackgroundchecks.com/find/person/{first}-{last}-{22charID}"
},
"url_format_quirks": [
"All path segments lowercase, spaces -> hyphens. Name: /name/jane-public ; name+state: /name/jane-public/in/NY (state 2-letter UPPERCASE).",
"Phone: /phone/5551234567 (10 digits, NO punctuation).",
"Address: /address/123-main-st-anytown-ny-12345 (all hyphen-joined incl. ZIP; abbreviations like 'S' and 'Ave' kept verbatim, not expanded).",
"Removable unit is the person profile: /find/person/{first}-{last}-{22charID} (opaque mixed-case ID). Also /find/name/{first}-{last} and /find/name/{first}-{last}/in/{ST}.",
"NO 404s for plausible patterns: an empty search returns a soft-200 page with 'similar' fuzzy rows. The real 'not found' signal is the ABSENCE of an exact-match block in the results heading, NOT an HTTP error. Do not record not_found off a 404 here; read the heading.",
"No anti-bot gating on search/result/phone/address pages (web_extract reads them fine). Site self-brands as 'ActualPeopleSearch' in FAQ text.",
"Search tabs: /?tab=phone /?tab=email /?tab=address. Directories: /lastnames/{surname} /firstnames/{first} /people/{state-name}/{city-name} /people/zip/{zip} /people/areacode/{code}."
]
},
"optout": {
"tier": "T2",
"method": "web_form",
"url": "https://www.advancedbackgroundchecks.com/opt-out",
"requires": {
"profile_url": false,
"email_verification": true,
"captcha": true,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false
},
"inputs": ["full_name", "contact_email"],
"notes": "Two-step email-verification flow: initial form (radio 'I am: The subject of the request / An authorized agent of the subject', First name*, Middle name, Last name*, Email*, consent) -> emailed link -> full form -> confirmation (processed within 45 days). CAPTCHA-gated: Google reCAPTCHA ('Recaptcha requires verification'). Verified read-only 2026-06-30; not submitted.",
"est_processing_days": 3,
"reappearance_risk": "medium"
},
"last_verified": "2026-06-30",
"source": "BADBOOL"
}
optional-skills/security/unbroker/references/brokers/beenverified.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "beenverified",
"name": "BeenVerified",
"category": "people_search",
"priority": "crucial",
"jurisdictions": ["US"],
"parent": "beenverified",
"owns": ["peoplelooker", "peoplesmart"],
"search": {
"method": "url_pattern",
"url": "https://www.beenverified.com/app/optout/search",
"fetch": "browser",
"match_signal": "result",
"by": ["name", "phone", "email", "address"]
},
"optout": {
"tier": "T1",
"method": "web_form",
"url": "https://www.beenverified.com/svc/optout/search/optouts",
"email": "privacy@beenverified.com",
"requires": {
"profile_url": true,
"email_verification": true,
"captcha": false,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false
},
"inputs": ["full_name", "contact_email", "profile_url"],
"deletion": {
"via": "email_followup",
"email": "privacy@beenverified.com",
"kinds": ["ccpa", "generic"],
"notes": "privacy@beenverified.com is the documented address for opt-out, access, deletion, and correction requests (verified from the live privacy policy 2026-07-01). Controller is The Lifetime Value Co. -- a deletion request here can name their other properties too. DPO: dpo@beenverified.com. CCPA window: respond within 45 days (extendable to 90)."
},
"playbook": [
"Opt-out tool at beenverified.com/svc/optout/search/optouts ('Do Not Sell or Share' footer link; the legacy /app/optout/search path serves the same search) -- clears PeopleLooker + PeopleSmart.",
"Search the subject, open the matching listing, and submit with the confirmed profile URL + contact email. Email verification: poll-verification picks up the confirmation link; open it in the agent's own browser.",
"ONE opt-out per email address via the tool; for additional listings email support@beenverified.com or privacy@beenverified.com.",
"FULL DELETION follow-up (right-to-delete, beyond listing suppression): send-email --kind ccpa (CA) / generic to privacy@beenverified.com naming the listing URL(s); as the controller is The Lifetime Value Co., ask that the deletion cover affiliated LTV properties (NeighborWho, Ownerly, NumberGuru, Bumper) in the same request.",
"A separate property-search opt-out exists (NeighborWho/Ownerly are property-focused sisters); note residual exposure if relevant and re-scan the children after the parent confirms."
],
"notes": "Opt-out form + deletion email both verified from the live privacy policy 2026-07-01 (policy dated 2025-10-21). Authorized agents: signed authorization letter or CA POA emailed to privacy@beenverified.com; agent-submitted delete/know requests must include the consumer's name, valid email, age, and address.",
"quirks": [
"The 'Do Not Sell or Share My Personal Information' footer link now points to /svc/optout/search/optouts (observed 2026-07-01); records citing /app/optout/search are the same tool's older entry.",
"One opt-out per email address through the tool; email support for additional removals. The same browser/inbox must open the confirmation link.",
"Sister LTV Co. properties (NeighborWho, Ownerly, NumberGuru, Bumper) keep separate opt-out tools -- do NOT assume the BV tool cleared them; the privacy@ deletion request can name them, then verify by scanning each.",
"Right-to-know requests get an initial response within 10 days; deletion/access within 45 days (CCPA)."
],
"est_processing_days": 7,
"reappearance_risk": "medium"
},
"last_verified": "2026-07-01",
"source": "BADBOOL"
}
optional-skills/security/unbroker/references/brokers/clustal.json
+47
View File
@@ -0,0 +1,47 @@
{
"id": "clustal",
"name": "Clustal",
"category": "people_search",
"priority": "high",
"jurisdictions": ["US"],
"search": {
"method": "url_pattern",
"url": "https://www.clustal.org/",
"fetch": "web_extract",
"match_signal": "record",
"by": ["name"],
"url_patterns": {
"name_index": "https://www.clustal.org/people-search/{letter}/{first-last}/",
"name_state": "https://www.clustal.org/people-search/{letter}/{first-last}/{st}/",
"record": "https://www.clustal.org/record/{first-last}-{8charID}/"
},
"url_format_quirks": [
"Name index: /people-search/{first-initial}/{first-last}/ e.g. /people-search/k/jane-public/ (lowercase, first letter of LAST name as the {letter} segment, hyphen-joined name). Optional state refine appends /{st}/ lowercase 2-letter.",
"Detail (removable unit): /record/{first-last}-{8charID}/ e.g. /record/jane-public-a1b2c3d4/ (opaque mixed-case 8-char id). The index page links each match to its /record/ URL.",
"Readable via web_extract (no hard bot gate as of 2026-07-01). Rich profile: age/DOB, current+prior addresses, phones, emails, relatives, neighbors, associates.",
"Name only: search is by name(+state); no reverse phone/email/address path observed. NOTE: clustal.org squats the 'Clustal' bioinformatics brand but IS a real people-search/data-broker site ('Find Your DNA Relatives'), not the sequence-alignment tool - do not dismiss it as a false positive."
]
},
"optout": {
"tier": "T0",
"method": "web_form",
"url": "https://www.clustal.org/privacy-control/",
"requires": {
"profile_url": true,
"email_verification": true,
"captcha": false,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false
},
"inputs": ["profile_url", "contact_email"],
"notes": "Opt-out at /privacy-control/ using the /record/ profile URL; support help@clustal.org. Verify the exact form fields + any CAPTCHA live before submitting (requires flags below are provisional from the site's opt-out copy, not yet a live form walk-through).",
"email": "help@clustal.org",
"est_processing_days": 7,
"reappearance_risk": "medium"
},
"last_verified": "2026-07-01",
"source": "BADBOOL",
"confidence": "curated"
}
optional-skills/security/unbroker/references/brokers/clustrmaps.json
+52
View File
@@ -0,0 +1,52 @@
{
"id": "clustrmaps",
"name": "ClustrMaps",
"category": "people_search",
"priority": "high",
"jurisdictions": [
"US"
],
"parent": "clustrmaps",
"owns": [],
"search": {
"method": "url_pattern",
"url": "https://clustrmaps.com/",
"fetch": "browser",
"match_signal": "result",
"antibot": "cloudflare",
"by": [
"name",
"phone",
"address"
]
},
"optout": {
"tier": "T2",
"method": "web_form",
"url": "https://clustrmaps.com/bl/opt-out",
"requires": {
"profile_url": true,
"email_verification": true,
"captcha": false,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false
},
"inputs": [
"contact_email",
"profile_url"
],
"notes": "Address/resident aggregator. Opt-out at /bl/opt-out: submit the profile URL + email, confirm the link.",
"quirks": [
"Opt-out URL is the documented public endpoint; datacenter IPs get 403 (anti-bot), so confirm the live flow via the operator's residential browser before the first submission, then set last_verified.",
"Needs the confirmed profile_url (the address/person page).",
"Email verification required."
],
"est_processing_days": 3,
"reappearance_risk": "medium"
},
"last_verified": null,
"source": "curated",
"confidence": "documented"
}
optional-skills/security/unbroker/references/brokers/cyberbackgroundchecks.json
+53
View File
@@ -0,0 +1,53 @@
{
"id": "cyberbackgroundchecks",
"name": "CyberBackgroundChecks",
"category": "people_search",
"priority": "high",
"jurisdictions": [
"US"
],
"parent": "cyberbackgroundchecks",
"owns": [],
"search": {
"method": "url_pattern",
"url": "https://www.cyberbackgroundchecks.com/",
"fetch": "browser",
"match_signal": "result",
"antibot": "cloudflare",
"by": [
"name",
"phone",
"address"
]
},
"optout": {
"tier": "T2",
"method": "web_form",
"url": "https://www.cyberbackgroundchecks.com/removal",
"requires": {
"profile_url": true,
"email_verification": true,
"captcha": false,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false
},
"inputs": [
"full_name",
"contact_email",
"profile_url"
],
"notes": "Free people-search. Opt-out at /removal: find the record, submit email, confirm link.",
"quirks": [
"Opt-out URL is the documented public endpoint; datacenter IPs get 403 (anti-bot), so confirm the live flow via the operator's residential browser before the first submission, then set last_verified.",
"Needs the confirmed profile_url.",
"Email verification required."
],
"est_processing_days": 3,
"reappearance_risk": "medium"
},
"last_verified": null,
"source": "curated",
"confidence": "documented"
}
optional-skills/security/unbroker/references/brokers/familytreenow.json
+50
View File
@@ -0,0 +1,50 @@
{
"id": "familytreenow",
"name": "FamilyTreeNow",
"category": "people_search",
"priority": "crucial",
"jurisdictions": [
"US"
],
"parent": "familytreenow",
"owns": [],
"search": {
"method": "url_pattern",
"url": "https://www.familytreenow.com/",
"fetch": "browser",
"match_signal": "result",
"antibot": "cloudflare",
"by": [
"name",
"phone",
"address"
]
},
"optout": {
"tier": "T2",
"method": "web_form",
"url": "https://www.familytreenow.com/optout",
"requires": {
"profile_url": false,
"email_verification": false,
"captcha": false,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false
},
"inputs": [
"full_name"
],
"notes": "Notorious free people-search / doxxing site (no registry). Opt-out: search the record, select it, confirm removal on-site. No account, free.",
"quirks": [
"Opt-out URL is the documented public endpoint; datacenter IPs get 403 (anti-bot), so confirm the live flow via the operator's residential browser before the first submission, then set last_verified.",
"Select the exact record from search results, then confirm removal; historically no email step, but re-lists periodically so keep the re-scan scheduled."
],
"est_processing_days": 2,
"reappearance_risk": "high"
},
"last_verified": null,
"source": "curated",
"confidence": "documented"
}
optional-skills/security/unbroker/references/brokers/fastpeoplesearch.json
+44
View File
@@ -0,0 +1,44 @@
{
"id": "fastpeoplesearch",
"name": "FastPeopleSearch",
"category": "people_search",
"priority": "high",
"jurisdictions": ["US"],
"search": {
"method": "url_pattern",
"url": "https://www.fastpeoplesearch.com/",
"fetch": "browser",
"antibot": "datadome",
"match_signal": "result",
"match_signal_notes": "SEO TRAP: title/H1/intro echoes the query ('Over 100+ FREE public records found for {Name}') with no real match behind it, and /name/{first}-{last} list pages are fuzzy-SURNAME namesakes (different states, no address overlap). Record `found` ONLY on a result CARD corroborated by the subject's address or DOB. Ignore templated title/intro/H1 text.",
"by": ["name", "phone", "address"],
"url_patterns": {
"name": "https://www.fastpeoplesearch.com/name/{first}-{last}"
},
"url_format_quirks": [
"Name path /name/jane-public (lowercase, hyphen join) was ACCEPTED by the router under challenge, so the name pattern is confirmed even though content never rendered.",
"Sibling of truepeoplesearch (near-identical removal flow/branding); phone pattern is LIKELY /{digits} or /phone/{digits} and address /address/... but UNCONFIRMED - do not assume.",
"MOST aggressively gated of the people-search trio (2026-06-30): both server-side scraping (Firecrawl 504) AND headless browser (Cloudflare -> DataDome) fail on search AND /removal. Treat as fully blocked; needs residential-proxy/stealth browser to scan or opt out."
]
},
"optout": {
"tier": "T2",
"method": "web_form",
"url": "https://www.fastpeoplesearch.com/removal",
"requires": {
"profile_url": false,
"email_verification": true,
"captcha": true,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false
},
"inputs": ["full_name", "contact_email"],
"notes": "Opt-out NOT directly observed (2026-06-30): /removal is itself behind DataDome. By sibling-site pattern almost certainly mirrors truepeoplesearch (email-link flow, subject/agent toggle, name+email fields, hCaptcha) - INFERRED, not verified. Confirm before acting.",
"est_processing_days": 3,
"reappearance_risk": "high"
},
"last_verified": "2026-06-30",
"source": "BADBOOL"
}
optional-skills/security/unbroker/references/brokers/intelius.json
+99
View File
@@ -0,0 +1,99 @@
{
"id": "intelius",
"name": "Intelius",
"category": "people_search",
"priority": "crucial",
"jurisdictions": [
"US"
],
"parent": "peopleconnect",
"owns": [
"truthfinder",
"instantcheckmate",
"ussearch",
"zabasearch",
"classmates",
"peoplefinder",
"peoplelookup",
"addresses",
"anywho",
"publicrecords"
],
"search": {
"method": "url_pattern",
"url": "https://www.intelius.com/",
"fetch": "web_extract",
"match_signal": "result",
"by": [
"name",
"phone",
"address"
],
"url_patterns": {
"name": "https://www.intelius.com/people-search/{First}-{Last}/",
"name_state": "https://www.intelius.com/people-search/{first}-{last}/{state-name}/",
"full_report": "https://www.intelius.com/search/?firstName={First}&lastName={Last}&city={City}&state={ST}&traffic%5Bsource%5D=INTSEO"
},
"url_format_quirks": [
"Name summary page: /people-search/{First}-{Last}/ (hyphen join; case-insensitive, both Jane-Public and jane-public work). Readable via web_extract (no hard bot gate as of 2026-06-30).",
"State refine: /people-search/{first}-{last}/{state-name}/ with the state SPELLED OUT lowercase, e.g. /jane-public/new-york/ (NOT the 2-letter code).",
"The summary shows last-known address + a 'possible relatives' list + a FAQ ('Where does X live?'). Corroborate the subject by address before acting; the 'Top People with the Last Name {Last}' block is unrelated namesakes.",
"Part of PeopleConnect: same data surfaces on Truthfinder/InstantCheckmate/USSearch; one suppression at suppression.peopleconnect.us covers the cluster."
]
},
"optout": {
"tier": "T1",
"method": "web_form",
"url": "https://suppression.peopleconnect.us/login",
"email": "privacy@peopleconnect.us",
"requires": {
"profile_url": false,
"email_verification": true,
"captcha": false,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false,
"dob": true
},
"inputs": [
"contact_email",
"full_name",
"date_of_birth"
],
"deletion": {
"via": "in_flow",
"prefer": false,
"url": "https://suppression.peopleconnect.us/guided-mode",
"email": "privacy@peopleconnect.us",
"kinds": ["ccpa", "generic"],
"notes": "INVERTED for PeopleConnect: do NOT use 'Right to Delete / DELETE MY USER DATA' if the goal is staying out of search results. Per their privacy-center, deleting your user data ALSO deletes any suppressions you have, and deletion does NOT stop the people-search sites from showing you (public-records-sourced data re-lists). Suppression is the do-not-display list, so it is the effective lever and must be maintained. Use deletion ONLY if the goal is purging the account data they hold, accepting that you will re-list and must re-suppress. privacy@peopleconnect.us is the rights-request address for that data-purge path. FIELD-CONFIRMED 2026-07-03: a completed deletion emailed 'removed your identifying information from your suppression settings and you will need to re-enter that information' -- the suppression was wiped and the subject re-listed cluster-wide. If a 'deletion request is Complete' email appears, treat the suppression as gone: re-run suppression and re-verify the Control step reads 'suppressed'."
},
"playbook": [
"PeopleConnect portal (suppression.peopleconnect.us/login, privacy-center entry at /privacy-center) -- ONE flow here covers Truthfinder, Instant Checkmate, US Search, ZabaSearch, Classmates and ~15 more. DO THIS PARENT FIRST.",
"Step 1 asks ONLY for an email + consent checkbox (no name/DOB, no CAPTCHA) -> sends a verification email. Least-disclosure entry: just the contact email.",
"poll-verification will pick up the verify link. The link is a JWT (aud PeopleConnect-email-login then -registration), carries a deviceId, has a ~15-min TTL, and is Cloudflare-gated; it authenticates a SESSION bound to the browser that OPENS it. The SAME agent browser that submitted step 1 must open the link and drive guided-mode straight through. Do NOT hard-navigate to /guided-mode after auth -- that drops the in-memory session and bounces to /login. If the session is lost, re-request a fresh verify email and follow it through without navigating away.",
"guided-mode is a 5-STEP IDENTITY GATE, not a one-click suppress: (1) enter contact email + consent -> verify email; (2) open the verify link in the SAME browser (session/device-bound); (3) enter identity details -- this HARD-REQUIRES date of birth (immutable once saved, no skip) plus legal name; (4) Matching Records -- select the record that describes you, corroborating by address/email/phone, NOT name+DOB alone (namesakes exist); the matched record often aggregates MORE identifiers than the public listing showed (extra emails/addresses) -- expected, not alarming; (5) complete the SUPPRESSION action. So this opt-out discloses DOB + legal name + alias beyond the contact email -- collect DOB at intake (requires.dob=true) or expect a mid-flow pause.",
"SUPPRESS, do NOT delete (this cluster is the exception to 'deletion beats suppression'). In guided-mode, complete the SUPPRESSION flow -- it puts you on the do-not-display list, which is what actually removes you from Intelius/TruthFinder/etc. Their privacy-center states: deleting your user data 'must delete any and all suppressions associated with your user', and 'Deleting your user information will NOT prevent other users from searching for your information through the people search websites. To suppress your information ... you must maintain your user information on file with the Suppression Center.'",
"Therefore do NOT press 'Right to Delete / DELETE MY USER DATA' if the goal is search-visibility removal: it wipes your suppression and the public-records listing re-appears. Use the delete button ONLY if the operator's explicit goal is purging held account data (accept re-listing + re-suppression).",
"Keep the account/suppression on file; do not delete it later. If the portal breaks: sister addresses privacy@intelius.com / privacy@truthfinder.com / privacy@instantcheckmate.com / support@ussearch.com / privacy@classmates.com; phone 1-888-245-1655.",
"VERIFY SUPPRESSED (mandatory): after completing suppression -- and ALWAYS before marking this cluster confirmed_removed -- re-open guided-mode and confirm the Control step reads 'configured as suppressed across our people search websites'. The session persists across visits and pre-fills DOB / names / the matched record, so re-affirming is fast.",
"DELETE-WIPED-SUPPRESSION MONITOR (field-confirmed 2026-07-03): if a 'Your deletion request for PeopleConnect.us is Complete' email (from privacy@verifications.peopleconnect.us) ever appears, the suppression is GONE -- its own wording says the deletion 'removed your identifying information from your suppression settings and you will need to re-enter that information', and it does NOT stop the affiliate people-search sites from re-listing. This is the delete-vs-suppress inversion happening live. Immediately re-run the SUPPRESSION flow and re-verify the Control step. Never leave this cluster on a completed deletion.",
"After suppression confirms, re-scan the covered children (they normally drop out) before submitting any duplicate child opt-out."
],
"notes": "PeopleConnect portal covers the cluster via SUPPRESSION (maintained), not deletion (see the deletion lane note: delete removes suppressions and does not stop public-records re-listing). Authorized-agent requests: signed written authorization (full name, address, phone, the email the consumer uses) or POA; for Right-to-Delete they verify agent authority with the consumer by email. Verified from the live privacy policy + suppression privacy-center 2026-07-02.",
"quirks": [
"Step 1 (suppression.peopleconnect.us/login) asks ONLY for an email + a consent checkbox, then 'Continue' -> a verification email with a link. No CAPTCHA, no name/DOB at step 1. Least-disclosure entry: just the contact email. Verified live 2026-06-30.",
"The verification link authenticates a SESSION and lands on /guided-mode. That session is bound to the browser that OPENED it; a different browser hitting /guided-mode is redirected back to /login. So for hands-off automation the SAME agent browser must open the verify link (Mode B: read inbox -> agent browser navigates the link -> drive guided-mode). Link is a JWT (aud PeopleConnect-email-login -> -registration) carrying a deviceId, ~15-min TTL, Cloudflare-gated. Do NOT hard-navigate to /guided-mode after auth (drops the in-memory session -> /login); if lost, re-request a fresh verify email and follow it straight through.",
"DOB GATE: guided-mode hard-requires date of birth (immutable once saved, no skip) to match records, so requires.dob=true. DOB is not collected at intake by default (sensitive, unneeded for scanning). If absent, the planner pre-warns (needs_operator_input) that this broker needs a human touchpoint; collect it with `intake --dob` up front to run hands-off. The matching step discloses DOB + legal name + alias beyond the contact email -- corroborate the record by address/email/phone, never name+DOB alone.",
"INVERTED delete/suppress: SUPPRESSION is the do-not-display list and is what removes you from the people-search sites; it requires keeping your identifiers on file. 'DELETE MY USER DATA' deletes those suppressions and does NOT stop the sites showing you (public records re-list). Verbatim from the privacy-center: deleting user data 'must delete any and all suppressions associated with your user'; and 'Deleting your user information will NOT prevent other users from searching for your information ... To suppress your information ... you must maintain your user information on file with the Suppression Center.' So prefer suppression; use delete only for a deliberate data-purge. Verified live 2026-07-02.",
"Their published request metrics (2025): 33,513 deletion requests, median response < 1 day -- deletion is fast, but per above it is the wrong lever for search-visibility on this cluster.",
"DOB field in guided-mode is an HTML <input type=date> -- enter it as ISO YYYY-MM-DD (not MM/DD/YYYY). The guided-mode session persists across visits and pre-fills the DOB / names / matched record, so re-verifying suppression later is quick.",
"addresses.com is a PeopleConnect/Intelius front-end (all report links -> tracking.intelius.com) and is in this record's `owns`, so the cluster suppression already covers it -- do NOT file a separate addresses.com opt-out."
],
"est_processing_days": 7,
"reappearance_risk": "medium"
},
"last_verified": "2026-07-01",
"source": "BADBOOL"
}
optional-skills/security/unbroker/references/brokers/mylife.json
+35
View File
@@ -0,0 +1,35 @@
{
"id": "mylife",
"name": "MyLife",
"category": "people_search",
"priority": "crucial",
"jurisdictions": ["US"],
"search": {
"method": "url_pattern",
"url": "https://www.mylife.com",
"fetch": "browser",
"match_signal": "profile",
"by": ["name"]
},
"optout": {
"tier": "T3",
"method": "phone",
"url": "https://www.mylife.com/privacyrequest",
"requires": {
"profile_url": true,
"email_verification": false,
"captcha": false,
"gov_id": true,
"account": false,
"phone_callback": false,
"phone_voice": true,
"payment": false
},
"inputs": ["full_name", "profile_url"],
"notes": "Often pushes a driver's-license upload or a call to (888) 704-1900. Emailing privacy@mylife.com with name + profile link is an alternative. Also covers Wink.com.",
"est_processing_days": 14,
"reappearance_risk": "high"
},
"last_verified": "2026-06-28",
"source": "BADBOOL"
}
optional-skills/security/unbroker/references/brokers/nuwber.json
+52
View File
@@ -0,0 +1,52 @@
{
"id": "nuwber",
"name": "Nuwber",
"category": "people_search",
"priority": "high",
"jurisdictions": [
"US"
],
"parent": "nuwber",
"owns": [],
"search": {
"method": "url_pattern",
"url": "https://nuwber.com/",
"fetch": "browser",
"match_signal": "result",
"antibot": "cloudflare",
"by": [
"name",
"phone",
"address"
]
},
"optout": {
"tier": "T2",
"method": "web_form",
"url": "https://nuwber.com/removal/link",
"requires": {
"profile_url": true,
"email_verification": true,
"captcha": false,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false
},
"inputs": [
"contact_email",
"profile_url"
],
"notes": "People-search. Opt-out: submit the profile URL + email at /removal/link, confirm via the emailed link.",
"quirks": [
"Opt-out URL is the documented public endpoint; datacenter IPs get 403 (anti-bot), so confirm the live flow via the operator's residential browser before the first submission, then set last_verified.",
"Needs the confirmed profile_url (paste the listing URL you recorded).",
"Email verification required."
],
"est_processing_days": 3,
"reappearance_risk": "medium"
},
"last_verified": null,
"source": "curated",
"confidence": "documented"
}
optional-skills/security/unbroker/references/brokers/peekyou.json
+53
View File
@@ -0,0 +1,53 @@
{
"id": "peekyou",
"name": "PeekYou",
"category": "people_search",
"priority": "high",
"jurisdictions": [
"US"
],
"parent": "peekyou",
"owns": [],
"search": {
"method": "url_pattern",
"url": "https://www.peekyou.com/",
"fetch": "browser",
"match_signal": "result",
"antibot": "cloudflare",
"by": [
"name",
"phone",
"address"
]
},
"optout": {
"tier": "T2",
"method": "web_form",
"url": "https://www.peekyou.com/about/contact/optout",
"requires": {
"profile_url": true,
"email_verification": true,
"captcha": false,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false
},
"inputs": [
"full_name",
"contact_email",
"profile_url"
],
"notes": "Aggregates social/web profiles. Opt-out: paste your PeekYou profile URL(s), pick a reason, provide email, confirm the link.",
"quirks": [
"Opt-out URL is the documented public endpoint; datacenter IPs get 403 (anti-bot), so confirm the live flow via the operator's residential browser before the first submission, then set last_verified.",
"Needs the confirmed PeekYou profile_url.",
"Email verification required."
],
"est_processing_days": 7,
"reappearance_risk": "medium"
},
"last_verified": null,
"source": "curated",
"confidence": "documented"
}
optional-skills/security/unbroker/references/brokers/peoplefinders.json
+53
View File
@@ -0,0 +1,53 @@
{
"id": "peoplefinders",
"name": "PeopleFinders",
"category": "people_search",
"priority": "high",
"jurisdictions": [
"US"
],
"parent": "peoplefinders",
"owns": [],
"search": {
"method": "url_pattern",
"url": "https://www.peoplefinders.com/",
"fetch": "browser",
"match_signal": "result",
"antibot": "cloudflare",
"by": [
"name",
"phone",
"address"
]
},
"optout": {
"tier": "T2",
"method": "web_form",
"url": "https://www.peoplefinders.com/opt-out",
"requires": {
"profile_url": true,
"email_verification": true,
"captcha": false,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false
},
"inputs": [
"full_name",
"contact_email",
"profile_url"
],
"notes": "Standalone people-search (Confi-Chek family). Opt-out: find the listing, submit with a contact email, confirm via the emailed link.",
"quirks": [
"Opt-out URL is the documented public endpoint; datacenter IPs get 403 (anti-bot), so confirm the live flow via the operator's residential browser before the first submission, then set last_verified.",
"Needs the confirmed profile_url from evidence.",
"Email verification: poll-verification picks up the link; open it in the agent browser."
],
"est_processing_days": 7,
"reappearance_risk": "medium"
},
"last_verified": null,
"source": "curated",
"confidence": "documented"
}
optional-skills/security/unbroker/references/brokers/radaris.json
+58
View File
@@ -0,0 +1,58 @@
{
"id": "radaris",
"name": "Radaris",
"category": "people_search",
"priority": "crucial",
"jurisdictions": [
"US"
],
"search": {
"method": "url_pattern",
"url": "https://radaris.com/",
"fetch": "web_extract",
"match_signal": "View Profile",
"by": [
"name",
"phone",
"address"
],
"url_patterns": {
"name": "https://radaris.com/p/{First}/{Last}/"
},
"url_format_quirks": [
"Name profile page: /p/{First}/{Last}/ with First/Last Capitalized and a TRAILING slash, e.g. /p/Jane/Public/ . Readable via web_extract (no hard bot gate as of 2026-06-30).",
"The page aggregates: a 'phone numbers & home addresses' table (the DIRECT hit for the subject), a relatives/namesakes carousel ('Review the potential relatives'), and resume/CV records. The subject's removable row is in the address table; the carousel entries are OTHER people - disambiguate by address/age before acting.",
"Page is noisy with testimonials/reviews boilerplate; the signal blocks are 'phone numbers & home addresses N' and 'resumes & CV records N'."
]
},
"optout": {
"tier": "T2",
"method": "web_form",
"url": "https://radaris.com/control-privacy",
"requires": {
"profile_url": true,
"email_verification": true,
"captcha": true,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false
},
"inputs": [
"profile_url",
"contact_email"
],
"notes": "Multi-step control-privacy wizard: step 1 NEXT -> step 2 'identify your personal page' (paste the NUMBERED profile URL into the 'Or Enter URL of your page' field; typing reveals a NEXT submit button) -> then user_email + Google reCAPTCHA -> emailed verification link. If there is no View Profile button for the subject, email customer-service@radaris.com and reply to the auto-response until removed.",
"email": "customer-service@radaris.com",
"quirks": [
"CAPTCHA: the form carries a Google reCAPTCHA (hidden field g-recaptcha-response) plus anti-bot fingerprint tokens (jfp, token). Tier is T2 without a captcha-clearing browser backend (T1 with Browserbase). (Record previously mis-declared captcha:false.)",
"The /control-privacy form REQUIRES the per-person NUMBERED profile URL. Pasting the aggregate /p/{First}/{Last}/ URL is rejected with the validation error: 'The URL must include unique number at the end'. The real removable URL looks like https://{region}.radaris.com/person/~First-Last/1234567890 (see the field placeholder).",
"The subject's own record may appear ONLY as a static row in the 'phone numbers & home addresses' table with NO 'View Profile' link, so no numbered profile URL is exposed for them (the /p/{First}/{Last}/ page deep-links only to relatives/namesakes via JS onclick, not static hrefs). When that happens the /control-privacy form cannot be used -- do NOT fabricate or submit a relative's or namesake's profile URL. Fall back to email: write customer-service@radaris.com with the subject's own listed details and request removal, replying to the auto-response until confirmed.",
"Pressing Enter in the URL field reloads the wizard to step 1 (does not submit); type into the field and click the revealed NEXT button instead."
],
"est_processing_days": 14,
"reappearance_risk": "high"
},
"last_verified": "2026-06-30",
"source": "BADBOOL"
}
optional-skills/security/unbroker/references/brokers/rehold.json
+48
View File
@@ -0,0 +1,48 @@
{
"id": "rehold",
"name": "Rehold",
"category": "property_records",
"priority": "long_tail",
"jurisdictions": [
"US"
],
"search": {
"method": "url_pattern",
"url": "https://rehold.com/",
"fetch": "browser",
"match_signal": "result",
"match_signal_notes": "PROPERTY-RECORD, NOT PII. An address match here shows only PUBLIC PROPERTY RECORDS (build year, beds/baths, last sale price, incident history). Resident/owner NAMES sit behind 'View full report', which leads to a paywall/signup, so no personal PII is publicly exposed. Public property records are NOT removable. Record `found` ONLY if a resident NAME matching the subject is publicly displayed on the free page; an address-only match is `not_found` (nothing to opt out of).",
"access": "paywall",
"by": [
"address"
]
},
"optout": {
"tier": "T2",
"method": "web_form",
"url": "https://rehold.com/optout",
"requires": {
"profile_url": true,
"email_verification": false,
"captcha": false,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false
},
"inputs": [
"profile_url"
],
"notes": "Address-anchored property/reverse-address site. Only pursue an opt-out if the scan found a publicly displayed resident NAME for the subject (see match_signal_notes); a bare public property record is not personal PII and is not removable. If the subject's personal profile IS shown, submit the profile URL to the opt-out endpoint and confirm the live flow in a residential browser before the first submission, then set last_verified.",
"quirks": [
"Distinguish 'address exists in a public property DB' (non-removable) from 'the subject's personal profile is displayed' (removable). Only the latter is an actionable exposure.",
"'View full report' is a paywall/signup, not proof of a public listing.",
"Opt-out endpoint UNVERIFIED: confirm the live flow before the first submission."
],
"est_processing_days": 3,
"reappearance_risk": "low"
},
"last_verified": null,
"source": "curated",
"confidence": "documented"
}
optional-skills/security/unbroker/references/brokers/searchpeoplefree.json
+53
View File
@@ -0,0 +1,53 @@
{
"id": "searchpeoplefree",
"name": "SearchPeopleFree",
"category": "people_search",
"priority": "high",
"jurisdictions": [
"US"
],
"parent": "searchpeoplefree",
"owns": [],
"search": {
"method": "url_pattern",
"url": "https://www.searchpeoplefree.com/",
"fetch": "browser",
"match_signal": "result",
"antibot": "cloudflare",
"by": [
"name",
"phone",
"address"
]
},
"optout": {
"tier": "T2",
"method": "web_form",
"url": "https://www.searchpeoplefree.com/opt-out",
"requires": {
"profile_url": true,
"email_verification": true,
"captcha": false,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false
},
"inputs": [
"full_name",
"contact_email",
"profile_url"
],
"notes": "Free people-search. Opt-out: find the listing, submit with an email, confirm the link.",
"quirks": [
"Opt-out URL is the documented public endpoint; datacenter IPs get 403 (anti-bot), so confirm the live flow via the operator's residential browser before the first submission, then set last_verified.",
"Needs the confirmed profile_url.",
"Email verification required."
],
"est_processing_days": 3,
"reappearance_risk": "medium"
},
"last_verified": null,
"source": "curated",
"confidence": "documented"
}
optional-skills/security/unbroker/references/brokers/socialcatfish.json
+52
View File
@@ -0,0 +1,52 @@
{
"id": "socialcatfish",
"name": "Social Catfish",
"category": "people_search",
"priority": "standard",
"jurisdictions": [
"US"
],
"search": {
"method": "url_pattern",
"url": "https://socialcatfish.com/",
"fetch": "browser",
"match_signal": "result",
"by": [
"name",
"email",
"phone",
"image"
],
"url_format_quirks": [
"Reverse-lookup site (name / email / phone / image / username). Subject exposure is usually an INDIRECT one (an email/phone data point), not a full profile -- verify what is actually shown before choosing a lane."
]
},
"optout": {
"tier": "T2",
"method": "web_form",
"url": "https://socialcatfish.com/opt-out/",
"requires": {
"profile_url": false,
"email_verification": true,
"captcha": true,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false
},
"inputs": [
"full_name",
"contact_email"
],
"notes": "Automation-HOSTILE opt-out form: in the field the form filled correctly but the submission was automation-defeated, so it lands as a 2-click human task rather than a hands-off submit. Decision order per the blocked-form rule (methods.md): try the in-browser form on the operator's residential browser first; if it will not go through, fall back to the rights-request EMAIL address cited on the Social Catfish privacy policy / opt-out page (confirm the current address before sending -- do NOT use an address sourced from a third-party blog), disclosing name + contact email only. If neither is possible, queue a human_task with the exact end-state.",
"quirks": [
"Form defeats automation even when fields are filled correctly -> treat as a 2-click human task or use the cited rights-email fallback.",
"Confirm the cited rights-request email on the live privacy policy before using it; it is the fallback lane, not the primary."
],
"est_processing_days": 7,
"reappearance_risk": "medium"
},
"last_verified": "2026-07-03",
"source": "field_verified",
"confidence": "documented"
}
optional-skills/security/unbroker/references/brokers/spokeo.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "spokeo",
"name": "Spokeo",
"category": "people_search",
"priority": "crucial",
"jurisdictions": ["US"],
"parent": "spokeo",
"owns": ["freepeopledirectory"],
"search": {
"method": "url_pattern",
"url": "https://www.spokeo.com/search",
"fetch": "browser",
"match_signal": "profile",
"by": ["name", "phone", "email", "address"]
},
"optout": {
"tier": "T1",
"method": "web_form",
"url": "https://www.spokeo.com/optout",
"email": "privacy@spokeo.com",
"requires": {
"profile_url": true,
"email_verification": true,
"captcha": false,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false
},
"inputs": ["profile_url", "contact_email"],
"deletion": {
"via": "email_followup",
"email": "privacy@spokeo.com",
"kinds": ["ccpa", "generic"],
"notes": "privacy@spokeo.com is the documented direct privacy contact (verified live on /optout 2026-07-01). Use for full CCPA deletion beyond listing opt-out, for listings the form rejects, and when more listings keep surfacing."
},
"playbook": [
"Opt-out form at spokeo.com/optout -- clears FreePeopleDirectory. Inputs: the confirmed profile URL + contact email; the form emails a confirmation link (poll-verification picks it up; open it in the agent's own browser).",
"EVERY LISTING SEPARATELY: 'you may have multiple listings on Spokeo. Each one is identified by a unique URL and must be opted out individually' (their own wording). Run ALL search vectors first, collect every listing URL, and submit one opt-out per URL.",
"Fast: requests process in 24-48 hours per their page -- re-scan after 2 days and record the real outcome.",
"FULL DELETION follow-up: send-email --kind ccpa (CA) / generic to privacy@spokeo.com naming all listing URLs -- covers data retained beyond the free-search suppression.",
"Paid/account data may be retained even when hidden from free search -- verify actual removal via re-scan; never mark confirmed_removed off the free-search view alone."
],
"notes": "Form + privacy@spokeo.com verified live 2026-07-01. Their page: opting out does not remove data from original sources and listings may reappear as new public records arrive -- keep the reappearance re-scan scheduled.",
"quirks": [
"Profile URL formats the form accepts: listing URL like spokeo.com/{First}-{Last}/{City}/{ST}/p{id} or a purchase URL spokeo.com/purchase?q=... (examples shown on /optout).",
"Multiple listings per person are NORMAL (one per name x location x record cluster); each unique URL must be opted out individually -- feed every found listing URL through the form.",
"Processing is 24-48h ('depending on the nature of your request and the amount of data').",
"Paid accounts may retain data even when hidden from free search - verify actual removal, don't mark confirmed_removed off the free-search view alone."
],
"est_processing_days": 2,
"reappearance_risk": "medium"
},
"last_verified": "2026-07-01",
"source": "BADBOOL"
}
optional-skills/security/unbroker/references/brokers/thatsthem.json
+46
View File
@@ -0,0 +1,46 @@
{
"id": "thatsthem",
"name": "That's Them",
"category": "people_search",
"priority": "crucial",
"jurisdictions": ["US"],
"search": {
"method": "url_pattern",
"url": "https://thatsthem.com/",
"fetch": "browser",
"match_signal": "result",
"by": ["name", "phone", "email", "address"],
"url_patterns": {
"name": "https://thatsthem.com/name/{First}-{Last}/{City}-{ST}",
"phone": "https://thatsthem.com/phone/{areacode}-{prefix}-{line}",
"email": "https://thatsthem.com/email/{email}",
"address": "https://thatsthem.com/address/{Street}-{City}-{ST}-{ZIP}"
},
"url_format_quirks": [
"ADDRESS path is fully hyphen-joined and joins street+city+state+ZIP with hyphens (e.g. /address/123-Main-St-Anytown-NY-12345) and REQUIRES the ZIP. The older slash form (/address/Street/City-ST) and any ZIP-less form 404.",
"NAME and PHONE and EMAIL paths use a slash before city/state and do NOT need a ZIP: /name/First-Last/City-ST , /phone/AAA-PPP-LLLL , /email/addr@host.",
"Street abbreviations are kept verbatim (Ave, Pl, St) - do NOT expand to Avenue/Place/Street; expanding 404s.",
"A 404 on a constructed URL means WRONG PATTERN, not 'no record present'. Treat as INCONCLUSIVE: fall back to the on-site search box (browser_type into the address/name field + submit) and read the resulting canonical URL."
]
},
"optout": {
"tier": "T2",
"method": "web_form",
"url": "https://thatsthem.com/optout",
"requires": {
"profile_url": false,
"email_verification": false,
"captcha": true,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false
},
"inputs": ["full_name", "street", "city", "state", "postal", "contact_email", "phone"],
"notes": "Opt-out form is gated by a Cloudflare Turnstile CAPTCHA (so tier is T2 without a captcha-clearing browser backend; T1 with Browserbase). All 7 fields are marked required by the form (Full Name, Street Address, City, State, ZIP, Email, Phone). Site sends a confirmation email and states ~72h processing (this is a completion notice, not a click-to-verify link). Least-disclosure tension: the form DEMANDS email+phone even though a public record may show less - disclose only to remove a record that is actually about the subject. Do not click the Spokeo identity-theft-protection link (paid product).",
"est_processing_days": 3,
"reappearance_risk": "low"
},
"last_verified": "2026-06-30",
"source": "BADBOOL"
}
optional-skills/security/unbroker/references/brokers/truepeoplesearch.json
+44
View File
@@ -0,0 +1,44 @@
{
"id": "truepeoplesearch",
"name": "TruePeopleSearch",
"category": "people_search",
"priority": "high",
"jurisdictions": ["US"],
"search": {
"method": "url_pattern",
"url": "https://www.truepeoplesearch.com/",
"fetch": "browser",
"antibot": "datadome",
"match_signal": "result",
"match_signal_notes": "SEO TRAP: the page title/H1/intro auto-inserts the query ('FREE public records found for {Name} in {City}') even with ZERO real matches. That templated echo is NOT a result. Record `found` ONLY on an actual result CARD corroborated by the subject's address or DOB; unrelated same-name cards in other states are namesakes. Ignore the title/intro/H1 text entirely.",
"by": ["name", "phone", "address", "email"],
"url_patterns": {
"name": "https://www.truepeoplesearch.com/results?name={First%20Last}&citystatezip={City,%20ST}"
},
"url_format_quirks": [
"Search results URL is QUERY-PARAM, not path: /results?name=Jane%20Public&citystatezip=Anytown,%20NY (space-encoded; comma between city and state). Confirmed as the canonical form the site's own search box generates.",
"On-site search tabs: Name / Phone / Address / Email / Neighbors (so name-, phone-, address-, and email-searchable).",
"HARD-BLOCKED for automated reads (2026-06-30): Cloudflare 'Just a moment...' interstitial -> DataDome device-check CAPTCHA (geo.captcha-delivery.com) on every results navigation. Page chrome (header/footer) may render while the result body stays blocked; submitting any search bounces to DataDome. web_extract/Firecrawl 504-timed out. Needs a residential-proxy/stealth browser (e.g. Browserbase) to scan; otherwise record 'blocked'."
]
},
"optout": {
"tier": "T2",
"method": "web_form",
"url": "https://www.truepeoplesearch.com/removal",
"requires": {
"profile_url": false,
"email_verification": true,
"captcha": true,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false
},
"inputs": ["full_name", "contact_email"],
"notes": "Removal page renders even when results are blocked. Flow: name+email+captcha -> emailed link -> fill opt-out form matching the record -> confirmation ('allow 3 days'). Fields: dropdown 'Exercise my rights as a: The subject of the request / An authorized agent of the subject', First Name*, Middle Name, Last Name*, Email Address*, consent checkbox. CAPTCHA-gated: hCaptcha ('I am human'). Contact support@truepeoplesearch.com; PO Box 7775 PMB 29296, San Francisco CA 94120-7775. Verified read-only 2026-06-30; not submitted. (Record previously mis-declared email_verification:false.)",
"est_processing_days": 3,
"reappearance_risk": "high"
},
"last_verified": "2026-06-30",
"source": "BADBOOL"
}
optional-skills/security/unbroker/references/brokers/usphonebook.json
+53
View File
@@ -0,0 +1,53 @@
{
"id": "usphonebook",
"name": "USPhoneBook",
"category": "people_search",
"priority": "high",
"jurisdictions": [
"US"
],
"parent": "usphonebook",
"owns": [],
"search": {
"method": "url_pattern",
"url": "https://www.usphonebook.com/",
"fetch": "browser",
"match_signal": "result",
"antibot": "cloudflare",
"by": [
"name",
"phone",
"address"
]
},
"optout": {
"tier": "T2",
"method": "web_form",
"url": "https://www.usphonebook.com/opt-out",
"requires": {
"profile_url": true,
"email_verification": true,
"captcha": false,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false
},
"inputs": [
"full_name",
"contact_email",
"profile_url"
],
"notes": "Reverse-phone + people-search. Opt-out: paste the listing URL, provide an email, confirm via the emailed link.",
"quirks": [
"Opt-out URL is the documented public endpoint; datacenter IPs get 403 (anti-bot), so confirm the live flow via the operator's residential browser before the first submission, then set last_verified.",
"Needs the confirmed profile_url.",
"Email verification required."
],
"est_processing_days": 3,
"reappearance_risk": "medium"
},
"last_verified": null,
"source": "curated",
"confidence": "documented"
}
optional-skills/security/unbroker/references/brokers/whitepages.json
+57
View File
@@ -0,0 +1,57 @@
{
"id": "whitepages",
"name": "Whitepages",
"category": "people_search",
"priority": "crucial",
"jurisdictions": ["US"],
"parent": "whitepages",
"owns": ["411"],
"search": {
"method": "url_pattern",
"url": "https://www.whitepages.com/",
"fetch": "browser",
"match_signal": "listing",
"by": ["name", "phone", "address"]
},
"optout": {
"tier": "T1",
"method": "email",
"url": "https://www.whitepages.com/suppression_requests",
"email": "privacyrequest@whitepages.com",
"requires": {
"profile_url": true,
"email_verification": true,
"captcha": false,
"gov_id": false,
"account": false,
"phone_callback": false,
"payment": false
},
"inputs": ["full_name", "contact_email", "profile_url"],
"deletion": {
"via": "email",
"email": "privacyrequest@whitepages.com",
"url": "https://whitepagesprivacy.zendesk.com/hc/en-us/requests/new",
"kinds": ["ccpa", "generic"],
"notes": "privacyrequest@whitepages.com handles BOTH opt-out (removal from the site) and CCPA deletion requests, explicitly offered for people who do not want to provide a phone number for the automated tool. ~2 business day reply; opt-outs processed within 15 days. Verified from whitepages.com/privacy/consumer-rights 2026-07-01 (page dated 2026-06-22)."
},
"playbook": [
"EMAIL LANE (fully autonomous -- use this): send the removal + deletion request to privacyrequest@whitepages.com including the confirmed listing URL. This is Whitepages' own documented alternative 'if you would prefer not to provide a phone number'. Expect a reply within ~2 business days; they may ask identity-verification questions (name, email) -- answer with least-disclosure, never an ID number.",
"Include in the email: the listing URL(s), the subject's full name as listed, and the request to (a) remove the listing(s), (b) opt out of sale/sharing, and (c) delete personal data (CCPA 1798.105 for CA residents; they honor requests from other states per their consumer-rights page).",
"'Once a listing is removed, all known connected listings are also removed and the requester's information will not be sold by Whitepages in any capacity' -- one request covers connected listings; still re-scan afterward, and check Whitepages Premium + 411.com separately.",
"Alternative 1: webform at whitepagesprivacy.zendesk.com/hc/en-us/requests/new (same ~2-day handling; good fallback if the mailbox bounces).",
"Alternative 2 (only with an operator on the phone): the automated tool at whitepages.com/suppression_requests -- paste the listing URL, provide a phone number, answer the automated voice call and enter the 4-digit code. Fastest (est 1 day) but NOT autonomous.",
"Opt-out requests may take up to 15 days; verify with a re-scan before recording confirmed_removed."
],
"notes": "Email/webform lane verified 2026-07-01: privacyrequest@whitepages.com or the Zendesk form replace the phone-callback tool ('if you would prefer not to provide a phone number... submit a request to a customer service agent'). Authorized agents: written signed permission required. General privacy contact: support@whitepages.com.",
"quirks": [
"The automated suppression tool (whitepages.com/suppression_requests) REQUIRES a phone number + automated voice call with a 4-digit code + agreeing to their ToS -- that lane is phone_callback/T2. The email/webform lane exists precisely to avoid it; prefer email for autonomy.",
"Deletion exceptions they state: public records (property, court), fraud-prevention data, active-subscription data, legal holds. 'Hidden from search' vs 'deleted' distinction applies -- their opt-out removes the listing; the CCPA deletion covers non-public account data.",
"CCPA opt-out requests: up to 15 days to process. Right-to-know/access requests also via privacyrequest@whitepages.com or the Zendesk form."
],
"est_processing_days": 15,
"reappearance_risk": "medium"
},
"last_verified": "2026-07-01",
"source": "BADBOOL"
}