The Internet Detective
Who Finds The
Unfindable.
Hacked. Stalked. Extorted. When the police can't help and your IT team has run out of options — I take over. Elite Dutch Cyber Threat Intelligence, OSINT & Incident Recovery for individuals, executives and enterprises worldwide.
SCAN
When the digital world turns against you, I am the answer.
I'm Joe Shenouda — a Dutch elite Cyber Threat Intelligence specialist, SOC architect and OSINT investigator. For two decades I have hunted threat actors across the surface web, deep web and dark web.
I've defended Fortune-500 networks and personally pulled victims out of digital nightmares the police never had the tools to solve.
I operate where ordinary investigators stop. I unmask anonymous stalkers. I trace stolen crypto across mixers. I negotiate with ransomware gangs. I rebuild compromised networks from the silicon up — and I do it discreetly.
If any of this is happening to you — stop scrolling.
You are not paranoid, and you are not alone. Thousands of people and businesses face these crises every day. Most lose money, sleep, and peace of mind because they didn't know who to call. Now you do.
You're Being Stalked
Anonymous messages, fake accounts, someone watching your every move online or in person.
→Ransomware Hit
Your files are encrypted. The clock is ticking. You need containment and a strategy — now.
→Crypto Stolen
Wallet drained or scam investment? Most of it can still be traced. Speed is everything.
→Account Hijacked
Locked out of Instagram, Gmail, WhatsApp, banking? I rescue and re-secure.
→Catfish / Romance Scam
Find out who they really are — and where the money actually went.
→Insider Threat
Suspect an employee leaking data? I gather forensic, court-ready evidence.
→Brand Impersonated
Phishing clones of your site or executives. I take them down at the source.
→Data Breach Leak
Your credentials, customers or company are on the dark web. I find out what, who and how.
→From dark web secrets to ransomware recovery — your ultimate digital guardian.
Four operational divisions. One operator. Total discretion. Pick your category below.
Cyber Stalker Identification & Unmasking
Trace anonymous harassers across platforms and reveal their real identity.
High demandPersonal Identity Theft Recovery
Full remediation, credit monitoring, and securing every compromised touchpoint.
RecoverySocial Media Account Rescue
Reclaim hacked Instagram, Gmail, WhatsApp, Facebook, X, banking accounts.
24h turnaroundOnline Harassment & Bullying Intervention
Evidence collection, takedowns, legal prep — and peace of mind.
ProtectiveRomance & Investment Scam Investigation
Unmask catfish, locate the money, build the case.
ForensicMissing Persons Digital Footprint Tracking
OSINT-led location tracing through social patterns and metadata.
SensitiveRevenge Porn Tracing & Takedown
Platform escalation, legal support, content removal across jurisdictions.
UrgentCryptocurrency Theft Tracing
On-chain analysis through mixers, bridges, exchanges.
High successCorporate Espionage Investigation
Data theft, IP leakage, rogue insider tracking with court-ready evidence.
EnterpriseExecutive Digital Protection
Scrub the digital footprint of C-suites, VIPs, HNW individuals.
VIPBrand Impersonation Takedown
Phishing-site dismantlement at registrar, hosting and DNS layers.
RapidInsider Threat Identification
Forensic evidence gathering that holds up in court and HR tribunals.
Court-readyAdvanced Employee Background Checks
Deep OSINT — beyond standard HR screening.
Pre-hireVendor & Third-Party Security Due Diligence
Know the real risk profile before you sign.
RiskM&A Cyber Risk Audits
Assess cyber hygiene & breach history pre-acquisition.
StrategicFinancial Fraud Digital Forensics
Wire fraud, BEC attacks, crypto laundering investigation.
FinanceDark Web Credential Leak Monitoring
Continuous monitoring for your credentials on leak markets.
ContinuousDeep Web Data Breach Investigations
Trace the source, scope and actors behind leaks (e.g. Odido).
Source tracingStolen Asset Tracing on Underground Forums
Locate and document stolen data being traded or sold.
IntelThreat Actor Profiling & Unmasking
Real-world identity attribution for digital adversaries.
EliteUnderground Market Fraud Investigation
Deep monitoring of fraud economies, card shops, credential markets.
Deep coverRansomware Group Intelligence & Negotiation
TTP analysis, strategy, and direct negotiation support.
CriticalZero-Day Exploit Chatter Monitoring
Early warning from underground vulnerability discussions.
PredictiveEmergency Ransomware Containment
Stop the spread, secure backups, plan the counter-move.
EmergencyNetwork Intrusion Forensics
Post-hack analysis: how they got in, what they took, what they left.
ForensicDecryption Key Sourcing
Free decryptors, leaked keys, negotiation — every legal option.
RecoveryMalware Reverse Engineering
Understand the threat and build your defenses around it.
TechnicalCompromised System Rescue
Full recovery: servers, networks, websites. Silicon-up rebuilds.
CompleteSOC Surge Support
Reinforce your security operations during and after a crisis.
On-callPost-Incident Security Hardening
Ensure it never happens again — clear, prioritised, actionable.
PreventExpert Witness Testimony
Court-ready digital evidence packaging and expert testimony.
LegalA clear, calm, expert response — even when everything is on fire.
Every case follows a proven four-phase methodology. Transparent, fast, relentless.
Contact
Reach out via the secure form, encrypted email or phone. I respond within hours — minutes for active emergencies.
Triage
Free, confidential 30-minute assessment. We map the situation, contain immediate damage and define mission scope.
Operate
OSINT collection, forensic analysis, dark-web hunting, takedown coordination — whatever the case demands.
Resolve
Court-ready evidence, recovered assets, hardened systems and a clear path forward. You get your life back.
Real operations. Real outcomes.
A selection of cases — client identities and sensitive details are anonymised. The results are verified.
Anonymous Stalker Identified in 11 Days
Eight months of terror. Anonymous threats across multiple platforms targeting a family. Police stood down. OSINT revealed the person lived 200 meters away.
Mid-Market ERP Restored in 4 Days
Ransomware locked the entire ERP stack of an EU manufacturer. Full containment, negotiation to 30% of demand, clean recovery with hardened infrastructure.
€180K Crypto Fraud — Partial Recovery
"Investment opportunity" drained six figures via a fake exchange. Cross-chain tracing through 2 mixers, 3 chains. Forensic report used to recover a substantial portion.
Discretion is non-negotiable — but results speak loudly.
Names and details are anonymised. The words are theirs.
For 8 months an anonymous account terrorised my family. The police said there was 'nothing they could do.' Joe identified the person in 11 days. He lives 200 meters from us.
Ransomware locked our entire ERP. Joe coordinated containment, negotiated a 70% reduction, and delivered the keys with a clean recovery plan. We were back online in 4 days.
I lost €180K to a 'crypto investment.' Joe traced the funds across 3 chains and 2 mixers, and produced a forensic report my lawyers used to recover a substantial portion.
Get The NetDetective on your case today.
All submissions are treated as strictly confidential. For active emergencies, mark the urgency below — I prioritise live incidents above everything else.
Active emergency?
If you are being actively attacked, extorted, or your business is mid-incident, write "EMERGENCY" in the subject and I will respond within minutes.
Whether you're a worried parent, a CEO at 3 AM watching your network burn, or a victim no one else has been able to help — you've reached the right person.
-
Encrypted Email Use the Contact Form
-
Website www.shenouda.nl
-
Based in Netherlands · Worldwide ops
-
Confidentiality 100% NDA on request