investigatore

Record ID: ACT-0000
Handle(s): @investigatore, @creepypasta, Gabe, Gashwound
Status: Active
First Observed: 2024-11-19 (Earliest linked public incident)


Summary

investigatore (also known as Gabe or Gashwound) is an Italian-speaking online cyber investigator, OSINT (Open Source Intelligence) analyst, and the owner of OsintSnow, an intelligence and data-breach search platform. Operating heavily within the Telegram “com” (community) space, he is known for his technical knowledge of raw data scraping, pivoting, and database management.

Despite his claims of professional certifications and high-level corporate contracting, investigatore’s online presence is highly volatile. He balances the persona of a sophisticated intelligence broker with the erratic behavior of a deeply entrenched cyber-troll. Beyond OSINT, his operational portfolio extends into cryptocurrency fraud, alleged website compromises, and high-disruption swatting campaigns—most notably a bomb threat against the University of Mississippi in November 2024.


Aliases


Affiliations


Timeline



Evidence

Ref Source Date Notes
[1] News Media 2024-11-19 Reports of an unconfirmed bomb threat forcing the evacuation of the Sandy and John Black Pavilion and the Student Union at the University of Mississippi.
[2] Direct Messages Undated investigatore explicitly claims involvement in crypto fraud (“coinbase and binance”) and boasts: “i also hacked the italian pharmacy site”.
[3] Chat Logs 2025-09-23 Claims professional credentials: “im an osint analyst and cyber investigator”.
[4] Chat Logs 2025-09-30 Brags about taking 700ug of LSD and details heavy poly-drug use.
[5] Chat Logs 2025-10-03 Discusses pricing for physical attacks: “i bricking li pago 15… €200 se gli vai a lanciare un mattone”.
[6] Chat Logs 2025-10-08 Asserts ownership of OsintSnow and mocks rivals for relying on Telegram bots rather than raw data.

Notes

Swatting and Bomb Threats While investigatore presents himself as an elite, corporate-contracted intelligence analyst, his real-world disruption tactics lean heavily on the blunt-force playbook of the underground “com” scene. He is linked to a November 19, 2024, bomb threat at the University of Mississippi (Ole Miss), which forced the evacuation of the Sandy and John Black Pavilion and the Gertrude C. Ford Student Union. This aligns with his documented willingness to deploy physical harassment, including “pizza bombing,” “swatting,” and paying proxies to throw bricks through the windows of his online rivals.

Hacking and Cryptocurrency Fraud Claims In direct messages, investigatore claims that before his reputation as an OSINT operator, he was “known for fraud,” specifically targeting Coinbase and Binance. He also claims responsibility for hacking an “Italian pharmacy site,” noting that the breach was severe enough to generate news coverage in Italy. Assuming these claims are true, they showcase a broader technical capability beyond simple data scraping. However, his boasts of being a high-rolling crypto fraudster present an amusing contrast to his chat logs, where he frequently complains of being broke and begs other users for Discord Nitro and Robux.

Technical Competence vs. Professionalism The logs reveal a stark dichotomy between investigatore's technical abilities and his operational security (OPSEC). He demonstrates a firm grasp of the OSINT ecosystem, accurately detailing concepts like SIGINT, GEOINT, data pivoting, Emergency Data Requests (EDRs), and the exploitation of raw “stealerlogs.” He frequently and accurately mocks “larpers” (skids) who rely on simple Telegram bots rather than manual database querying. However, for a self-proclaimed professional cyber investigator whose tradecraft relies on discretion, he maintains a remarkably comprehensive public diary of his own federal crimes, emotional breakdowns, and narcotics intake.

OsintSnow and Com Rivalries Much of investigatore's activity revolves around protecting the reputation of his platform, OsintSnow. When rivals (notably actors like gucci, smeraldo, and projects like osintcat) allegedly duplicated his platform's frontend or API access, investigatore responded with aggressive doxxing campaigns. He is fiercely protective of his status as a “god tier” investigator, frequently leaking the personal information of competitors to assert dominance.

Subculture Lexicon and Worldview investigatore’s communication is heavily saturated with extreme “looksmaxxing,” incel, and 4chan terminology. He frequently evaluates himself and others using terms like “LTN” (Low Tier Normie), “HTN” (High Tier Normie), and “recessed maxilia,” alongside an obsession with “aura.” He weaponizes this language to degrade female users (“foids,” “e-whores”) and rivals. The logs also show him frequently using antisemitic, homophobic, and racial slurs as casual insults.

Mental Health and Substance Abuse The archive portrays a highly erratic psychological state. investigatore speaks openly about deep depression, existential nihilism, and suicidal ideation, often threatening to kill himself over minor Telegram disputes. He actively self-medicates, documenting his heavy use of LSD, MDMA, DMT, Oxycodone, and Xanax, occasionally logging into chats while allegedly undergoing ego death or suffering from physical side effects like vomiting blood.

Despite his hustle and undeniable charisma within his specific niche, the evidence paints a portrait of a user trapped in a cycle of his own making—building sophisticated intelligence tools only to use them as cudgels in teenage drama and bomb-threat campaigns.


Record created: 2026-05-08.