Open Source Intelligence

Username OSINT

Systematic public handle reconnaissance for security researchers, fraud analysts, and privacy auditors. Enumerate publicly accessible profiles across 700+ websites.

@
No account required. Searches are processed in memory and aren't stored.·Privacy details
In-memory execution: queries are never stored or logged in any database.Privacy Policy
Methodology

How This Scan Works

01

Handle Normalization

Removes whitespace and formats candidate handles for case-sensitive and case-insensitive endpoints.

02

Parallel Fingerprint Matching

Sends concurrent HTTP requests to verified pattern URLs and inspects response signatures.

03

Triaging & Confidence Scoring

Separates confirmed matches from soft-404 redirects, anti-bot firewalls, and ambiguous pages.

What Can Be Found

  • Publicly registered profiles on open platforms and forums
  • Public commit histories and open-source contributions
  • Associated avatars and bio text on public profile pages
  • Platform confidence tiers and verified endpoint responses

What Cannot Be Determined

  • Private profile information or direct messages
  • Conclusive legal attribution without secondary corroboration
  • Deleted posts or historical data not in public archives
  • Login credentials or authentication tokens
Coverage Examples

Sample Platform Signals

Developer Hub

GitHub

Public repositories, developer bios, contribution activity.

Technical Forum

HackerNews

Public user profile pages, submission history, and karma signals.

Identity & Cryptography

Keybase

Public PGP keys and verified proof of external accounts.

Limitations & Corroboration Notice

  • Common handles have high collision rates; multiple people frequently use the same alias.
  • Some networks challenge automated queries with CAPTCHAs or rate limits.
  • Always follow lawful OSINT standards: never bypass access controls or violate platform terms.
Questions & Answers

Frequently Asked Questions

How should an investigator corroborate a username match?

Examine profile creation timestamps, language syntax, cross-linked social handles, avatar image hashes, and geographic hints to establish identity correlation.

Does OSINTScan log target usernames?

No. Scans operate strictly in volatile server memory with zero database logging, protecting researcher privacy.

What should I do if a target platform returns 'Blocked'?

A 'Blocked' status indicates an anti-bot challenge (such as Cloudflare). Visit the URL directly in a standard browser to manually inspect the page.