Skip to content
osint_verified✓

playbooks / username-footprint

Username → full online footprint

Enumerate every platform a handle exists on, separate real matches from false positives, and harvest the pivots each profile leaks.

start: @ usernameyields: url, real name, image, location, keyword, email, ip / asnlevel: beginner

  1. 01

    Enumerate across platforms

    Run at least two enumerators, because their site lists differ. WhatsMyName has the best-maintained dataset. Maigret goes deeper and parses profile pages for extra identifiers.

    Also try obvious variants: with and without digits, underscores, dots, and the same name with "real", "official" or "the".

    → can yield: ⇗URL

  2. 02

    Kill the false positives

    A hit only means a profile with that name exists. Confirm each one belongs to your subject: matching avatar, bio wording, linked accounts, location, writing style, and active hours. Discard anything you can't tie back.

  3. 03

    Reverse-search the avatars

    People reuse profile pictures. Reverse searching them finds accounts under different usernames, and sometimes a real-name profile such as LinkedIn or a company page. Yandex is strongest for faces and locations; Lens is strongest for objects and places.

    → can yield: ⇗URL ☺Real name ▣Image

  4. 04

    Dig the platforms that leak most

    Reddit and forum histories expose locations, jobs, relationships and time zones. Telegram and X searches show affiliations. Read old posts, not just the profile.

    → can yield: ⊕Location ☺Real name #Keyword

  5. 05

    Recover deleted or changed profiles

    Older snapshots often show the real name, email or links the subject later removed.

    → can yield: ✉Email ☺Real name ⇗URL

  6. 06

    Check breach data for the handle

    Many breach search tools accept usernames. A hit can connect the handle to an email address, which opens the email playbook.

    → can yield: ✉Email ⌖IP / ASN

>esc
↑↓ navigate · ↵ open · Shift ↵ tool details