Credits & sources

Reference site catalogue and existence-detection patterns for username hunting.

Extended site database, tagging and profile-parsing concepts.

Additional regional platform coverage and search strategy inspiration.

Community-maintained web-account discovery dataset conventions.

Curated username/email site list with metadata extraction on positive hits.

Search-engine driven username discovery across multiple engines in one pass.

Social-network account discovery sweep for a single handle.

Registration checks against official platform signup endpoints for accurate in-use results.

Search-engine based username and name discovery.

Profile detection across social platforms.

Username checks across dating and adult platforms.

Public Instagram account metadata.

Masked phone-hint discovery from account recovery flows.

Email intelligence aggregation.

Account-existence checks across 120+ sites for an email address, without notifying the owner.

Phone-number registration checks against consumer platforms.

Number validation, carrier and line-type detail plus public footprint scanning.

Passive collection of emails, hosts and staff names from search engines and certificate logs.

Subdomain enumeration from public search and certificate sources.

Fast passive subdomain enumeration across dozens of public sources.

Passive attack-surface mapping and DNS enumeration for a domain estate.

Modular reconnaissance framework driven headlessly for hosts and contacts.

Recursive OSINT scanner mapping subdomains, hosts and addresses behind a domain.

Extracts links, endpoints and parameters from a target's pages.

Searches public GitHub code and commits for leaked keys and target references.

Scriptable OSINT framework correlating certificate logs and public sources.

Reads embedded metadata such as camera, GPS and author from hosted files. Local tool — no API key required.

Bulk DNS resolution of discovered hosts.

Live web host probing, titles and technologies.

Fast port discovery on authorised public hosts.

ASN to IP range mapping.

Archived URLs from the Wayback Machine.

Archived URLs from Wayback, Common Crawl and others.

RDAP client for domain, IP and ASN registration records.

TLS certificate and handshake details from live hosts.

Light service/version detection on ports already found open; no scripts, OS or UDP scans.

Internal helper that expands and bounds CIDR ranges before scanning.

Correlation-rule design and entity/event modelling for automated OSINT.

Approach to enriching an email address into linked public account artefacts.

Optional external archive/search adapter for operators with their own API access.

Subdomain discovery via public certificate logs.

Archived snapshot index from the Internet Archive.

Public scan history for domains and URLs.

Domain and IP reputation and passive DNS.

Premium breach-exposure source; password and hash fields are discarded.

Premium domain email-pattern discovery.

Premium breach presence checks.

New premium module (4 gold credits per search, or included with Premium Unlimited): breach exposure for an email address via the XposedOrNot API+ service — breach names, dates, affected sites, exposed data classes, record counts and password risk.

Host, banner and exposure data for public IPs (manual launches only).

Free passive lookup of open ports, hostnames and known CVEs for public IPs.

Routing, prefix and network-owner data for IPs and ASNs.

Passive network and approximate location context for public IPs.

DNS-over-HTTPS resolution for MX, A and TXT record recon.

Avatar and profile discovery from email hashes.

UI runtime.

Routing, data loading and server functions.

Design-token styling layer.

Accessible component primitives.

Iconography.