Universal Username Search

Universal Username Search

An enterprise-grade, high-performance OSINT username intelligence and digital footprint investigation plugin that scans and verifies whether a handle exists across 1,010+ platforms globally. Powered by unified WhatsMyName, Sherlock, Maigret, and Enola datasets with strict dual-contract verification (HTTP status + response body markers) and Rust-powered Chrome TLS fingerprinting to eliminate false positives and bypass bot walls.

The ultimate high-performance, unlimited alternative to Apify Username Checker ($0.005/event), Apify Watson, slow command-line tools, and shallow status-code-only scrapers.

🎯 Target Audience

• OSINT Investigators & Intelligence Analysts: Map target digital footprints, discover hidden online identities, cross-reference aliases, and uncover obscure forum accounts in seconds.
• Cybersecurity & Red Team Professionals: Enumerate attack surfaces, detect credential stuffing risks, monitor employee exposure, and identify social engineering vectors.
• Brand Protection & Trademark Managers: Detect brand impersonators, squatters, fake company profiles, and phishing handles across global social networks and marketplaces.
• Content Creators & Digital Marketers: Secure handles across all major platforms, audit alias availability, and protect personal brand equity.
• Recruiters & Talent Acquisition Teams: Discover candidate open-source contributions, developer portfolios, tech community accounts, and creative profiles.
• Fraud Prevention & Compliance Teams: Verify identity claims and perform digital due diligence during background investigations.

🚀 Key Features

1. 1,010+ Unified Global Platforms

Consolidates the most battle-tested datasets in the OSINT community (WhatsMyName, Sherlock, Maigret, Aliens_eye, Enola) into a deduplicated, verified database spanning 20+ specialized categories:

• Social & Messaging: Twitter/X, Instagram, Facebook, Reddit, TikTok, Snapchat, Telegram, Threads, Bluesky, LinkedIn, Pinterest, Tumblr, Mastodon, Signal, VK, Discord.
• Developer & Tech: GitHub, GitLab, Bitbucket, HackerOne, Replit, LeetCode, Codeforces, Kaggle, Docker Hub, npm, PyPI, Stack Overflow, Codecademy, Hashnode, Dev.to.
• Creative & Portfolio: Behance, Dribbble, ArtStation, DeviantArt, Unsplash, Flickr, 500px, VSCO, Wattpad, Imgur, Giphy, SmugMug, Cara.
• Gaming: Steam, Xbox, PlayStation, Roblox, Minecraft, Twitch, Chess.com, Lichess, Itch.io, Speedrun, FACEIT.
• Video & Audio: YouTube, Vimeo, Dailymotion, Kick, Rumble, Odysee, Spotify, SoundCloud, Bandcamp, Last.fm, Audiomack.
• Business & Commerce: Freelancer, Product Hunt, Gumroad, Buy Me a Coffee, Patreon, Fiverr, Ko-fi, eBay, Etsy, Poshmark.
• News, Blogs & Lifestyle: WordPress, Blogger/Blogspot, Substack, Medium, Duolingo, Strava, Goodreads, MyAnimeList, Letterboxd, Trello, Keybase.

2. Dual-Contract Verification Engine

Traditional tools only check HTTP status codes, producing massive false positives on modern Single Page Applications (SPAs) and servers that return HTTP 200 for missing accounts. This plugin verifies every probe against three strict contracts:

1. HTTP Status Code: Must strictly match the platform's e_code (e.g. 200).
2. Existence Marker (e_string): Response body must contain verified positive tokens (e.g., canonicalBaseUrl, data-target="UserProfile", "id":).
3. Missing Marker (m_string): Response body must NOT contain error signatures (e.g., 404 Not Found, User not found, profile does not exist).

3. Rust-Powered TLS Fingerprint Spoofing (impit)

Standard Node.js HTTP clients (axios, node-fetch, got) use Node's OpenSSL stack, which is instantly blocked by Cloudflare, Akamai, and Datadome TLS fingerprinting (JA3/JA4). This engine runs on impit (Rust reqwest core with native Chrome TLS handshakes and HTTP/2 multiplexing) to query protected platforms without triggering WAF challenge screens.

4. Parallel Dispatch with Adaptive Concurrency & Jitter

Configurable parallel workers (1 to 50 concurrent checks) powered by p-limit and random micro-jitter delays (0–200ms) enable scanning all 1,010+ platforms in under 5 minutes without tripping network rate limiters or exhausting local sockets.

5. Clean Profile URL Resolution

Unlike raw datasets that output internal API endpoints or fallback homepages, this engine guarantees clean, canonical user profile links (e.g. https://developer.apple.com/forums/profile/username instead of bare https://developer.apple.com).

6. Granular Filter Controls

Includes fine-grained settings to tailor runs for any workflow:

• Category Filter: Restrict scans to specific domains (e.g., coding, social, gaming).
• Bot-Protection Toggle (skipProtected): Exclude heavily guarded sites to optimize run speeds.
• NSFW Toggle (skipNsfw): Filter adult platforms to ensure enterprise and brand safety compliance.
• Availability Mode (includeNotFound): Save both taken and available status rows for name registration audits.

📊 Comparison with Paid Alternatives

⚙️ How to Configure Your Job

Example Input Configuration

{
  "username": "johndoe",
  "concurrency": 50,
  "skipProtected": false,
  "skipNsfw": true
}

📋 Output Data Fields

💡 Example Output

[
  {
    "username": "mathanmithun",
    "platform": "GitHub",
    "category": "coding",
    "url": "https://github.com/mathanmithun",
    "found": true,
    "status": 200,
    "matchStatus": "found",
    "protected": false
  },
  {
    "username": "mathanmithun",
    "platform": "YouTube",
    "category": "video",
    "url": "https://www.youtube.com/@mathanmithun",
    "found": true,
    "status": 200,
    "matchStatus": "found",
    "protected": false
  },
  {
    "username": "mathanmithun",
    "platform": "Instagram",
    "category": "social",
    "url": "https://www.instagram.com/mathanmithun/",
    "found": true,
    "status": 200,
    "matchStatus": "found",
    "protected": false
  },
  {
    "username": "mathanmithun",
    "platform": "Snapchat",
    "category": "social",
    "url": "https://www.snapchat.com/add/mathanmithun",
    "found": true,
    "status": 200,
    "matchStatus": "found",
    "protected": false
  },
  {
    "username": "mathanmithun",
    "platform": "PayPal.Me",
    "category": "finance",
    "url": "https://www.paypal.com/paypalme/mathanmithun",
    "found": true,
    "status": 200,
    "matchStatus": "found",
    "protected": false
  },
  {
    "username": "mathanmithun",
    "platform": "Replit",
    "category": "coding",
    "url": "https://replit.com/@mathanmithun",
    "found": true,
    "status": 200,
    "matchStatus": "found",
    "protected": false
  },
  {
    "username": "mathanmithun",
    "platform": "HuggingFace",
    "category": "tech",
    "url": "https://huggingface.co/mathanmithun",
    "found": true,
    "status": 200,
    "matchStatus": "found",
    "protected": false
  },
  {
    "username": "mathanmithun",
    "platform": "Apple Developer",
    "category": "coding",
    "url": "https://developer.apple.com/forums/profile/mathanmithun",
    "found": true,
    "status": 200,
    "matchStatus": "found",
    "protected": true
  }
]

💡 Common Use Cases

• Digital Footprint & Person of Interest Mapping: Rapidly discover all social handles, forum profiles, coding repos, and community accounts registered by an email prefix or handle.
• Brand Name Availability & Protection: Audit new product or company names across 1,010+ platforms prior to commercial launch to secure handles and prevent brand squatting.
• Fraud & Anti-Impersonation Auditing: Uncover fraudulent or copycat accounts using brand or executive names to conduct phishing or scam campaigns.
• Candidate Tech Profile Scouting: Identify developer contributions on GitHub, Stack Overflow, LeetCode, and Kaggle during technical recruitment.
• Creator Alias Audits: Allow content creators to verify cross-platform handle consistency before publishing content or launching merchandise.