Introduction
In open source intelligence (OSINT), tracking and connecting online identities is paramount.
Usernames, often reused across different platforms, can be the key to uncovering a wealth of information about individuals.
In this article, I will explore the power of WhatsMyName, share insights from my daily use, discuss areas for improvement, and provide best practices for incorporating this tool into your OSINT toolkit.
Step 1: Go to the website Whatsmyname.app
Step 2: Enter a username of interest
NSFW (Not Safe for Work)
This filter option is enabled by default. Depending on your investigation, you may want to turn it off.
Step 3: Click on the magnifying glass in green button to search.
Results are displayed on the left side, and when clicked, they will open the website where the username is being used.
The Significance of Username Investigations
Usernames are crucial in OSINT investigations because they often provide a consistent link between different online profiles and activities.
Many individuals reuse the same or similar usernames across multiple platforms, making it possible to piece together their online presence and gain valuable insights.
Usernames can also reveal a lot of personal information.
- Jonsmith81: Possibly the user's name and birth year.
- Sea-doo88: Likely a hobby and birth year.
- Pnw_604: Potentially the user's location and area code.
- Laura.g.tattooist: Likely the user's name and occupation.
An Overview of WhatsMyName
WhatsMyName simplifies finding usernames across 640+ online resources.
Tip:As an OSINT Investigator, you must verify the information to ensure it's the same individual using that username.
Remember, enumeration does not equal validation.
Enumeration ≠ Validation
WhatsMyName, developed by Micah Hoffman and Chris Poulter, has also received contributions from many others who have submitted websites to be included.
Anyone can contribute by suggesting new sites for the tool, implementing support for new sites, or fixing existing site implementations.
Key Features
- Platform Coverage: WhatsMyName searches numerous platforms, including social media sites, forums, and online communities.
- Search Capabilities: It allows users to conduct efficient and thorough searches, saving valuable time.
- User-Friendly Interface: The tool is straightforward to use, making it accessible even to those new to OSINT.
- Export Options: WhatsMyName also allows the export of results to CSV or PDF formats.
How I Use WhatsMyName
As an OSINT investigator, I use WhatsMyName almost daily.
Its ability to quickly locate usernames across various platforms has been instrumental in many of my cases. For instance, during an OSINT investigation, I assisted with tracking down an individual wanted by law enforcement.
Using WhatsMyName, I found profiles on multiple social media sites, including their Tinder profile, which featured several photos and mentioned their workplace.
After verifying it was my target, I provided investigators with crucial information that led to the person's arrest.
This case underscores the usefulness of WhatsMyName in OSINT investigations.
Here's an example screenshot from Tinder (not part of my investigation), which even includes his workplace.
What Else Can Be Included in the Future?
While WhatsMyName is already an excellent tool, its continued development and expansion could further enhance its utility for the OSINT community.
Expanding its reach to include more niche platforms such as Cash App would be beneficial.
I learned a quick OSINT tip using the Cash App from Griffin Glynn, aka thehatless1der on X (Twitter), allowing you to find a hidden profile picture.
Read about it here: https://hatless1der.com/osint-quick-tips-that-cashapp-qr-code-on-the-web-might-actually-be-hiding-a-profile-photo
I also made a video about it as well:
Including the Cash App could be especially useful for investigating lesser-known online communities where individuals are active and information may be available. For instance, finding a photo of the target can significantly benefit the investigation.
Enhancing Your OSINT Toolkit with WhatsMyName
I’m sure it's clear by now that WhatsMyName is an indispensable part of my OSINT toolkit.
Here are some best practices for incorporating it into your investigative workflow:
- Consider the username portion when encountering an email address, as it can offer valuable information.
- Always cross-reference and verify the results from WhatsMyName with other sources to ensure accuracy.
- Use this Username Attack Surface by Sinwindie on X (Twitter): https://www.osintdojo.com/diagrams/username
It provides a quick overview of what to look for during username research and a framework for the available leads to extract as much information from a target as possible.
- Combine WhatsMyName with other OSINT tools to create a comprehensive investigative strategy.
For example, using it alongside tools like Maltego can help visualize connections and uncover deeper insights. - Always make sure you capture your findings using Forensic OSINT.
Conclusion
WhatsMyName is a powerful tool that every OSINT professional should have in their OSINT toolbox.
Its ability to quickly locate and link usernames across various platforms is invaluable for my online investigations.
For more detailed guidance on using WhatsMyName during your investigation, I recommend visiting our Knowledgebase: WhatsMyName - Forensic OSINT Knowledgebase.
Enhance your investigative effectiveness by incorporating WhatsMyName into your daily routine.
