Read the whole thing before you pay for anything.

Username Sweep — 6 accounts found

Every one of the 60 curated sites was requested on October 5, 2026 at 14:22 UTC and its response classified by content, not just status code. The numbers above always sum to 60 — nothing is silently dropped, and nothing is silently counted.

This is a sample. The target is fictional and every identifying field is redacted. Everything else — the structure, the labels, the caveats — is identical to a paid report.

Summary

A public account exists under the target username on 6 of the 60 sites checked. Three of those hits are on sites whose detection was hand-verified against known accounts in the October 2026 benchmark and are labelled benchmark-verified. Three are real responses from sites not yet hand-verified and are labelled unverified.

48 sites returned a definitive “no such profile.” 5 blocked or throttled the automated check and are listed on page 4 as inconclusive — excluded from results, never counted as evidence either way. 1 module was pulled by the weekly health-check before the scan and is listed for transparency.

• Found ≠ yours. Same username on two platforms is frequently two different people.
• Not found ≠ doesn't exist. Private, renamed, or deleted accounts are invisible to any scan.
• Inconclusive ≠ clean. A site that blocked the check proves nothing — in either direction.

Accounts found — 6

“Benchmark-verified” means the detection rule for that site was hand-verified against known accounts in our Oct 2026 benchmark. “Unverified site” hits are real profile responses from sites we haven't hand-verified yet — treated as leads, not conclusions. Every profile link above is live and clickable in the delivered PDF.

Inconclusive — 5 sites blocked the check

No account on 48 sites — including Pinterest, YouTube, Docker Hub, npm, Twitch, and PayPal — returned a definitive “profile does not exist” response. The full 48-site list ships in the appendix of every paid report, so you can verify the negative yourself.

Pulled by health-check: Tumblr's module was pulled by the weekly health-check on Oct 3 after the site changed its response format. It was skipped for this scan and is listed here rather than silently dropped — that's what the health-check is for.

Upgrading to an email report — $19

An email order (LO-F) includes every page in this dossier, with the part before the @ checked as a username across the same 60 sites. On top of that, we're finishing a direct check of the address itself against public registration and password-recovery endpoints, using holehe (open source, GPL-3.0) — built, isolated, and disclosed on our methodology page, but not switched on yet.

When it goes live, an email report will add: which platforms treat the address as a registered account (with the same found / inconclusive discipline as this page), and any masked recovery hints those endpoints reveal — no more, no less. We don't flip the switch and quietly change the product; the methodology page will say so first.

Limitations, stated loudly

• Existence ≠ identity. This report documents that an account exists under a handle. It does not and cannot tell you who operates it. The same username on two platforms is frequently two different people.
• Absence proves nothing. Private, renamed, suspended, or region-locked accounts are invisible to every scanner on earth — ours included.
• This is a snapshot. True at the stamp, decaying after. Sites change their defenses weekly — that's why every report carries its scan date and every module carries a health-check.
• Inconclusive is not “clean.” Five sites blocked this scan. Their absence from the results means “we could not check,” never “nothing there.”
• Corroborate before you act. Anything you plan to act on deserves an independent second signal. One report — ours or anyone's — is a lead, not a verdict.
• Authorized, defensive use only. Vetting a seller, a date, a hire, an applicant — fine. Harassment, stalking, or doxxing is refused and refunded, per our terms.

Methodology — the short version

Reports are produced by user-scanner, an open-source engine (MIT) run in library mode on our own infrastructure. For each of the 60 curated sites, the engine requests the public profile URL and classifies the response content — not just the HTTP status, because sites like paypal.me and fiverr return 200 for profiles that don't exist.

• Found — a live, public profile exists under the handle.
• Not found — the site definitively reports no such profile.
• Inconclusive — blocked, throttled, or errored. Never counted as evidence either way.

Every week, a health-check re-tests every module against a handle that exists nowhere (any module claiming it is pulled immediately) and control accounts that definitely exist (a module that misses one is flagged and pulled). Aggressive bot-walled platforms — reddit, facebook, instagram, tiktok — stay off the list until each passes individual verification. Your report link lives for 90 days, then the report and the searched handle are purged.