search

sherlock-project / sherlock

Hunt down social media accounts by username across social networks
https://sherlockproject.xyz
MIT License
59.3k stars 6.8k forks source link

question: "has anyone checked the validity of the results by querying own credentials" ? #770

Closed maximlomans closed 4 years ago

maximlomans commented 4 years ago

i can confidently say i do not have a gotinder account, no wattpad , no facebook nor twitter account yet my gmail has, it seems .. But How ? are mx records publicly available, scrapers and spammer or there's some related connection to anyone i might have emailed or even called .. but the app/script doesn't run checks via "mxtools" ,"riskiq" or at "haveibeenpawned" it asks the sites themselves if members/users are registered and have a an actual account and page to access it.. right ?

i can only imagine how uncomfortable a situation one could land in by jumping to conclusions

sdushantha commented 4 years ago

has anyone checked the validity of the results by querying own credentials?

Yes, and I have found some false positives but they are in the processes of being fixed.