GDE-056 |
Blackbird OSINT | |||||||
Username and email correlation | ||||||||
September 2026 | ||||||||
01
What it is
Blackbird is the practice of using the open-source Blackbird tool to search a username or email address across more than 600 platforms at once, using WhatsMyName's community-maintained site list to keep false positives low, and exporting the results as a polished report rather than checking each platform by hand.
Blackbird is a free, open-source Python tool that checks a username or email address against more than 600 platforms, leaning on the community-maintained WhatsMyName site list to keep its false-positive rate low. Results can be exported as PDF, CSV or through a dedicated HTTP mode, and the tool includes AI-assisted profiling of what it finds, all run from a single command-line interface.
It sits in the same category as Sherlock, Maigret and Tookie-OSINT, and is frequently compared to them for its speed and its combined username-and-email search in one pass, rather than requiring two separate tools.
| When to use this guide
|
02
How do you run a Blackbird search?
Six steps from a first fast pass through to a defensible, exported report.
The following tools are used across the steps below.
Blackbird: Free, open-source. Searches a username or email address across 600-plus platforms from a single command-line tool.
WhatsMyName: Free, open-source. The community-maintained site list Blackbird draws on to reduce false positives.
| Before you begin Stop at the login. Blackbird only queries public profile pages and public site APIs; it does not log into any platform, and no credentials are required for the target account or the investigator. Legal considerations. Blackbird's own documentation states plainly that neither the author nor any host bears responsibility for misuse, and that any resulting damage from using the tool is the user's responsibility, not the developer's. Extracted account data is personal data under GDPR and equivalent frameworks; document a lawful basis before running a search and do not retain results beyond the active investigation period. |
Run python blackbird.py --username target. The search draws on the WhatsMyName site list to keep the false-positive rate low compared with a naive check.
Run python blackbird.py --email [email protected] if an email address is already in hand, since Blackbird handles both identifier types natively.
Use Blackbird's filtering options to narrow the platform list by category or region where the investigation has a known focus, rather than reviewing all 600-plus results by hand.
Blackbird's optional AI-powered profiling summarises what it found; treat this as a triage aid pointing to the most promising hits, not as a verified finding in itself.
Run the same identifier through Sherlock or Maigret and compare results, since each tool draws on a different underlying site list and can surface different platforms.
Use Blackbird's export options to generate a polished report directly, rather than manually compiling console output.
|
03
What are the pitfalls of a Blackbird search?
A fast, broad tool trades some precision for speed, and its own AI summary is a starting point, not a verified finding.
A large hit count mistaken for high confidence: checking 600-plus platforms at once increases the chance of at least one coincidental match on a generic username. Verifying check: manually confirm any hit central to the investigation directly on the platform before relying on it.
The AI profile summary mistaken for a verified finding: the built-in AI analysis summarises raw results but does not independently verify them. Verifying check: treat the summary as a prioritisation aid and review the underlying hits yourself.
A WhatsMyName gap mistaken for a clean result: Blackbird's low false-positive rate depends on the WhatsMyName list's current coverage, which does not include every platform that exists. Verifying check: treat an all-clear result as inconclusive for platforms outside that list, not as proof of absence.
Chain of custody: Blackbird's own documentation disclaims responsibility for misuse of its output, which makes careful record-keeping on your end more important, not less.
Export the PDF or CSV report with its generation timestamp rather than relying on console output alone.
Record which identifier, username or email, produced each finding.
Note whether a hit was manually verified on the platform or taken from Blackbird's output as is.
Record the WhatsMyName list version or date where available, since site coverage changes over time.
04
Go deeper
The Sherlock and Maigret guides Blackbird pairs with for cross-checking.
GUIDE · GDE-010
Sherlock OSINT: username pivoting beyond WhatsMyName
An independent existence check to corroborate a Blackbird hit.
GUIDE · GDE-051
Maigret OSINT: building a username investigation dossier
The deeper profile-extraction step after a fast Blackbird pass.
Evidentiary standard
Signal & Shadow operates to the LST-001 evidentiary standard. All claims are graded against the LST-001 v1.0.3 confidence tiers (Confirmed, Corroborated, Reported, Alleged) per the canonical voice and structural specification.
About Signal & Shadow
Signal & Shadow is an independent forensic investigation and methodology practice publishing tutorials, reference cards, and forensic dossiers for working practitioners. Founded by Derek Bowler.