Identity360 Report | Digital Footprint Intelligence

image.png

The platform available atΒ dash.niamonx.io/identity360_report

Overview of the Service

Digital Footprint Intelligence is an advanced identity intelligence tool within the NiamonX platform. The main report generated by this module is called Identity360 Report.

Identity360 Report provides a unified digital identity overview by combining results from multiple NiamonX intelligence modules:

The tool is designed to help individuals, cybersecurity analysts, SOC teams, compliance departments, investigators, and authorized security professionals understand how a specific email address or username appears across public breach datasets, stealer log evidence, public account traces, username reconnaissance sources, and Google ecosystem signals.

The report is built as a consolidated identity profile. Instead of checking each module manually, the user starts one report and receives a structured overview of exposure, related identifiers, public accounts, evidence links, breach blocks, ULP records, and analytical risk indicators.

πŸ” How the Report Works

When a user creates an Identity360 report, the platform starts a multi-module investigation for the submitted target.

Supported target types:

For email-based targets, the system may also derive the email local part and run username-focused modules against it as a correlation lead.

For example, if the target is:

example.name@domain.com

the platform may also check:

example.name

This derived username should be treated only as a correlation lead, not as confirmed ownership.

One billed request starts the report. After that, the browser checks the report progress through AJAX polling every few seconds. Status checks do not consume additional daily tool quota, and polling stops permanently after the final report is ready.

This design allows long-running intelligence modules to continue processing while the user sees real-time progress inside the interface.

🧩 Main Purpose

Identity360 Report helps answer questions such as:

The tool is especially useful for identity exposure analysis, account compromise investigation, personal digital footprint review, employee risk monitoring, and incident response.

βš™οΈ Report Creation Interface

The report creation interface includes the following main elements.

Available Requests Today

Shows the number of remaining report requests available under the current plan.

Example format:

Available requests today
597 / 600
Used today: 3
Plan: Sentinel
Date: 2026-06-17

Create Report

Starts a new Identity360 report.

Target Type

The user selects or enters an email address or username.

Supported examples:

user@example.com

username

Email Local-Part Correlation

For email targets, the system can also run username modules against the email local part.

This is useful because many users reuse the same nickname across multiple public platforms.

However, these matches must be interpreted carefully.

A username match does not automatically prove that the account belongs to the same person.

πŸ“Š Report Progress

After the report starts, the interface displays processing status.

Example status elements:

Processing report… 60%
Report ID: ************
Executive summary: running

The report may show:

The report is considered final only after all required modules finish, fail, or are skipped according to the backend state.

🧠 Processing Modules

Identity360 Report combines several intelligence modules into one unified profile.

Public Breached Search

Public Breached Search checks indexed public breach datasets for the submitted target.

It may return:

This module is useful for understanding whether the target appears in historical public breach collections.

ULP Account Search checks stealer-log and ULP-style account evidence by email or username.

It may return:

This module is especially important because ULP records may indicate that credentials were captured from infected devices, browser storage, or other compromise sources.

Alias Radar

Alias Radar performs detailed username reconnaissance across public platforms.

It may return:

When Alias Radar is run from an email local part, matches should be treated as possible correlation leads rather than confirmed identity ownership.

Google Footprint

Google Footprint checks public Google account and Google ecosystem signals.

It may return:

If the module is skipped, pending, or incomplete, the report should clearly show that Google Footprint data is not available yet.

CrossTrace

CrossTrace performs fast public account-presence checks by email or username.

It may return:

CrossTrace is useful for fast identity correlation across public platforms.

πŸ“Œ Executive Summary

The Executive Summary provides a high-level interpretation of the report.

It may include:

The summary helps users quickly understand whether the target has low, medium, high, or critical exposure.

🚨 Analytical Risk Score

Identity360 Report includes an Analytical Risk Score.

The score is calculated from multiple risk drivers, such as:

Example risk levels may include:

A critical score means that the report contains strong exposure indicators, such as credential-related records, multiple breach appearances, or high-confidence public identity traces.

The risk score is an analytical indicator. It should support investigation, not replace human validation.

πŸ‘€ Profile Summary

The Profile Summary aggregates identifiers discovered during the report.

Possible identifier types include:

This section helps analysts understand the broader digital identity graph connected to the target.

🌐 Public Accounts and Traces

The Public Accounts and Traces section displays public profile or account-presence findings.

A result may include:

Field Description
Platform Name of the detected service or platform
Category Social, media, Google, other, or another category
Display name Public name found on the platform
Username Username or handle, if available
Source module Alias Radar, CrossTrace, or another module
Confidence Estimated confidence score
Profile link Link for manual validation

Confidence scores help analysts prioritize review.

For example:

Public account traces do not always prove ownership. They should be validated before being used in legal, compliance, or operational decisions.

🧱 Breach Exposure

The Breach Exposure section summarizes public breach dataset appearances.

It may include:

A breach block represents a structured group of fields from a particular breach source or collection.

Credential blocks are especially important because they may contain password-related evidence or login-related exposure.

πŸ” ULP Account Evidence

The ULP Account Evidence section shows stealer-log or ULP-style account records connected to the target.

It may include:

Column Description
Date Indexed or observed date
Host Related service, domain, or application
Identity Matched email or username
Password Password field, if available and permitted
URL Evidence or related service URL

The section may also show summary counters:

ULP evidence should be considered high-risk because it may indicate credential capture, malware compromise, browser credential theft, or reused credentials.

πŸ”Ž Filtering and Review

The report interface may include filters for accounts, traces, records, and evidence.

Users can review:

Filtering helps analysts focus on the most relevant signals, especially in large reports with many records.

🧾 Clean Report JSON

Identity360 Report can expose a clean structured JSON representation of the report.

This JSON may include:

Clean JSON is useful for:

Sensitive values should be masked or protected depending on user permissions, session security, and export policy.

πŸ•’ Timeline

The report may include a timeline of discovered events and sources.

Timeline entries may include:

This helps analysts understand the chronological order of exposure indicators.

For example, ULP evidence dated recently may require more urgent response than older historical breach appearances.

πŸ–ΌοΈ Photos and Avatars

Some modules may detect public profile images or avatars.

These may come from:

Profile images are useful for manual correlation, but they must not be treated as proof of identity without additional evidence.

🧠 Correlation Logic

Identity360 Report is built around correlation, not blind certainty.

The system combines multiple signal types:

Strong findings usually come from multiple independent signals pointing to the same target.

Weak findings may be useful leads but should be validated before action.

πŸ” Password and Sensitive Data Handling

Some records may contain password evidence or other sensitive fields.

Users must handle this data carefully.

Passwords and sensitive values must only be used for:

Users must not:

When screen sharing, reporting, or exporting, sensitive values should be masked unless full visibility is strictly required and authorized.

πŸ›‘οΈ Security, Privacy & Ethics

Digital Footprint Intelligence is intended for lawful security work and authorized identity exposure analysis.

Acceptable use cases include:

Users must follow strict rules:

Abuse of the system may result in account restriction, suspension, or termination.

When the report shows meaningful exposure, users should follow a structured response process.

1. Review the Executive Summary

Start with the risk score, risk level, and risk drivers.

2. Check Credential Blocks

Prioritize breach blocks that contain credential exposure.

3. Review ULP Evidence

ULP records with passwords should be treated as high priority.

4. Validate Public Accounts

Check public accounts and traces manually before drawing conclusions.

5. Reset Exposed Passwords

Reset affected passwords and remove reused credentials.

6. Enable MFA

Enable or enforce multi-factor authentication on affected accounts.

7. Review Login History

Check account activity, IAM logs, SSO events, VPN access, email logs, and cloud service logs.

8. Check for Password Reuse

Identify whether exposed passwords were reused across corporate or personal accounts.

9. Notify Affected Users

Notify the affected person or internal team when appropriate and legally permitted.

10. Save Evidence Securely

Store the report only in secure internal systems with restricted access.

11. Continue Monitoring

Repeat checks periodically or enable continuous monitoring for high-risk identities.

βš™οΈ Technical Highlights

πŸ“Œ Usage Hints

πŸ“¬ Contact Information

support@niamonx.io β€” Technical Support
other@niamonx.io β€” General Inquiries
takedown@niamonx.io β€” Data Removal / Privacy Takedown Requests
legal@niamonx.io β€” Legal and Compliance Matters

Alternative contact channel:

πŸ”— Helpdesk: https://support.niamonx.io/

Summary

NiamonX Digital Footprint Intelligence / Identity360 Report is a unified identity exposure report that combines breach intelligence, ULP account evidence, public username reconnaissance, Google ecosystem signals, and public account tracing into one structured profile.

The tool helps users understand whether an email or username is connected to public breaches, credential exposure, stealer-log records, public accounts, evidence links, and cross-platform identity traces.

It is designed for lawful defensive cybersecurity, personal exposure checks, employee risk monitoring, incident response, compliance review, and digital footprint analysis. All findings should be validated before action and handled as sensitive security intelligence.

Revision #1
Created 17 June 2026 19:01:12 by NiamonX Team
Updated 17 June 2026 19:03:46 by NiamonX Team