Most OSINT investigations start in the same two places: Facebook and LinkedIn.

That's exactly why they often stall out.

Here's the thing — a David Smith with a locked-down profile tells you nothing. But the same person's old Coderwall account, a forgotten Leetcode ranking, or a Docker Hub project can hand you their skills, location, and real name on a plate.

Developer sites aren't an afterthought in an investigation. They're often the entry point everyone skips — because people don't guard their "hobby project from 10 years ago" the way they guard their social profiles.

And it goes deeper than avatars and bios. Source code itself can leak domains, employers, and even email addresses buried in commit history — the kind of thread that, pulled correctly, unravels into an entire chain of linked identities.

The catch? Some of these profiles are goldmines. Others are completely empty. Knowing which technical platforms are worth your time (and your AI agent's tokens) before you dig in is the difference between a breakthrough and a dead end.

We broke down exactly which developer sites matter, what they leak, and the one GitHub feature most investigators overlook.

👇 https://noimosiny.com/resources/blog/not-just-github