+91 98700 56050
We started with two things.
Not a name. Not a password. Not a login. The two identifiers you hand to a delivery driver, a hotel desk and a loyalty form without thinking.
This is how other people have you saved.
Ten ways your number sits in strangers' phones. One records the date someone met you. One calls you brother. You typed none of them. Anyone who queries this number inherits all ten — including who is close enough to you to drop the surname.
Fact. Caller-identification name history for +91 98700 56050. Current: “sagar tanna”.
Your face is on 32 websites.
Seventy-three matches to one photograph, eighteen above ninety per cent, across thirty-two domains. Enough frames, angles and lighting for a face model — which is the raw material a voice-and-video impersonation now needs.
Probabilistic. Face matching returns leads, not proof. The eighteen high-confidence hits are strong; the tail should be verified by hand.
Atharva College of Engineering — B. Information Technology
St Sebastian Goan High School
Your school, your college, and an income figure you never disclosed.
School, college, executive programme, tenure to the month. And an income estimate published beside your name as though you had confirmed it. Whether it is accurate matters less than who reads it and what they decide you are worth.
Self-reported roles and schools from public profiles. The salary is an estimate — which is the point. It's out there whether it's right or not.
The internet has two answers for your age. One is a security question.
One source estimates twenty-three. A username you chose in 2018 suggests 1983. Date of birth is a standard identity check on a bank helpline — and you published a candidate for it yourself, in a username, eight years ago.
Inference on both sides — which is why the evidence is shown, not just the answer.
Two reviews put you on a street corner.
Two hundred metres apart in Lower Parel, two years apart, one posted at 2:04 in the morning. Cross them with the office address from the registry filing and the overlap is not a neighbourhood. It is a building.
Fact: the reviews, posted by a Google profile tied to this identity. Inference: the neighbourhood they point to.
Your number answers questions you were never asked.
Six years on the same number. Never recycled. A call on fifty-six of the last sixty days. To a fraud team deciding whether a caller is really you, those facts read as proof of identity — which is precisely why they are worth stealing.
Gujarat is where the SIM was issued — not where you live. Everything else says Mumbai. One source even tags the number “likely a business”. The contradictions are flagged, not resolved for you.
Eight domains. One of them is a person's name.
Between 2014 and 2016 this email registered eight domains through the same registrar. Seven are companies and causes. The eighth is a first name — and it reappears three sections from here, in a government filing, as a person living at your address.
Mumbai 400013, Maharashtra
One email. One office. Five people.
Your email is filed in a corporate registry against five individuals at one address. Four of them are not you. Two share your patronymic. One matches a domain this same email registered in 2016.
Fact: five records, one shared address, one matching domain. Inference: that these are family. We show you the reasoning. Someone building a pretext would simply assume it and be right often enough.
All of it, from two identifiers.
Everything so far, as one picture. Every line is a reason a fragment was attributed to you — and a route someone else could walk in the opposite direction.
Seventeen doors, and you stopped watching most of them.
A Goodreads profile with nothing on it, still carrying your name. A fitness account silent since 2018 and still open. Every dormant account is a live password-reset route into this email, and nobody is watching any of them.
An empty account is not harmless. It confirms the identifier is live, and it is one more door left unlocked. Every one of these is listed in full below.
MyHeritageemail, password
Zoomcaremail, phone, handle, password
IIMJobsemail, name, phone
MGM Resortsemail, name, address
Paytmemail, name, phone
Epikemail, personal dataEleven times, your details left the building.
Three carried password data. Not plaintext — but in the same row as your email, your phone and a reusable handle, which is all a credential-stuffing run needs to try you against every service you still use.
The password above is a placeholder. The real records held a bcrypt and a SHA-1 hash. A real product would never display either. What matters is the shape of the row.
Nine years, and the last entry is today.
The first leak was May 2017. The most recent activity is dated today. Nothing on this page has expired, and nothing on it is going to.
None of this required breaking anything. Which is why it is fixable.
No password was guessed. No system was breached. No law was broken. Two identifiers, public sources, and a few minutes. The only unusual thing that happened here is that you were shown the result.
You cannot unpublish a registry filing or recall a breach. You can break the chain — and the chain only has four links.
Nothing here needs a security team or a budget. The reason the chain works is not that it is sophisticated — it is that nobody had looked.