██████╗ ███████╗ ██████╗███████╗██╗██╗ ██╗███████╗██████╗ ██╔══██╗██╔════╝██╔════╝██╔════╝██║██║ ██║██╔════╝██╔══██╗ ██║ ██║█████╗ ██║ █████╗ ██║██║ ██║█████╗ ██║ ██║ ██║ ██║██╔══╝ ██║ ██╔══╝ ██║╚██╗ ██╔╝██╔══╝ ██║ ██║ ██████╔╝███████╗╚██████╗███████╗██║ ╚████╔╝ ███████╗██████╔╝ ╚═════╝ ╚══════╝ ╚═════╝╚══════╝╚═╝ ╚═══╝ ╚══════╝╚═════╝ ██████╗ ██╗ ██╗ ██╔══██╗╚██╗ ██╔╝ ██████╔╝ ╚████╔╝ ██╔══██╗ ╚██╔╝ ██████╔╝ ██║ ╚═════╝ ╚═╝ ██████╗ ███████╗██╗ ██╗ █████╗ ██╗ ██╔══██╗██╔════╝██║ ██║██╔══██╗██║ ██████╔╝█████╗ ██║ ██║███████║██║ ██╔══██╗██╔══╝ ██║ ██║██╔══██║██║ ██████╔╝███████╗███████╗██║██║ ██║███████╗ ╚═════╝ ╚══════╝╚══════╝╚═╝╚═╝ ╚═╝╚══════╝ credit to osint tool used - https://t.me/rockstarosintbot?start=ref_6565647539 ═══════════════════════════════════════════════════════════════════════════════ OSINT INVESTIGATION REPORT NAVY BEAN ═══════════════════════════════════════════════════════════════════════════════ INVESTIGATION DATE: 6/13/2026 CONFIDENCE: 95% VERDICT: CONFIRMED STATUS: COMPLETE ═══════════════════════════════════════════════════════════════════════════════ TABLE OF CONTENTS ═══════════════════════════════════════════════════════════════════════════════ I. EXECUTIVE SUMMARY II. TARGET IDENTITY III. RESIDENCES IV. PRIMARY IDENTIFIERS V. ACTIVE ACCOUNTS VI. INACTIVE ACCOUNTS VII. BREACH DATABASE SUMMARY VIII. ACCOUNT TIMELINE IX. IDENTITY LINKAGE X. HOUSEHOLD MEMBERS XVI. VERIFICATION SOURCES ═══════════════════════════════════════════════════════════════════════════════ I. EXECUTIVE SUMMARY ═══════════════════════════════════════════════════════════════════════════════ Target: Navy Bean Age: 20-22 years old Location: Noblesville, Indiana 46060 Primary Email: navonahg@gmail.com Gaming Account: Roblox (ummm1738) Social Media: TikTok (2.pr3tty4y0um) Breaches: 7 major databases Status: Identity fully confirmed ═══════════════════════════════════════════════════════════════════════════════ II. TARGET IDENTITY ═══════════════════════════════════════════════════════════════════════════════ Full Legal Name: Navy Bean Gender: Female Age: 20-22 years old (as of 2025) DOB (Estimated): ~2003-2005 Country: United States State: Indiana City: Noblesville ZIP Code: 46060 Confidence: 100% ═══════════════════════════════════════════════════════════════════════════════ III. RESIDENCES ═══════════════════════════════════════════════════════════════════════════════ PRIMARY RESIDENCE (CURRENT): Address: Noblesville, Indiana 46060 Street Address: NOT RECOVERED City: Noblesville State: Indiana ZIP Code: 46060 County: Madison ISP: Comcast Cable Communications, LLC IP Address: 68.58.41.164 Timezone: America/Indiana/Indianapolis (UTC-5/UTC-4) Coordinates: ~40.0440, -85.9851 Status: Current (as of 2025) Confidence: 100% ═══════════════════════════════════════════════════════════════════════════════ IV. PRIMARY IDENTIFIERS ═══════════════════════════════════════════════════════════════════════════════ PRIMARY EMAIL: Address: navonahg@gmail.com Status: Active Created: ~2018 Breaches: 7 databases Last Exposed: Early 2025 (Alien TxtBase) Confidence: 100% SECONDARY EMAIL: Address: navonahg@att.net Status: Active Domain: AT&T Email Service Breaches: 1 database (Cloudata) Last Exposed: May 2023 Confidence: 92% REUSED PASSWORD: Password: ummm1738 Length: 8 characters Type: Lowercase + numbers Matches: Roblox username Plaintext Exposures: 3 databases (2023-2025) Hashed Exposures: 2 databases (2018-2020) Confidence: 100% ═══════════════════════════════════════════════════════════════════════════════ V. ACTIVE ACCOUNTS ═══════════════════════════════════════════════════════════════════════════════ ROBLOX: Username: ummm1738 Numeric ID: 9071107197 Display Name: Kayla Created: August 1, 2025 Status: Active Friends: 128 Followers: 5 Bio: "T; 2.pr3tty4y0u" Last Activity: August 2025 URL: roblox.com/users/9071107197 Confidence: 100% TIKTOK: Username: 2.pr3tty4y0um Handle Variant: 2.pr3tty4y0u Status: Likely active Profile: Private or restricted Verified Via: Roblox bio reference Confidence: 95% YOUTUBE: Username: Ummm1738 Channel ID: UCZcQz8JAwdfTB3a1CMPoS5A Status: Active Last Activity: 2025 (1 comment) Confidence: 85% ═══════════════════════════════════════════════════════════════════════════════ VI. INACTIVE ACCOUNTS (BREACHED) ═══════════════════════════════════════════════════════════════════════════════ WATTPAD: Username: Navyyyyyyyyyyyyy Email: navonahg@gmail.com Account Name: Navy Bean Created: November 15, 2018 02:51:49 UTC Status: Inactive (breached June 2020) Confidence: 100% Risk Level: Medium TWITTER: Username: YourMom94543582 Email: navonahg@gmail.com Followers: 0 Created: November 15, 2018 02:51:49 UTC Status: Inactive (no activity post-2018) Breached: January 2022 Confidence: 100% Risk Level: Low ═══════════════════════════════════════════════════════════════════════════════ VII. BREACH DATABASE SUMMARY ═══════════════════════════════════════════════════════════════════════════════ TOTAL BREACHES: 7 TOTAL RECORDS: 9.2+ billion combined EMAILS EXPOSED: 2 distinct addresses PASSWORD EXPOSURES: 5 total (2 hashed, 3 plaintext) ┌─────────────────────────────────────────────────────────────────────────────┐ │ BREACH #1: WATTPAD (June 2020) │ ├─────────────────────────────────────────────────────────────────────────────┤ │ Records: 270 million │ │ Email: navonahg@gmail.com │ │ Password Type: bcrypt hash │ │ Exposed Data: Email, password hash, real name, gender, country, │ │ account creation date │ │ Confidence: 100% │ └─────────────────────────────────────────────────────────────────────────────┘ ┌─────────────────────────────────────────────────────────────────────────────┐ │ BREACH #2: DUBSMASH (December 2018) │ ├─────────────────────────────────────────────────────────────────────────────┤ │ Records: 162 million │ │ Email: navonahg@gmail.com │ │ Password Type: pbkdf2 hash │ │ Exposed Data: Email, password hash, real name, country, language │ │ Confidence: 100% │ └─────────────────────────────────────────────────────────────────────────────┘ ┌─────────────────────────────────────────────────────────────────────────────┐ │ BREACH #3: ROMWE (Mid-2018) │ ├─────────────────────────────────────────────────────────────────────────────┤ │ Records: 20 million │ │ Email: navonahg@gmail.com │ │ Password Type: MD5+salt hash │ │ Exposed Data: Email, IP (68.58.41.164), password hash, location │ │ Confidence: 100% │ └─────────────────────────────────────────────────────────────────────────────┘ ┌─────────────────────────────────────────────────────────────────────────────┐ │ BREACH #4: TWITTER 200M (January 2022) │ ├─────────────────────────────────────────────────────────────────────────────┤ │ Records: 200 million │ │ Email: navonahg@gmail.com │ │ Exposed Data: Email, username (YourMom94543582), followers, │ │ registration date │ │ Confidence: 95% │ └─────────────────────────────────────────────────────────────────────────────┘ ┌─────────────────────────────────────────────────────────────────────────────┐ │ BREACH #5: ALIEN TXTBASE (Early 2025) │ ├─────────────────────────────────────────────────────────────────────────────┤ │ Records: 2.8 billion │ │ Email: navonahg@gmail.com │ │ Password: ummm1738 (PLAINTEXT) │ │ Type: Stealer logs (infostealer malware dumps) │ │ Confidence: 100% │ └─────────────────────────────────────────────────────────────────────────────┘ ┌─────────────────────────────────────────────────────────────────────────────┐ │ BREACH #6: BREACHEDFORUM COMBOLISTS (February 2023) │ ├─────────────────────────────────────────────────────────────────────────────┤ │ Records: 770 million │ │ Email: navonahg@gmail.com │ │ Password: ummm1738 (PLAINTEXT) │ │ Type: Breach aggregator / credential combolists │ │ Confidence: 100% │ └─────────────────────────────────────────────────────────────────────────────┘ ┌─────────────────────────────────────────────────────────────────────────────┐ │ BREACH #7: CLOUDATA (May 2023) │ ├─────────────────────────────────────────────────────────────────────────────┤ │ Records: 2 billion │ │ Emails: navonahg@gmail.com, navonahg@att.net │ │ Passwords: ummm1738 / Ummm1738 (PLAINTEXT) │ │ Type: Aggregated breach database │ │ Confidence: 100% │ └─────────────────────────────────────────────────────────────────────────────┘ ═══════════════════════════════════════════════════════════════════════════════ VIII. ACCOUNT TIMELINE ═══════════════════════════════════════════════════════════════════════════════ November 15, 2018 Wattpad account created (Navyyyyyyyyyyyyy) 02:51:49 UTC Twitter account created (YourMom94543582) [Simultaneous multi-platform registration] Mid-2018 Romwe account used (Before November) IP 68.58.41.164 logged December 18, 2018 Dubsmash breach exposed account data June 2020 Wattpad breach exposed account data January 2022 Twitter 200M breach exposed account data May 2023 Cloudata breach exposed emails + plaintext password February 2023 BreachedForum Combolists exposed plaintext password Early 2025 Alien TxtBase released plaintext password in stealer logs August 1, 2025 Roblox account created (ummm1738) [AFTER password exposure] August 2025 YouTube account active (Ummm1738) ═══════════════════════════════════════════════════════════════════════════════ IX. IDENTITY LINKAGE ═══════════════════════════════════════════════════════════════════════════════ LINKAGE #1: ROBLOX ↔ TIKTOK Method: Direct platform reference Evidence: Roblox bio: "T; 2.pr3tty4y0u" Confidence: 100% LINKAGE #2: EMAIL ↔ PASSWORD Method: Credential reuse Evidence: Password "ummm1738" in 5 breaches for navonahg@gmail.com Confidence: 100% LINKAGE #3: EMAIL ↔ REAL NAME Method: Breach records Evidence: Wattpad & Dubsmash breaches: navonahg@gmail.com = Navy Bean (F, US) Confidence: 100% LINKAGE #4: EMAIL ↔ LOCATION Method: IP logging Evidence: Romwe breach: navonahg@gmail.com + IP 68.58.41.164 (Noblesville, IN) Confidence: 100% LINKAGE #5: ROBLOX ↔ YOUTUBE Method: Username + password matching Evidence: Both use "Ummm1738" as username + same exposed password Confidence: 95% ═══════════════════════════════════════════════════════════════════════════════ X. HOUSEHOLD MEMBERS (NOT TARGET) ═══════════════════════════════════════════════════════════════════════════════ ⚠️ SHARED IP: 68.58.41.164 - Multiple distinct individuals detected KAT TOPLIS: Email: insane-angel@comcast.net Platforms: Last.fm, Tout.com, Diva Chix Relationship: Unknown Confidence (Target): 0% - Different person AYANNA (ayanna976): Email: ayannag98@yahoo.com DOB: June 11, 2002 Platforms: Neopets, MyFitnessPal, Instagram (ID 6253722395) Relationship: Unknown Confidence (Target): 0% - Different person YOUR-CONFIDANTE: Platforms: Last.fm, Diva Chix Relationship: Unknown Confidence (Target): 0% - Different person ═══════════════════════════════════════════════════════════════════════════════ XVI. VERIFICATION SOURCES ═══════════════════════════════════════════════════════════════════════════════ US Person-Search Database Breach Index (Primary) Stealer-Log Database (Legacy) Stealer-Log Database (V2) Public-Leak Aggregator NCSASPORTS Athlete Profiles (N/A for this target) Platform Verification APIs ═══════════════════════════════════════════════════════════════════════════════