{ "subject": "Kofi Mensah", "scan_token": "karr_9cf8f810e2d2e91f80853876", "created_at": "2026-09-07 10:43:19", "digital_exposure_score": 67, "risk_level": "MODERATE", "risk_breakdown": { "id": 1, "scan_id": 1, "overall_score": 67, "identity_fragmentation_score": 58, "exposure_breadth_score": 72, "security_weakness_score": 65, "privacy_leakage_score": 70, "reputation_risk_score": 45, "explanation": "Your digital exposure sits at 67\/100 (Moderate). The primary factors driving exposure are cross-domain email usage, identity fragmentation across multiple public platforms, and demographic cues embedded within handles.", "created_at": "2026-09-07 10:43:19" }, "identifiers": [ { "id": 12, "scan_id": 1, "type": "domain", "value": "kofimensah.dev", "verification_status": "USER_PROVIDED", "metadata_json": null, "created_at": "2026-09-07 10:43:19" }, { "id": 4, "scan_id": 1, "type": "email", "value": "kmensah99@outlook.com", "verification_status": "USER_PROVIDED", "metadata_json": null, "created_at": "2026-09-07 10:43:19" }, { "id": 3, "scan_id": 1, "type": "email", "value": "kofi.m@techbridge.africa", "verification_status": "USER_PROVIDED", "metadata_json": null, "created_at": "2026-09-07 10:43:19" }, { "id": 2, "scan_id": 1, "type": "email", "value": "kofi.mensah@gmail.com", "verification_status": "USER_PROVIDED", "metadata_json": null, "created_at": "2026-09-07 10:43:19" }, { "id": 1, "scan_id": 1, "type": "name", "value": "Kofi Mensah", "verification_status": "USER_PROVIDED", "metadata_json": null, "created_at": "2026-09-07 10:43:19" }, { "id": 9, "scan_id": 1, "type": "profile_url", "value": "https:\/\/github.com\/kmensah", "verification_status": "USER_PROVIDED", "metadata_json": null, "created_at": "2026-09-07 10:43:19" }, { "id": 11, "scan_id": 1, "type": "profile_url", "value": "https:\/\/linkedin.com\/in\/kofi-mensah", "verification_status": "USER_PROVIDED", "metadata_json": null, "created_at": "2026-09-07 10:43:19" }, { "id": 10, "scan_id": 1, "type": "profile_url", "value": "https:\/\/x.com\/kofi_dev", "verification_status": "USER_PROVIDED", "metadata_json": null, "created_at": "2026-09-07 10:43:19" }, { "id": 5, "scan_id": 1, "type": "username", "value": "kmensah", "verification_status": "USER_PROVIDED", "metadata_json": null, "created_at": "2026-09-07 10:43:19" }, { "id": 7, "scan_id": 1, "type": "username", "value": "kmensah99", "verification_status": "USER_PROVIDED", "metadata_json": null, "created_at": "2026-09-07 10:43:19" }, { "id": 8, "scan_id": 1, "type": "username", "value": "kofi.m", "verification_status": "USER_PROVIDED", "metadata_json": null, "created_at": "2026-09-07 10:43:19" }, { "id": 6, "scan_id": 1, "type": "username", "value": "kofi_dev", "verification_status": "USER_PROVIDED", "metadata_json": null, "created_at": "2026-09-07 10:43:19" } ], "findings": [ { "id": 1, "scan_id": 1, "category": "EXPOSURE", "severity": "HIGH", "title": "Primary Personal Email Directly Linked to Public Code Commits", "what_is_exposed": "Your personal email (kofi.mensah@gmail.com) is linked directly with your public developer profile and commit history.", "what_does_it_mean": "Malicious crawlers and correlation engines can map your real-world identity to repositories, open PRs, and secondary accounts.", "what_should_i_do": "Configure git commit email privacy on GitHub\/GitLab using a privacy no-reply mask alias.", "evidence_label": "ANALYSED", "related_identifier": "kofi.mensah@gmail.com", "created_at": "2026-09-07 10:43:19" }, { "id": 4, "scan_id": 1, "category": "PRIVACY", "severity": "HIGH", "title": "Corporate and Personal Email Cross-Pollination", "what_is_exposed": "Supplied addresses indicate both a corporate domain (techbridge.africa) and public webmail (gmail.com, outlook.com).", "what_does_it_mean": "Cross-referencing work and personal profiles allows data brokers to bridge occupational and private social records.", "what_should_i_do": "Strictly isolate work identity from personal digital footprint and decouple third-party account recovery.", "evidence_label": "CONFIRMED", "related_identifier": "kofi.m@techbridge.africa", "created_at": "2026-09-07 10:43:19" }, { "id": 2, "scan_id": 1, "category": "IDENTITY", "severity": "MEDIUM", "title": "Identifier Fragmentation Across 4 Handle Formats", "what_is_exposed": "Your digital identity spans 4 distinct naming structures: \"kmensah\", \"kofi_dev\", \"kmensah99\", and \"kofi.m\".", "what_does_it_mean": "Disjointed aliases increase exposure surface area while making defensive reputation defense significantly harder.", "what_should_i_do": "Establish a consistent professional alias rule and reserve your canonical handle across tier-1 platforms.", "evidence_label": "ANALYSED", "related_identifier": "kmensah99", "created_at": "2026-09-07 10:43:19" }, { "id": 3, "scan_id": 1, "category": "SECURITY", "severity": "MEDIUM", "title": "Birth Year or Graduation Year Disclosed in Handle", "what_is_exposed": "The username \"kmensah99\" contains numerical suffix \"99\", indicating 1999 as a potential birth or graduation year.", "what_does_it_mean": "Automated credential recovery and social engineering attacks leverage birth year suffixes as verification hints.", "what_should_i_do": "Phase out handles containing demographic years on accounts linked to financial or recovery services.", "evidence_label": "INFERRED", "related_identifier": "kmensah99", "created_at": "2026-09-07 10:43:19" }, { "id": 5, "scan_id": 1, "category": "REPUTATION", "severity": "LOW", "title": "Personal Portfolio Domain lacks SPF\/DMARC Email Hardening indicator", "what_is_exposed": "The custom domain kofimensah.dev is registered under your identity but may allow domain spoofing if SPF is absent.", "what_does_it_mean": "Anyone can forge outbound correspondence appearing to originate from your personal vanity domain.", "what_should_i_do": "Implement strict SPF (\"v=spf1 ~all\") and DMARC (\"v=DMARC1; p=reject\") DNS TXT records.", "evidence_label": "ANALYSED", "related_identifier": "kofimensah.dev", "created_at": "2026-09-07 10:43:19" } ], "recommendations": [ { "id": 1, "scan_id": 1, "priority": "IMMEDIATE", "title": "Enable Private Git Commit Masking", "description": "Hide your personal Gmail address from public repository commits by enabling GitHub Private Email.", "impact_reduction": 12, "status": "pending", "created_at": "2026-09-07 10:43:19" }, { "id": 2, "scan_id": 1, "priority": "IMMEDIATE", "title": "Decouple Corporate Email from Social Platforms", "description": "Audit third-party accounts registered under @techbridge.africa and migrate private accounts.", "impact_reduction": 10, "status": "pending", "created_at": "2026-09-07 10:43:19" }, { "id": 3, "scan_id": 1, "priority": "RECOMMENDED", "title": "Retire Demographic Suffixes", "description": "Migrate from \"kmensah99\" to an abstract professional handle to eliminate age\/year deduction.", "impact_reduction": 8, "status": "pending", "created_at": "2026-09-07 10:43:19" }, { "id": 4, "scan_id": 1, "priority": "OPTIONAL", "title": "Harden Personal Domain DNS Records", "description": "Add SPF and DMARC TXT records to kofimensah.dev to prevent brand\/name spoofing.", "impact_reduction": 5, "status": "pending", "created_at": "2026-09-07 10:43:19" } ] }