#3097·sherlock

False positive: BabyRu returns "found" even for nonexistent/invented usernames

Author: surajgoeswithdsCreated Aug 29, 2026Updated Aug 29, 2026
Labelsfalse positive

Additional info

Usernames tested (all returned "Found"):

  • hy_its_ritesh_yt
  • asdkfjasldkfjqwerty12345xyz (deliberately invented, cannot exist anywhere)
  • ThoughtGreedy3596
  • MostAd8747

Evidence: Visiting a reported profile URL directly (e.g. baby.ru/u/asdkfjasldkfjqwerty12345xyz/) returns HTTP 200 with the page itself rendering: "The page you were looking for was not found." This is a soft-404 — the site signals "not found" in the page content rather than via HTTP status code.

Cause: The site returns an HTTP 200 OK status even on custom "User not found" pages (soft 404).

Fix: The detection logic in data.json should use message (matching the "not found" text on the page) instead of status_code.

Checked: Confirmed BabyRu is not currently listed in false_positive_exclusions.txt.

Code of Conduct

  • I agree to follow this project's Code of Conduct

Source: sherlock-project/sherlock