False positive: BabyRu returns "found" even for nonexistent/invented usernames
Author: surajgoeswithdsCreated Aug 29, 2026Updated Aug 29, 2026
Labelsfalse positive
Additional info
Usernames tested (all returned "Found"):
- hy_its_ritesh_yt
- asdkfjasldkfjqwerty12345xyz (deliberately invented, cannot exist anywhere)
- ThoughtGreedy3596
- MostAd8747
Evidence: Visiting a reported profile URL directly (e.g. baby.ru/u/asdkfjasldkfjqwerty12345xyz/) returns HTTP 200 with the page itself rendering: "The page you were looking for was not found." This is a soft-404 — the site signals "not found" in the page content rather than via HTTP status code.
Cause: The site returns an HTTP 200 OK status even on custom "User not found" pages (soft 404).
Fix: The detection logic in data.json should use message (matching the "not found" text on the page) instead of status_code.
Checked: Confirmed BabyRu is not currently listed in false_positive_exclusions.txt.
Code of Conduct
- I agree to follow this project's Code of Conduct
Source: sherlock-project/sherlock