OSINT &
Crypto Researcher
I'm Nour (@ghostwwn). A 16-year-old independent researcher and new web pentester focused on online fraud investigation, OSINT, and cryptocurrency tracing. So far, I’ve earned around $1,500 through audits and bug bounty reports, a milestone I’m proud and grateful for.
Certifications & Credentials
Investigative Log
Fake Dating Profile Exposure
IMPERSONATIONTargeted user by dating profile using stolen images. Ran reverse image searches (Yandex, Google), correlated usernames, and linked profile to multiple cloned accounts. Provided evidence package for takedown.
ETH Investment Scam
CRYPTO TRACINGUnreturned ETH transfers with obfuscated recipient paths. Conducted on-chain analysis via Etherscan. Visualized flows to identify clusters and cash-out points.
Job Scam Identification
FRAUDApplicants reported fake job offers. Conducted WHOIS/DNS checks, analyzed VOIP numbers, and compared copy against legitimate postings. Confirmed fraudulent campaign.
Confidential Infrastructure Security Audit
WEB PENTESTMarch 2026 engagement on a production platform. Identified a chained authorization and mass-assignment weakness that could allow privilege escalation, data exposure, and pricing manipulation. Reported findings through responsible disclosure, validated impact, and provided prioritized remediation guidance including hardened access rules.
Interactive Terminal
Secure Communication
a207def5cd269f317b29f1e780465e6a42
Click to copy • Security verified
© 2026 NOUR // GHOSTWWN • All Rights Reserved