7 LinkedIn X-Ray Strings You May Not Know About

booleanstrings Boolean 4 Comments

Here are seven sample X-Ray searches which may give you additional ideas on X-Raying LinkedIn:

  1. Unemployed or Recent Job Changes: site:linkedin.com/in inanchor:walmart business analyst –intitle:walmart
  2. Recommended members: site:linkedin.com/in “recommendations received”
  3. People with no current job (at the crawl time) or those who hide the employment section on public profiles: site:linkedin.com/in -present
  4. Recent jobs with little competition: site:linkedin.com/jobs/view sourcer “be among the first 25 applicants” -“no longer”
  5. Articles written in 2020: site:linkedin.com/pulse inanchor:2020 -intitle:2020
  6. Companies by location and industry: site:linkedin.com/company inanchor:chicago inanchor:”Technology, Information and Internet”
  7. People with unique names 🙂 site:linkedin.com/in -“see others named”

Over the past few weeks, Mike Santoro and I have enjoyed exchange of ideas and search strings in a Messenger chat, discovering new X-Ray opportunities, particularly, with inanchor:  By now, we have a little Encyclopedia of LinkedIn X-Ray knowledge. We want to share it with all of you at the upcoming class,

The Complete LinkedIn X-Ray Masterclass (A Benefit for Ukraine)

Come on a pay-what-you-can basis, with three options. Please sign up and also share with others. We count on your support! 100% of the profits will go to Humanitarian Aid in Ukraine. 🇺🇦


Search for Physicians on NPINO plus a Diversity Tip

booleanstrings Boolean Leave a Comment

The National Provider Identifier (NPI) is an identification number for covered Healthcare providers – doctors, dentists, chiropractors, nurses, and other medical staff. Many sites duplicate this info (Google for any concrete NPI number to find them). The primary site to use for search is npino.com. In Healthcare sourcing, it can complement utilizing Healthcare registries.

View available lists of Physicians on npino.com, like Surgery NPI Lookup, and run our friend Instant Data Scraper. The tool will supply you with the Physicians’ names and some extra info.

Here is a Diversity searching tip. Take a close look at the output –

and you will notice different scraped image URLs for men and women. You can filter away!

Having a list of names, assemble a long OR search for first and last names using our LinkedIn Boolean Builder (optionally, add their specialty and other parameters) and search on LinkedIn. This way, you will likely discover some promising profiles that lack the “right” keywords. You won’t find them by LinkedIn search alone – but they are your prospects, based on NPINO data combined with LinkedIn’s. Finding their (even not very informative) LinkedIn profile opens up possibilities to reach out: InMail, invite, and run contact-finding extensions.

Please join me for a brand-new two-part webinar, Practical Healthcare Sourcing, on August 10-11 2022. The first part covers NPINO, various sources like license verification sites, sites to look up Nurses and Therapists, search sites for Healthcare professionals like Doximity (and more), Indeed, and a brief overview of the (paid) aggregators HeartBeat.ai and SeekOut. The second is LinkedIn and Google tips, finding and verifying contacts, and sourcing scenarios, including messaging. I promise it will be informative 🙂.

Diversity enthusiasts, please join us for Certified Diversity Sourcing Professional (CDSP) Program – September 2022!

Utilize Healthcare License Verification Sites

booleanstrings Boolean Leave a Comment

In a previous post, Creating Real-Time Mini-People-Aggregators, I described a Healthcare-related use case of sourcing in license registries.

In the US, the majority of Healthcare professionals (except for some entry-level job holders) must be licensed to practice in the state where they do. License verification sites vary by state and profession, but you will often locate all Healthcare license types on one state-related site.

Sites that have license verification (link: License Lookups by State, or Google for them)  dialogs wildly vary in search functionally they provide. On some, pressing the ENTER key leads to a display of everyone, ready to be scraped. On others, you need to enter at least a few letters in the first and last name – here is an example – WV Board of Nursing. Others demand the license number or charge for requests (like LPC – Licensed Professional Counselor – License in WV) and are the hardest to source from. (That said, the latter link has a couple of “presents” for Sourcers.) License verification sites may also implement anti-scraping techniques, making collecting lists challenging.

If you are in luck, the relevant site will allow you to collect at least a full list of first and last names for a given license type. Looking them up one by one is an impossibly long task. But you can create an OR string of names with LinkedIn Boolean Builder and paste it into the LinkedIn people search, leading to finding multiple profiles.

Note that people may be licensed in more than one state and do not necessarily live in the state that interests you. You can usually collect locations as well and filter results to the state (or even city) before constructing the search string.

False positives will occur on LinkedIn if an included name is common. You can narrow the search down by adding filters such as the state and industry. You would be surprised how many profiles have a matching background but lack the basic information, like the license type, making them invisible in a LinkedIn search.

The other two ways to collect similar lists are the NPI database (npino.com) and certifications, where applicable.

We will dive into these topics in the first session of my brand-new two-part class

Practical Healthcare Sourcing

on Wednesday and Thursday, August 10-11, 2022. In the second session, we will go over Healthcare-related Google, LinkedIn tips, and messaging practices.

Will you join me?

The Complete LinkedIn X-Ray – August 18, 2022

booleanstrings Boolean 2 Comments

Manipulating X-Ray results with operators such as inanchor:, AROUND(X), and others allows anyone to run precise Google-based searches.

You can use Google X-Ray Search to find LinkedIn profiles (for free) in remarkable ways! Search for:

– Work locations
– Correct latest company (when multiple “current” companies exist on a profile)
– Correct latest job title (when multiple “current” job titles exist on a profile)
– Past Companies
– Past Job Titles
– Latest attended school
– “True” years of experience at current company
Grades at school
– Recommendations and Quantity of Recommendations
– Certifications
– Recently Unemployed
Hiring Managers
– and more.

Some X-Ray opportunities, like searching for headlines or work locations, are not offered at any cost on LinkedIn. And any paid LinkedIn account is infinitely more expensive than X-Ray, because it costs nothing!

Please join Mike Santoro and me for a fast-paced webinar for Recruiters dedicated to X-Raying LinkedIn on August 18th,

The Complete LinkedIn X-Ray

Learn how to use templates for various values, advanced operators, search parameters, and utilize collected results. We will include some live demos.

100% of your payments for the webinar (pay-what-you-can) will go to humanitarian help for Ukraine. 🇺🇦 Please help us spread the word about the class! We promise to deliver some cool sourcing content that will benefit any intermediate-to-advanced Recruiter.


How to X-Ray for Hiring Managers

booleanstrings Boolean Leave a Comment

Job hunting or looking for clients? Here is how to locate LinkedIn members who have open positions, for networking.

It is common for people who are hiring to put in their headlines the word “hiring” (or “looking for”) along with the role(s) open.

Google’s operator inanchor: searches in Headlines.

So, here is, as an example, how to find Hiring Managers for Accountants:

accountant site:linkedin.com/in inanchor:hiring inanchor:accountant.

You can state your preferences of whom to find, like

Replace accountant with any job title, and see the profiles of hiring authorities for the jobs of interest.

As a bonus, you can collect lists of profile URLs from X-Ray with Instant Data Scraper, bulk-upload to SalesQL, copy the list of email addresses, and mass-invite them to connect. When they accept, review their timeline, which may include the details of the opening, and send a follow-up message or two. Networking is an excellent way to utilize LinkedIn.

We have added a new Agent to Social List that collects and exports lists of Hiring Managers.

Check out our recently updated Sourcing Hacks, 4th Edition ebook, where you will find various other tips to make sourcing easier.


Creating Real-Time Mini-People-Aggregators

booleanstrings Boolean 1 Comment

It sounds sexy to Source without LinkedIn – and it should. One can do some exciting things outside of LinkedIn. However, you need to know quite a bit about people’s professional history to consider them potential candidates. Where else, except LinkedIn (or job boards, which have been deserted lately,) can you find someone’s job title, company, how long they have worked there, a description of what they did, a degree they got, and skills, plus location? It is hard or impossible to source entirely outside of LinkedIn, even for lower-level positions where only a fraction of potential candidates are members.

One of my recent sourcing projects was looking for Social Workers and Therapists with a LICSW (“licensed independent clinical social worker”) license in West Virginia. Searching LinkedIn for “LICSW” found some but had a low volume. I Googled and found a WV License verification site that happily revealed the list of all licensed at the press of the ENTER key. I collected a list of about 300 names of professionals with the correct, active license in the requested locations. The list did not have unique identifiers like email addresses, so I went with a long “OR” search of the first and last names on LinkedIn, narrowing it to a few more parameters. As a result, I found twice as many matching profiles as before – who had the license but did not add it to their profiles. For some, the last degree stated was Bachelor’s, while LICSW people must have a Master’s; but I knew they are Master’s from the license database. Locating LinkedIn profiles allowed me to look up their contacts with SalesQL, invite them to connect, message, and email them.

Another project was sourcing for Big 4 Partner candidates in Cybersecurity. I ran an X-Ray of a competitor, site:deloitte.com/us/en/profiles partner cyber security, and got a list of potential candidates, along with emails, to filter and review. LinkedIn provided me with their length of time at Deloitte and different ways to message.

As a third example of the approach, sourcing for Software Developers, I always go from Github to LinkedIn.

The key is to combine data from LinkedIn and other sites in real-time. That is what our new webinar How to Find Hidden LinkedIn Profiles (July 19-20, 2022), is about. There are two ways the combination flows: Research and Data Lookup, which we will discuss in the class, along with practical examples. No coding is required to perform the techniques we will share.

With data lookups, you are creating mini-people-aggregators of the moment, with the advantage that the data is fresh! We will also go over various ways to use the enriched data in messaging. Will you join us?


More About the Source and the Topic

booleanstrings Boolean, Google, OSINT Leave a Comment

Over the last two years, Google has enhanced the display of additional knowledge around search results. This post is to bring the feature to your attention. It aids in researching topics or sites. For now, it works only in US/English searches.

Press on the three dots by a Google search result to discover:

“More about this source”

It is useful when you are unfamiliar with the site. Google will point you to:

  • The Knowledge Graph object with a description, facts, and related objects
  • “In their own words,” a quote about the site
  • When the site was first indexed
  • Pages describing the source (check its credibility)

Curious to find this info about a particular page? Google for its URL in “”s, or use the site: operator, then follow the three dots.

“More about this topic”

If relevant, Google will show “top news.” Click on “View full coverage” to see the news, like this on a search Zelensky:

Note that these are “top” news, different from those you will find in a Google News search.

And perhaps the most interesting part is “Related results.” With the operator related: being phased out, along with “similar” links by search results, it brings up highly-ranked pages relevant to your search.

You can expect to find quality information on your topic of interest by clicking the three dots.

I want to remind you to sign up for the Talent Sourcing Bootcamp – September 6-8, 2022, ahead of time. The Bootcamp has been popular and sold out twice in June and July. Can’t wait? Get the July recordings now.



Repeat After Me (Give Keywords Weights in Google)

booleanstrings Boolean 3 Comments

It was not the case 10-15 years ago, but now, Google pays attention if you repeat a keyword or a key phrase. Repeating, in theory, should not be necessary; you would expect the same results if Google followed formal Boolean logic and displayed “all” results. However, Google puts some informal “thinking” into the string interpretation, so:

  1. If you repeat a keyword, and the number of results is under 100-200, Google will change the order of the results. It will prioritize pages with a “stronger” presence of the keyword (whatever that means)
  2. If you repeat a keyword, and the number of results is over 300-400, Google will also present you with a different set of results (!)
  3. As a bonus, you also will see the repeated word in the snippets more often.

Examples are easy to come by.

So, alter your strings by repeating keywords, and possibly, the word order, and you are off to collect thousands of profiles from X-Ray.

Do not miss the upcoming Talent Sourcing Bootcamp – July 6-8. We will cover “everything” sourcing. (Only a few spots are left at this time.)

You Are Missing 570MLN+ LinkedIn Members, 12M+ Open To Work

booleanstrings Boolean Leave a Comment

In our training, we look into restrictive search filters on LinkedIn and LinkedIn Recruiter. Some restrictions come from members with “shallow” profiles; many (such as seniority, function, or company size) are there because LinkedIn cannot interpret some of its data correctly.

If you use LinkedIn Recruiter, you likely search by years of experience. But have you tried searching for any years of experience, from zero to 30 (max)? This search finds only 290M+ LinkedIn members (and you are missing the rest):

Equipped with the hidden search operators, you can find people with more than 30 years of experience; there are 21M+:

So how many people are missing when you search for years of experience? And how many of them are “open to work”? Ready?

570M+ LinkedIn Members Have No Years of Experience
Of These, 12M+ Are Open To Work

Indeed, these profiles do not have enough information. But when you search for years of experience, apparently, you only access about 34% of LinkedIn profiles.

If you have a hard-to-fill opening, you might want to drop the filter or even search for people with no “yoe” on purpose. Your response rate will be higher!

Join me for a repeat of the Talent Sourcing Bootcamp, July 6-8 and learn many things about LinkedIn (that “Help” does not tell us) as well as Google, Boolean, Tools, and scraping.




Raise inanchor: Sail to LinkedIn Locations, Titles, and Schools

booleanstrings Boolean 4 Comments

Guest Post from Talent Sourcer Mike Santoro

This post is Part 2 of another post that featured the helpful discovery that Google’s inanchor: operator will search LinkedIn Headline text through X-Ray search. You can read Part 1 here: Sink Into LinkedIn Headlines Tie inanchor: To Your Strings.

Part 2 – X-Raying LinkedIn with inanchor: will search more than just LinkedIn Headlines

First, I’ll share What’s New with inanchor: and show “How to Steer the Boat” using an all-inclusive example of its newfound power for Sourcers and Recruiters to benefit from.

Second, for those readers who want to understand “Why the Boat Floats,” I’ll share more technically why inanchor: works the way it does and a “Deep Dive” to see under the Google waters (if you like technical “scuba diving”). =)

What’s New?

After the Headline discovery documented in Part 1, Irina and I collaborated on researching inanchor: more deeply. Based on early testing, I suspected that inanchor: would also search for someone’s most recently attended school (or currently attending). Irina suspected that inanchor: would also search someone’s current location.

In summary, we uncovered that inanchor: will search *ALL of the following 8 areas of LinkedIn Profiles:

  1. Headlines
  2. Geographic City Location

All global city names, areas, and countries can be searched with inanchor, but “U.S. City + state abbreviation” combinations have the most precision!

When searching for U.S. Cities

Use both the city and state abbreviation together for the most accurate results:

site:linkedin.com/in inanchor:”Philadelphia PA”

You can also query for profiles with the “Greater” verbiages like this:

site:linkedin.com/in inanchor:”Greater Chicago Area”

When searching for most non-U.S. cities

Use only the city name

site:uk.linkedin.com/in inanchor:london

You can also query for profiles with the “Greater” verbiages like this:

site:uk.linkedin.com/in inanchor:”Greater Cambridge Area”

  1. Most Recently Attended School Name

i.e., Universities and Colleges.

  1. Most Current Company Name

If currently unemployed, then inanchor will return Most Recent Company Name

i.e., inanchor:Amazon can find people who currently work at Amazon but also find someone like this who recently left in Feb 2022 and “closed” the job on their profile:

Notably, you can’t search for “closed jobs” with X-Ray using Google’s intitle: operator (which only searches current companies that are presently open). Nor can you use LinkedIn Recruiter’s Advanced Search. Using inanchor: has an advantage here for the Recruiter/Sourcer to find additional unemployed candidates by the most recent company they left.

  1. Full Name

Or by just First Name only or just Last Name only

  1. Any Professional Designations

Letters people append to their names like CPA, PMP, CPIM, Ph.D., etc.

  1. Recommendations Given To Others

Clarification: It is the Recommenders words given to someone else.

I.e., if you search a phrase like:

site:linkedin.com/in inanchor:”John is an outstanding leader”

Google will show you profiles of people (not named John) who wrote such a phrase about a random person named John. Unfortunately, we have not yet found a helpful use case.

*Note: Because inanchor: searches ALL of these 8 fields on a LinkedIn Profile, you will have some false positive results to your search when there is crossover in these areas.

i.e., using inanchor: to search School Names could show you three different types of results:

1) Results of alumni who already graduated

2) Those who are currently enrolled, and

3) Those who currently (or most recently) work at the school

How to Steer the Boat

Let’s have some fun and create one Boolean string example to show how powerfully simple it can be to use.

Using inanchor: let’s find LinkedIn profiles with ALL of the following:

1) “Software Engineer” in the Headline

2) Currently work at Amazon

3) Most recently attended/graduated from the “University of Southern California”

4) Currently live in Seattle, WA, or “Greater Seattle Area”

5) Have worked in their most recent role at Amazon for approximately 3..6 years.

site:linkedin.com/in inanchor:“Software” inanchor:“Engineer” inanchor:“Amazon” inanchor:“University of Southern California” (inanchor:“Greater Seattle Area” OR inanchor:“Seattle WA”) “present 3..6 years”

Wow! That’s Powerful! =)

Note: There will be some false positives of profiles where someone recently left Amazon and started a new job somewhere else within the past 1-2 months or so from the time of the query. These false positives are due to Google’s indexing lag on its public directories. More on this below.

Why The Boat Floats

Why does inanchor: search all of these areas?

I’ll try to make it as simple as possible:

  • X-Raying LinkedIn with Google will search public LinkedIn profiles (you know this already)
  • (What you didn’t know) Those public profiles have specific fields that are hyperlinks from LinkedIn’s Public Directories.
  • LinkedIn’s Public Directories are lists of profiles grouped by first names, last names, full names, and other ways. 
  • (Key Analogy) Just like an old-fashioned white pages phone book is a directory of names in alphabetical order that also includes other information like the person’s residential street address and phone number like this:

Similarly, LinkedIn’s public directory pages also include other information along with the names on its directory’s list.

What else does it include?

You guessed it:

  • Name
  • Headline
  • Location
  • Most Recently Attended School Name
  • Most Current/Recent Company Worked For

Here is an example of what it looks like:

Because LinkedIn public directory links point to LinkedIn Profiles, the directories are considered “Anchor Pages” by Google’s Index.

Therefore, when you are searching with inanchor: combined with the x-ray site: command for profiles, you are asking Google to search the text on the “Anchor Pages” of the LinkedIn Public Profiles, thus the public directories they are linked to.

In other words, you are saying:

“Google, please search for these keywords in the LinkedIn’s Public Directory Pages and then return the public profile pages that are ‘anchored’ to those places in the directory.” 

Deep Dive (Under the Google Waters)

Keep reading if you like technical “scuba diving.” There is more treasure to be found below. =)

So how do you find these LinkedIn Public Directories?

i.e., Let’s find all of the LinkedIn public directories that Irina Shamaeva is in:

site:linkedin.com/pub/dir “Irina Shamaeva” Sourcer

You’ll see Irina is currently in at least 4 LinkedIn Public Directory Pages indexed by Google:

Note: if you want to view these public pages, you will need to log out of LinkedIn first to view them as they appear to Google.

  1. https://www.linkedin.com/pub/dir/Irina/Shamaeva (U.S. Directory by Full Name)
  2. https://www.linkedin.com/pub/dir/+/Shamaeva (U.S. Directory by Last Name)
  3. https://cn.linkedin.com/pub/dir/+/Shamaeva (China Directory by Last Name)
  4. https://ch.linkedin.com/pub/dir/+/Shamaeva (Switzerland Directory by Last Name)

Question –      Why does it matter that Irina is listed in multiple LinkedIn directories?

Answer –         The Recruiter/Sourcer can uniquely find someone by their old headline and their new headline (or both old location and new location) for several weeks or months.

Each directory is re-indexed by Google at different times. Therefore, if Irina updated her LinkedIn profile headline (or location) today, the new change would be found with inanchor: when at least 1 of the 4 directories is re-indexed (updated) by google. Thus, you could also find her by her old headline (or old location) until the other 3 directories are also re-indexed by Google.

Inevitably, there will be some discrepancies when there are recent profile changes, but such discrepancies are minimal and can even be an advantage! Knowing that someone just recently changed their profile can be leveraged advantageously.

I.e., imagine messaging a candidate with something like this:

“John, I noticed you recently changed your Headline from (X) to (Y). Good move. Let’s talk.”

How many recruiters can reach out to a candidate with that kind of unique perception? =)

Lots more use cases for Recruiters and Sourcers to explore the advantage of the indexing lag of multiple directory pages.

Finally, enjoy “Sailing through LinkedIn Profiles” with these new methods and have fun experimenting with higher quality and more precise X-Ray Strings than ever before!

“For Love of Sourcing and Sourcers” –Mike Santoro