Username/Email
Last updated
Was this helpful?
Last updated
Was this helpful?
Corporate usernames are beginning to be obnoxiously easy to guess and build. The standard of FIRSTNAME.LASTNAME@CORP.com is so common, it's ridiculous. Even more so when account management tools will simply take the first half of the email and reuse it as a username. We can use schemes like this to our advantage to search for a multitude of treasures like accounts on other services with the same username, credentials found in breaches, and associated sites or tools. When searching for usernames, you can uncover linked social media accounts and tons of relevant intelligence.
Username.html and Email.html
These two tools often go hand in hand with results often overlapping. Still, it is good habit to run the searches for both the username and the email address in case there is a discrepancy between the two. These two tools check for two things: presence of the username/email on a given platform, and any public/leaked info connected to them.
- Search public email records for a given email address.
- Collection of online tools that can gather multiple points of data surrounding an email address or domain.
- Enrich user data based on a single email address.
- Enter an email address and see which sites the email address has been used.
- Search EmailCrawlr for email addresses and phone numbers associated with a domain.
- Discover email addresses by company name
- Phonebook lists all domains, email addresses, or URLs for the given input domain.
- Discover email addresses by company name
- Powerful email discovery tool, only works in chrome.
- Find the email address format for a given company or domain.
- Locate employee email addresses via domain name. Very handy.
- Prevent bounced emails and low-quality users with free professional grade email verification
- Email address verification technology from Email Hippo that connects to mailboxes and checks whether an email address exists.
- This email verification tool actually connects to the mail server and checks whether the mailbox exists or not.
- Email Checker ensures that an email address is correct and active in real-time without ever needing to send a message.
- This tool is the defacto standard for email intelligence gathering. It checks a large array of sources to pull together information. It can leverage APIs of other services such as Spyse or Shodan to improve the search. Remember these will require an API key to use. I have found that between the above html tools and this, it will satisfy your email searching needs.
- Infoga is a tool gathering email accounts information (ip,hostname,country,...) from different public source (search engines, pgp key servers and shodan) and check if emails was leaked using haveibeenpwned.com API.
- email2phonenumber is an OSINT tool that allows you to obtain a target's phone number just by having his email address.
- Google account info scraper
- Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email
- Search emails from a domain through search engines
