In this video, we're going to be taking a look at reverse email searches.
So you may be in a situation where you have an email address, but you're not sure who it belongs to,
where they're from, or what else is email account is associated to.
So there's a few ways we could take a look at this.
So one way is you could use a people search program Pipl Spokeo I have a couple up here I got Beenverified.
Com um, let's start with this one here.
So I already have our email address in here displayed at gmail.com.
I'm going to click search.
Okay.
And this is going to be pretty common with all the all the um people search ones.
You're going to see a progress bar.
You'll see a spinning circle, or it'll flash a bunch of random pictures of people that are supposedly
searching through.
Uh, this is going to take a little bit.
So I'm going to let that run.
And I ran a couple other ones here.
Another one that I pulled up was Info Tracer.
Um, let me go back one screen here.
And it's info tracer.com.
Uh, this one came up with a IP address, country address, ISP.
Now, a lot of times these people search sites will come up with information like this or email search
programs.
So this IP is actually not my IP.
It's not IP that I've used before.
This is actually Google's IP address.
If you look it up.
Um, country is us, which is actually true.
Uh, that's only because Google's located in the US.
Mountain view, California.
That's nowhere really near where I'm at.
This is actually Google.
Again, Google's address.
So, um, trying to track down a Gmail users address, uh, even using email headers, you're not going
to be real successful.
You're going to come up with Google's information just like pretty much any other email address.
So that's going to be the problem with email nowadays.
It's not like how it was, say, 20 years ago.
Um, you used to be able to grab the email headers, parse out where the location was.
Um, nowadays that information is masked by not ISP by the email provider.
Uh, so as you see here, you know, the information that it pulled is all of Google's information.
Now, another thing that you could do is you could do a Google advanced search.
So what I did here was I put uh, games at gmail.com in quotes.
So what that will do is it isolates that search Gmail search down to that email address.
So in here you could see, um, a few Amazon.com hits.
for a couple apps.
And these are apps that actually did develop under the game's name or email address, rather.
So that's actually very accurate.
Um, scrolling down in here, I also see that, uh, some of my apps were actually stolen upload to,
uh, foreign websites.
So, um, that's actually good information for me personally.
Um.
So as you can see here, again, it really just isolated down the search results.
So instead of, um, well, see, we have, uh, two pages of Google results, so pretty, pretty short
now versus if I did if I took this out of quotes, let's see how many hits we would get.
Okay.
So this wasn't too bad.
It came up with the same number of results.
Two pages, 80 hits.
So still pretty good.
All right, so let me show you another.
Another way to find email addresses.
So if you want to see if that email address was used for a certain social media site like say, Facebook,
Twitter, LinkedIn, any of these sites.
One way you could do it is, uh, you could say you forgot your account.
Uh, a lot of times this will either allow you to type in a phone number or email address, or both
to try to recover your account.
So in this case, if we go on facebook.com and click forgot account, it's going to come up with this
page here.
So I already populated the email address.
And again we can at least for this example, we can actually type in a phone number to if we had a phone
number that we're searching.
But right now we're talking about email.
So in here I have Dispo games at gmail.com.
And I'm going to click search.
And it's going to go through.
And lo and behold, it actually found a, a a that Gmail account on Facebook's server.
So going this route I, I verified that yes.
Um, this email account does have in fact have a Facebook account.
And I could see the Facebook username here disposable GM.
So now I could actually start searching Facebook under for disposable GM and actually find more information
about my target.
So another way we could find information out is we could do have I Been Pwned.
Okay.
So if we go to Haveibeenpwned.com.
We could type in an email address, Dispo games at gmail.com.
And we click the phone button and here we go.
So we can see if this was part of any data breaches, and we could potentially find out what other sites
they have emails are linked to.
So in here I see it was actually linked to a Dropbox account, an Adobe account.
So again this is great information, especially especially if that email if they are target's email
address was used for a lot of other sites, say a pastebin account or a Instagram or LinkedIn account.
Again, that'll just save us time from going to each site and doing a search on those email addresses.
Okay, there's one last one I want to show you.
So I got our Buscador VM running here.
Let me log back in here.
And I fired up Maltego, which we could actually just run from this icon right here.
Now once you have maltego loaded up and you start a new, uh, new graph by clicking this button here,
I'm just going to drag this email address right over here okay.
And then I'm going to double click on this.
And I'm going to clear this one out.
I'm going to type in Dispo games at gmail.com okay I'm going to click okay.
And I'm going to right click this.
And I'm going to run this C to C.
And I'm going to just run all the transforms.
Okay.
Give that a second while it's running.
And here we go.
So it verified the email address does exist.
It is a Gmail address.
And it looks like this is one of the accounts that's tied to is a Flickr.
So um, going off or have I Been Pwned?
Uh, that found a Dropbox account, uh, which Maltego didn't.
However, have I Been Pwned didn't find the Flickr account, so it's good to run multiple tools to help
verify your data.
So if I just run this, I can try to do Flickr and friends.
I don't think there's going to be a lot of information that comes up.
Yep.
Nothing.
And if I just run a transform on the Gmail, it's just going to find more Gmail stuff.
So.
Say if this was a corporate email address or a private one, if they have a host in their own website,
this would actually probably be a lot more informative to us.
But in this case, since it's just a generic Gmail address, it's coming.
Um, you know, we could actually just see a lot of the Google stuff in here, which is this.
Want to show you that real quick.
So again, um, these are a lot of tools that you could.