Kalimi nga Email dhe Emri i Përdoruesit

Given a single email address, an investigator can often pivot to social accounts, breach records, public profiles and much more.

Tools like Sherlock and Maigret check hundreds of sites to see whether a given username is registered. epieos and Holehe check which platforms an email is registered on (many platforms leak this information on their password-reset pages). Have I Been Pwned shows which data breaches include the email, providing a list of services the target has used and, sometimes, the passwords they chose. Dehashed and other leaked-data aggregators go further and expose actual plaintext records for paying users. From there, the investigator pivots to the linked accounts. A LinkedIn profile reveals employer and job title. A Twitter account reveals interests, political leanings and geolocation via post metadata and photos. An Instagram account reveals daily routines, relationships and travel patterns. A GitHub account can leak internal company domains and secret tokens committed accidentally. Each platform is a small data source, but together they form a profile that is often surprisingly complete. All of this activity is passive and uses only public information, but ethically it can range from legitimate security research and journalism to stalking and harassment. Professional OSINT investigators operate under clear legal authority (penetration test, incident response, journalism ethics codes) and document every source. Knowing the technique is essential; knowing when to use it is equally so.

Mjete:

• Hunter.io, Have I Been Pwned.
• Holehe, Epieos, h8mail.
• Sherlock, Maigret — username search.

Pivotim bazik nga email:

holehe test@example.com
sherlock edonbublaku
h8mail -t test@example.com

1. Për emailin tënd publik, kontrollo në HIBP dhe 2-3 mjete të tjera. Dokumento çfarë gjen.
2. Trego si mund të lidhet një email me një numër telefoni përmes account recovery hints.

• OSINT Framework — osintframework.com.
• IntelTechniques tools.