Blog / Tag
Everything tagged email lookup.
Category
9 articles matching #email lookup
Security9 min
An index of OSINT case studies built on public-record identifiers from charged, convicted and sanctioned cybercrime cases. The method, a table of all 12 posts and the technique each teaches, six lessons that hold across cases, and the ethics rules the series follows.
Guides9 min
A username match is not an attribution. Using aliases and email addresses already printed in sanctions entries, court filings and named reporting, this guide grades each kind of OSINT evidence on a six-rung ladder, from common-word collisions like "mango" (439 exact-match results) to email-anchored accounts and display names that reproduce a published identification. It also covers what never counts and how to verify a "hacker's email" before you pivot.
Guides9 min
GitHub has no public search for hidden emails, but commit attribution links addresses to accounts. Four manual checks, what an email lookup adds, and seven public-record cases where a court or sanctions address led to a GitHub profile created years before the case.
Privacy9 min
Yes, but rarely through the burner itself. Court records show persona addresses traced through registrar logins, a shared VPN address, domain records and leaked forum databases. An email lookup finds no registrations for those addresses, consistent with the records, while the owners' everyday mailboxes still return registrations.
Data9 min
The OFAC SDN list prints 369 email addresses across 210 entries. Here is where they appear, how to search the list by email, and what 23 addresses from ten cyber designations connect to on live platforms.
News9 min
LockBitSupp is the persona US, UK and Australian authorities tied to Dmitry Khoroshev in May 2024. We ran the eight email addresses OFAC and KrebsOnSecurity published, and the alias itself, through a live search. One mailbox still reaches a GitHub account, opened in 2011, on the NeroWolfe persona Krebs tied to him. The alias returns 22 exact-handle results, and the YouTube channel that shows his name is very probably a fan's.
News9 min
Two Perth men were arrested in the TeamPCP supply chain case in August 2026, and Ruben Ian Thomson is also indicted in California. Here is the case status, how public reporting tied the Deadcatx3 and Express aliases to a name, and what the seven published email addresses return in a live lookup: 24 results on one, none found for the BreachForums registration address.
Security14 min
We ran 173 username searches and email lookups on every alias and mailbox printed for sixteen charged Scattered Spider members. Four profiles fit the record; the rest is noise, squatters and burners.
Security9 min
The Scattered Spider handle joeleoli returns a GitLab profile with a real name and a 2016 to 2018 account cohort. The published Gmail behind it returns six presence hits and nothing else.
