The only cat who can find existing email addresses by nickname.
First install requirements:
pip3 install -r requirements.txt
Then just run the script:
./mailcat.py username
It's recommended to run script through Tor or proxy. You can use internal Tor routing (--tor) or proxychains.
Examples:
./mailcat.py --tor username
proxychains4 -q python3 mailcat.py username
./mailcat.py username --proxy http://1.2.3.4:8080
Total 37 providers, > 170 domains and > 100 aliases.
| Name | Domains | Method |
|---|---|---|
| Gmail | gmail.com | SMTP |
| Yandex | yandex.ru + 5 aliases | SMTP |
| Protonmail | protonmail.com + 2 aliases | API |
| iCloud | icloud.com, me.com, mac.com | Access recovery |
| MailRu | mail.ru + 4 other domains | Registration |
| Rambler | rambler.ru + 5 other domains | Registration |
| Tutanota | tutanota.com + 4 other domains | Registration |
| Yahoo | yahoo.com | Registration |
| Outlook | outlook.com, hotmail.com | Registration |
| Zoho | zohomail.com | Registration |
| Lycos | lycos.com | Registration |
| Eclipso | eclipso.eu + 9 other domains | Registration |
| Posteo | posteo.net + 50 aliases | Registration |
| Mailbox.org | mailbox.org | Registration |
| Firemail | firemail.de + 2 other domains | Registration |
| Fastmail | fastmail.com | Registration |
| StartMail | startmail.com | Registration |
| KOLABNOW | kolabnow.com + 23 aliases | Registration |
| bigmir)net | i.ua, ua.fm, email.ua | Registration |
| Xmail | xmail.net | Registration |
| Ukrnet | ukr.net | Registration |
| Runbox | runbox.com + 30 other domains | Registration |
| DuckGo | duck.com | Registration |
| HushMail | hushmail.com + 5 other domains | Registration |
| CTemplar | ctemplar.com | Registration |
| emailn | emailn.de | Registration |
| aikq | aikq.de + 40 other domains | Registration |
| Vivaldi | vivaldi.net | Registration |
| mailDe | mail.de | SMTP |
| Wirtualna Polska | wp.pl | Registration |
| Gazeta.pl | gazeta.pl | Registration |
| int.pl | int.pl | Registration |
| O2 | o2.pl | Registration |
| Interia | interia.pl + 10 other domains | Password recovery |
| t.pl | t.pl + 8 other domains | Registration |
| onet.pl | onet.pl + 11 other domains & 4 aliases | Registration |
Use -m or --max-connections if you get connection errors (Mailcat do 10 parallel connections max by default).
This tool uses the following OSINT techniques:
- SOTL-2.2. Search For Accounts On Other Platforms
- SOTL-6.1. Check Logins Reuse To Find Another Account
- SOTL-6.2. Check Nicknames Reuse To Find Another Account
OSINTEditor Sunday Briefing: Sensational Headlines and Kuomintang Chairmanship Elections
Michael Buzzel: 237 - The Huge OSINT Show by The Privacy, Security, & OSINT Show
bellingcat: First Steps to Getting Started in Open Source Research
