https://github.com/soxoj/mailto_analyzer
PoC analyzer of your email address exposure on various services
https://github.com/soxoj/mailto_analyzer
Last synced: about 1 month ago
JSON representation
PoC analyzer of your email address exposure on various services
- Host: GitHub
- URL: https://github.com/soxoj/mailto_analyzer
- Owner: soxoj
- Created: 2023-10-08T22:46:37.000Z (about 2 years ago)
- Default Branch: main
- Last Pushed: 2023-10-09T11:13:30.000Z (about 2 years ago)
- Last Synced: 2025-01-19T23:59:21.857Z (10 months ago)
- Language: Python
- Size: 248 KB
- Stars: 54
- Watchers: 3
- Forks: 3
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
- osint_stuff_tool_collection - MAILTO ANALYZER - party servers. | ([](#table-of-contents) Table of contents / [](#warc)Tools for working with WARC (WebARChive) files)
README
# Mailto analyzer
Curious about how to start to improve your OPSEC for your email address, but don’t know where to start?
**Analyze your emails!**
Mailto analyzer will show your email address exposure on various services.
## Abstract
Mailto analyzer is a proof of concept tool, extracting from exported email fields "To": your names and email addresses. The trick is that
you could be registered in some services or saved in contact books with different names or even with different email addresses!
According to [RFC522](https://datatracker.ietf.org/doc/html/rfc5233), it's possible to use notation `alias+subaddress@example.com` for subaddressing, so every service should accept such email as unique, but all correspondence will be routed to your default mailbox anyway. Google also [supports additional dots](https://support.google.com/mail/answer/7436150) in email addresses, thus increasing amount of possible variations of your email.
Such tools as [holehe](https://github.com/megadose/holehe) could help you to check externally if you registered in some services (and reveal some of your info), but the ideal coverage you'll get if check all emails received from services: registration confirmations, notifications, and even spam!
Knowing in which service you are registered, with which name and with which email address (e.g. with a default one), you can decide to update your personal data there or change the email, **complicating the search for your accounts** using tools like holehe.
This tool will provide tips based on found services: how to change email addresses or remove such accounts completely quickly. If you're interested in more theory or other tools, jump to [this section](./README.md#see-also).
## Usage
Install:
`pip install -r requirements.txt`
Export or download your inbox emails ([Google example](https://www.indeed.com/career-advice/career-development/download-emails-from-gmail)), only MBOX format is currently supported.
`./analyze.py example.mbox`
## See also
- [Gobutsu/Conan: helping you delete your old accounts](https://github.com/Gobutsu/Conan)
- [Counter OSINT guide: using email aliases](https://github.com/soxoj/counter-osint-guide-en/blob/main/pages/breach-detection.md#using-aliasesfake-mail-addresses)
- [Counter OSINT guide: account removal](https://github.com/soxoj/counter-osint-guide-en/blob/main/pages/deleteme.md#deletion-request)