mailcat

---

The only cat who can find existing email addresses by nickname.

Usage

First install requirements:

pip3 install -r requirements.txt

Then just run the script:

./mailcat.py username

It's recommended to run script through Tor or proxy. You can use internal Tor routing (--tor) or proxychains. Examples:

./mailcat.py --tor username
proxychains4 -q python3 mailcat.py username

./mailcat.py username --proxy http://1.2.3.4:8080

Supported providers

Total 37 providers, > 170 domains and > 100 aliases.

Name	Domains	Method
Gmail	gmail.com	SMTP
Yandex	yandex.ru + 5 aliases	SMTP
Protonmail	protonmail.com + 2 aliases	API
iCloud	icloud.com, me.com, mac.com	Access recovery
MailRu	mail.ru + 4 other domains	Registration
Rambler	rambler.ru + 5 other domains	Registration
Tutanota	tutanota.com + 4 other domains	Registration
Yahoo	yahoo.com	Registration
Outlook	outlook.com, hotmail.com	Registration
Zoho	zohomail.com	Registration
Lycos	lycos.com	Registration
Eclipso	eclipso.eu + 9 other domains	Registration
Posteo	posteo.net + 50 aliases	Registration
Mailbox.org	mailbox.org	Registration
Firemail	firemail.de + 2 other domains	Registration
Fastmail	fastmail.com	Registration
StartMail	startmail.com	Registration
KOLABNOW	kolabnow.com + 23 aliases	Registration
bigmir)net	i.ua, ua.fm, email.ua	Registration
Xmail	xmail.net	Registration
Ukrnet	ukr.net	Registration
Runbox	runbox.com + 30 other domains	Registration
DuckGo	duck.com	Registration
HushMail	hushmail.com + 5 other domains	Registration
CTemplar	ctemplar.com	Registration
emailn	emailn.de	Registration
aikq	aikq.de + 40 other domains	Registration
Vivaldi	vivaldi.net	Registration
mailDe	mail.de	SMTP
Wirtualna Polska	wp.pl	Registration
Gazeta.pl	gazeta.pl	Registration
int.pl	int.pl	Registration
O2	o2.pl	Registration
Interia	interia.pl + 10 other domains	Password recovery
t.pl	t.pl + 8 other domains	Registration
onet.pl	onet.pl + 11 other domains & 4 aliases	Registration

Troubleshooting

Use -m or --max-connections if you get connection errors (Mailcat do 10 parallel connections max by default).

SOWEL classification

This tool uses the following OSINT techniques:

• SOTL-2.2. Search For Accounts On Other Platforms
• SOTL-6.1. Check Logins Reuse To Find Another Account
• SOTL-6.2. Check Nicknames Reuse To Find Another Account

Mentions and articles

OSINTEditor Sunday Briefing: Sensational Headlines and Kuomintang Chairmanship Elections

Michael Buzzel: 237 - The Huge OSINT Show by The Privacy, Security, & OSINT Show

bellingcat: First Steps to Getting Started in Open Source Research

OS2INT verifying email addresses using Mailcat

hwosint - Twitter post