This information is provided solely for informational purposes only and is completely free of any personal liability. You are responsible for your OWN actions. At no time am I condoning stealing private information.
——————————————–
Ok, so you have someone you would like to find an email on and you don’t know how to get the address.
First, let’s start with the domain.
Do you know the webpage of the person, the company address for instance?
Once you have the domain name you can normally figure out email addresses as most email admins don’t turn off NDR (non-delivery reports) due to the repercussions on their time.
Let’s use a search I did today to locate an HR representative in a technology company to help a friend submit a resume there. I also used these same tactics to locate his address and company site phone number.
The company posted a job req on a resume site but the HR Rep did not post his email or phone number. But I like doing things directly so I looked him up with completely legal means anyone can do.
I did an internet search for his name and the company like this:
“Firstname LastName”~”Company”
The tilde sign means within 10 words and the keywords are exclusive within the quotes, blanks and all…
When I didn’t get a direct hit I then narrowed down the search with the name of the Company and the town with the state like this:
“CompanyName”~”City, two letter state designator”
I got an address but no phone so I looked that up on a number search site with the town and state (like yellowpages.com.)
I then took his root host name and looked on DNSTUFF.com for the MX record which returned nothing helpful, this time.
So I tried nslookups for the domain.roothost
Telnets to their port 25 address didn’t work so I tried email variances of his name until I got an NDR that told me the MX record domain, then I tried his name again with the corrected MX host record and got his out of office message.
This all took about 20 minutes.
So now I have his address, phone number of his site and email address.
Then, to get his extension, I just call the main number and searched the database with either *4 or *8 and his last name.
None of this information is secure so none of it is a privacy violation as I used completely legal means to do all of it.
Easy.
Patrick J Burwell
burwell@hotmail.com