As Softodrom has already said, the Mail.Ru Group company is well known for its concern for the privacy and confidentiality of users, and therefore its social networks VKontakte and Odnoklassniki, as well as . In addition, there is a convenient search function by age, birthday and other parameters for the right person, even if he doesn’t want it himself. In other words, this kind of social network is a convenient, free and widely available tool for spying on any person.
Mail.Ru Group also has a social network called “My World”. If you are already registered in social networks such as VKontakte and Odnoklassniki (they both also belong to the Mail.Ru Group), then the My World social network, of course, you need like an umbrella to a fish. Therefore, you may well not know that there are also registered users on this social network. Moreover, many of those users who have a mailbox on Mail.Ru are registered there. This feature allows in many cases, although not in all, to find out the name of the owner of a mailbox on Mail.Ru, simply by looking at the corresponding page in “My World”.
The fact is that when you register on the “My World” social network from your mailbox on Mail.Ru, you are given a page whose address contains your email address.
Why this was done is completely unclear, but most likely to make it more convenient for spammers to collect email addresses for sending spam. To do this, just launch a robot into the “My World” social network, which will walk through the pages and collect emails. As a matter of fact, spammers have already done this a long time ago.
Naturally, this is convenient not only for spammers, but also for phishers, because they can easily send phishing emails by addressing you by name.
In general, this feature of the “My World” social network allows you to find out the name of the owner of a particular mailbox on the Mail.Ru mail service, if you need it for some reason. This becomes possible if the owner of the box has registered in “My World”. Moreover, this applies not only to mailboxes in the @mail.ru domain, but also to other domains in which users of the Mail.Ru mail service can receive mail, including the domains @inbox.ru, @list.ru and @bk.ru .
At the same time, the peculiarity of the Mail.Ru mail service is that one user name can be indicated there, but in the “My World” social network - a completely different one. This allows, for example, to find out a person’s real name if he indicated a fake name in the mail, but his real name on the social network.
For example, suppose that you received a letter from a certain Vasya Pupkin from the address [email protected]. You, of course, are always happy to receive new letters, so you happily open this letter, and it says where you should go. Of course, you are outraged and want to take revenge on the offender. Naturally, you understand that the name Vasya Pupkin is not real, therefore, knowing his email, you can easily calculate the address of his page on the “My World” social network to find out under what name he is registered there.
All addresses of @mail.ru mail user pages in “My World” begin at my.mail.ru/mail/, followed by that part of the email that is located before the domain identifier. That is, in our case we need to add koolhacker1000 .
Thus, we get the address of the page we need: my.mail.ru/mail/koolhacker1000.
Having easily calculated the address, you open the corresponding page in “My World” and see the profile of this person.
|
The profile, unfortunately, also turned out to be fake. However, he could very well turn out to be real, and then the kulhatsker Vasya Pupkin could suffer for sending hooligan letters.
By the way, another interesting opportunity is to analyze the social connections of people who send you letters from the Mail.Ru mail service. Having received a letter from one of the mailboxes on the Mail.Ru service, you can go to this person’s page in “My World” and see the list of his friends. In addition, you can see his photographs and all other information that the person posted about himself.
You can also take any of his photographs and, by searching for similar images in Yandex or Google, find on what other sites these photos are found. This way you can find the pages of the same person on other sites. Or you can determine that these photos were stolen from someone else's profiles.
Hi all:)
In this topic, I propose to talk about the hidden capabilities of sites.
Not about “Easter eggs” - surprises and secrets that developers leave for particularly meticulous and curious users, but about those opportunities that the developers did not plan for and the existence of which they do not always know. I think all large sites with a long history have such opportunities. An example of such a possibility on Habré is deleting a post in the sandbox when an invite is revoked. They talked about this. But I’m new to the hub, and I know very little about it. This post will talk about another large social network - mail.ru.
The very idea of the post appeared after the latest edition of the famous book “The Newest Encyclopedia” caught my eye. Computer and the Internet”, in which the author talks about a little-known fact about the presence of several domains on the mail.ru website. But if not everyone knows about the existence of several domains on mail.ru, although the ability to select a domain is offered when registering an account, and then every time you log in, then few people even know about other features of the site. This post will talk about things the knowledge of which is determined not so much by the user’s observation and interest as by the time and experience of being on the site. Some of them are more or less obvious, others are difficult to guess and can only be noticed by accident.
The first part of the post is devoted to the information that mail provides about its users.
User email
The user’s email can be easily determined by his page in the World, Blogs or personal account on Answers. The user's nickname and avatar on the mail.ru project are a link to his personal page: in My World, on Answers, in Blogs. Their addresses are built according to a single scheme, in which the domain and username of the user are indicated before the last two slashes:This scheme allows you to determine the user’s activity on different website projects or contact him by mail. True, a new design of Answers is currently being tested, in which the link to the personal account is replaced by a link to a profile that is in no way connected with the user’s e-mail, but the old version of Answers remains available for now, and the old links too.
There is information on how to find out the name of a mailbox from a page in My World on the mail.ru help page. But what the site support workers forgot to tell you is that in addition to the domains: mail.ru, inbox.ru, list.ru, bk.ru, mail.ua, there is also a domain corp.mail.ru on the site. Only site employees can register an account with such a domain; it is not available to ordinary users.
Knowing whether a user is an employee of the site is useful both in order to avoid falling for the tricks of scammers, and to determine how trustworthy the advice and recommendations received in a comment in the community or in a personal message are.
Last fall, the user’s IP stopped being displayed in My World notifications. But it is still visible in emails sent by users.
If the IP appears in personal communications with people you know or have a business relationship with, that's one thing. But the site provides for correspondence with completely outsiders and strangers. For example, on the Mail.ru Answers project, in the user’s personal account there is a link “Write a letter” And this link is used quite often. You are invited to write a letter if an entry is rejected in a pre-moderated community: “Your entry has been rejected by the moderator. You can write a letter to the moderator if you do not agree with his decision.” Knowing that his IP will be displayed in the service headers of the letter will allow the user to decide whether to use mail for correspondence, or choose something else, for example, personal messages.
Phone number
Some time ago, the user's full phone number was displayed via the link:e.mail.ru/cgi-bin/passremind?action=answer&Username=Login&Domain=Domain&Submit_PasswordAnswer=1&lang=ru_RU&answer=
They talked about this.
Now the link displays the phone number without the last four digits. This part of the number is enough to determine the user’s country and region of residence, as well as to identify several accounts registered to one phone number.
That is, despite all the reliability, speed and convenience of recovering a password using a phone number, you need to keep in mind that most of this number is in the public domain.
User age
Actually, age is not secret and classified information. But when in the account settings they specifically specify whether you want the age specified in the profile to be available to other users, and, despite the settings you have set, they still display it, this does not look entirely clear.This is what the profile settings look like:
The checkboxes “Show age” and “Display this data in my profile in Mail.Ru Agent” are not checked. And this is what the information displayed in the agent looks like when searching for a user using the “Add Contact” button:
Age is displayed, and when you click on the “Profile” icon, a nice window opens with your full date of birth (the same one that should not be displayed in the agent).
Information about the closed world
If the user's World is closed, it is impossible to see friends or groups, or the data specified in the profile. But they are displayed in the blog info at: blogs.mail.ru/Domain/Login/info. The blog information displays the user's friends, subscribers, interests, and the date the blog was created. Information about the blog is displayed even if the blog is closed and access is set to “only for me” in the settings.User posts and comments on the project
Blog Info displays the number of comments left by the user on the project. But it is impossible to find these comments using the mail.ru website. And sometimes it can be interesting or really necessary to find your comments on a project or see the comments of another user.In this case, Yandex blog search will help. In it we indicate:
search area - comments;
blogger - address of the user's blog or world;
in a magazine or community - the address of the blog or group (if not specified, the search will be based on all user comments).
Searching by comments works if comments or entries were left in groups and blogs open to unregistered users; only their entries are indexed by the search engine. In a user's personal blog, you can view posts and comments separately. In communities, user posts and comments are mixed up and I haven’t found a way to separate them.
I don’t know how popular and interesting this post is on this resource. Briefly, it can be reduced to a well-known truth: “everything you tell about yourself on the Internet, you post in the public domain”
This article is devoted to solving the problem:
Given:
Person's first/last name
The name of the website of the company he works for or the name of his own website
Find:
His work or personal email address
It's easy to solve. There are special web services for this. Try them in the order they are presented in the article. If one doesn't help, the other will help.
1. The simplest and most effective way
If you're lucky, you can simply enter the name of the person and the website of the company on this magical service and it will immediately give you the result. If the address is highlighted green, then it is currently active and you can write to it. You can make up to 50 requests for free.
To register for the service, you need a corporate email address (gmail/yandex and 10-minute mailboxes do not work). If you have a website or blog on a separate domain, then this is not a problem. Go to your hosting admin and create a new email address there. For example,
2. If Norbert failed...
If the first service from the article did not find anything or you have difficulties registering, then you can try findanyemail.net. You can find no more than five addresses from one computer (but the site works fine via Tor).
3. We are looking for all company contacts
This service is useful if you do not know the exact first or last name of a person. Or you need the address of the company's technical support or advertising department. Hunter.io searches the Internet for email addresses that are indicated next to the name of the site you are looking for. For each address there are links to the pages where it was found.
Sometimes, next to the email, the owner’s name, work phone number and links to his profiles on social networks may be displayed. Works for both Russian and foreign companies. Any address can be checked for functionality using the Verify tab.
4. Enumeration of options
If it doesn’t help again, then you can automatically generate a list of possible email wording options and try to write to everything at once (kb). But it’s better to first check whether these addresses are active or not.
5. Check addresses for functionality
This service will help you find out whether the intended email address is active or not.
6. Determine the email address of the domain owner
If you need the address of the most important person in the company, but it is not on the website, then you can try to find it in the whois data. Often this attempt ends in failure, but it is worth a try.
2whois.ru
7. We are looking for other sites that may belong to a company/person
You can find other domains that are hosted on the same server as the site (and then look at their whois information to look for contacts). It often happens that a person, in addition to a domain in zone.ru, registers a domain of the same name in zone.com (io, biz) with the same hosting provider. In the whois of the ru-domain, the email may not be visible, but in the second one it may not be visible.
Other articles on the topic of collecting information about people on the Internet.