Post #2375291
2025-06-13 15:25 UTC
The Ghunt output provides us with a few good leads. First it confirms that it's a valid gmail account. Second it provides links to the TA's Google Maps reviews.
grey@thruntmachine:~$ ghunt email shadowgamer5628@gmail.com
By: mxrch (🐦 @mxrchreborn)
Support my work on GitHub Sponsors ! 💖
> GHunt 2.3.3 (🕷 Spider Edition) https://lh3.googleusercontent.com/a-/ALV-UjVyN5P4R9BhUF4W6b8P-zSsuy32A0AsMRd2P9G3VeMGM3JE4HAj
[-] Default cover picture
Last profile edit : 2025/05/05 09:34:18 (UTC)
Email : shadowgamer5628@gmail.com
Gaia ID : 112604768676644210605
User types :
- GOOGLE_USER (The user is a Google user.)
📞 Google Chat Extended Data
Entity Type : PERSON
Customer ID : Not found.
🌐 Google Plus Extended Data
Entreprise User : False
🎮 Play Games data
[+] New token for playgames has been generated
[-] No player profile found.
🗺 Maps data
Profile page : https://www.google.com/maps/contrib/112604768676644210605/reviews
[Statistics]
Ratings : 6
[-] Reviews are private.
🗓 Calendar data
[-] No public Google Calendar.
(2/???)
#OSINT #OPSECFAIL #CTI #ThreatIntel
Replies (1)
-
@grey@infosec.exchange 2025-06-13 16:01
Taking a look at their Maps data: https://www.google.com/maps/contrib/112604768676644210605/reviews we can confirm they spent time in Columbia within the past 3-6 years. We also see the username mentioned in the Censys report "Shadow GRT" Let's pivot off of ShadowGRT and find those other accounts mentioned by Censys. (3/???) #OSINT #OPSECFAIL #CTI #ThreatIntel