1. Email
1.1. Manual Attempts
1.1.1. Email Permutator
1.1.2. LinkedIn Profile by Username
1.1.3. FollowerWonk Bio Search
1.1.4. LinkedIn Content Search
1.1.5. Remove Domain & search by Username
1.1.6. Search Engines
1.1.6.1. [username] + LinkedIn
1.1.6.2. [username] + ZoomInfo
1.1.6.3. [username] + Twitter
1.2. Email Assumptions
1.2.1. Search Engines
1.2.1.1. Google
1.2.1.2. Bing
1.2.1.3. Yandex
1.3. Verify/validate Email Address
1.3.1. URL one-liners
1.3.1.1. https://api.trumail.io/v2/lookups/json?email= …<EMAIL>/
1.3.1.2. https://thatsthem.com/email/ <EMAIL>/
1.3.1.3. https://www.spytox.com/email-search/ <EMAIL>/
1.3.1.4. https://data.occrp.org/search?q= <EMAIL>/
1.3.1.5. https://en.gravatar.com/site/check/ <EMAIL>/
1.3.1.6. https://pipl.com/search/?q= <EMAIL>/
1.3.1.7. https://intelx.io/?s= <EMAIL>/
1.3.1.8. https://dehashed.com/search?query= <EMAIL>/
1.3.2. Gravatar Email Check
1.4. Search Tools
1.4.1. HIBP https://haveibeenpwned.com/ (may be premium soon)
1.4.2. Verify https://tools.verifyemailaddress.io/
1.4.3. Verifalia https://verifalia.com/validate-email
1.4.4. Mailtester http://www.mailtester.com/testmail.php
1.4.5. FindThatEmail http://findthat.email/
1.4.6. EmailMatcher https://emailmatcher.com/
1.4.7. ProspectLinked https://prospectlinked.com/#/home
1.4.8. MetricSparrow http://metricsparrow.com/toolkit/email-permutator/
1.4.9. ThatsThem https://thatsthem.com/reverse-email-lookup
1.4.10. Spokeo https://www.spokeo.com/email-search
1.4.11. PsbDmp https://psbdmp.ws/
1.4.12. HackedEmails https://hacked-emails.com/
1.4.13. OCCRP https://data.occrp.org/search?q=gmail.com
1.4.14. Dehashed https://dehashed.com/
1.4.15. Hashes.org https://hashes.org/leaks.php
1.4.16. ReverseGenie http://www.reversegenie.com/searching=email
1.4.17. ManyContacts https://www.manycontacts.com/en/mail-check
1.4.18. ComLullar http://com.lullar.com/
2. Username
2.1. Manual Attempts
2.1.1. Social Networks
2.1.1.1. Facebook
2.1.1.2. LinkedIn
2.1.1.3. Instagram
2.1.1.4. Github
2.1.1.5. Twitter
2.1.2. Personal Website
2.1.2.1. Stored Documents
2.1.2.2. Archived Pages
2.1.2.3. site: Search
2.2. Search Tools
2.2.1. Knowem https://knowem.com/checksocialnames.php?u=
2.2.2. NameChk https://namechk.com/
2.2.3. NameCheckr https://www.namecheckr.com/
2.2.4. NameVine https://namevine.com/
2.2.5. UserSearch https://usersearch.org/
2.2.6. UserSherlock http://usersherlock.com/
2.2.7. Profilr https://www.profilr.social/search/
2.2.8. Tinder https://www.gotinder.com/@user
2.2.9. Amazon https://www.google.com/search?q=site%3Aamazon.
2.2.10. SocialCatfish https://socialcatfish.com/reverse-username-search/
2.2.11. WhatsMyName https://github.com/webbreacher/whatsmyname
2.2.12. Sherlock https://github.com/sherlock-project/sherlock
3. Full Name
3.1. Search Engines
3.1.1. Corporate Email
3.1.1.1. Search Engines
3.1.1.1.1. site:companywebsite.com + kenlyons [at] companyname.com
3.1.1.1.2. site:companywebsite.com + klyons [at] companyname.com
3.1.1.1.3. site:companywebsite.com + ken [at] companyname.com
3.1.1.1.4. site:companywebsite.com + ken_lyons [at] companyname.com
3.1.1.1.5. site:companywebsite.com + ken.lyons [at] companyname.com
3.1.2. Personal Email
3.1.2.1. Search Engines
3.1.2.1.1. [name] + LinkedIn
3.1.2.1.2. [name] + ZoomInfo
3.1.2.1.3. [name] + Twitter
3.1.2.1.4. site:companywebsite.com + ken.lyons [at] companyname.com
3.1.2.1.5. site:companywebsite.com + kenlyons [at] companyname.com
3.1.2.1.6. site:companywebsite.com + klyons [at] companyname.com
3.1.2.1.7. site:companywebsite.com + ken [at] companyname.com
3.1.2.1.8. site:companywebsite.com + ken_lyons [at] companyname.com
3.1.3. Manual Attempts
3.1.3.1. Search Engines
3.1.3.1.1. site:personalblog.com + [name] + email
3.1.3.1.2. site:personalblog.com + [name] + contact
3.1.3.1.3. site:personalblog.com + ken.lyons [at] personalblog.com
3.1.3.1.4. site:personalblog.com + kenlyons [at] personalblog.com
3.1.3.1.5. site:personalblog.com + klyons [at] personalblog.com
3.1.3.1.6. site:personalblog.com + ken [at] personalblog.com
3.1.3.1.7. site:personalblog.com + ken_lyons [at] personalblog.com
3.1.3.1.8. [name] + email (or) email address
3.1.3.1.9. [name] + contact (or) contact information (or) contact me
3.1.3.1.10. Wayback Search
3.1.3.1.11. Domain History
3.1.3.2. LinkedIn Content Search
3.2. Search Tools
3.2.1. Who.is
3.2.2. TruePeopleSch https://www.truepeoplesearch.com/
3.2.3. Spokeo https://www.spokeo.com/
3.2.4. Thatsthem https://thatsthem.com/
3.2.5. Adv Background https://www.advancedbackgroundchecks.com/
3.2.6. Nuwber https://nuwber.com/
3.2.7. FamTreeNow https://www.familytreenow.com/
3.2.8. PeopelByNm http://www.peoplebyname.com/
3.2.9. UFind http://ufind.name/…
3.2.9.1. Whoisology
3.2.10. PublicRcrds https://publicrecords.directory/
3.2.11. GoLookup https://golookup.com/
3.2.12. PMR http://publicemailrecords.com/name listings
3.2.13. Radaris https://radaris.com/
3.2.14. Cubib https://cubib.com/
3.2.15. ComLullar http://com.lullar.com/
3.2.16. Yasni http://www.yasni.com/
3.2.17. TabSearch https://www.zabasearch.com/
3.2.18. Spytox https://www.spytox.com/
3.2.19. Intelius https://www.intelius.com/
3.2.20. ZoomInfo https://www.zoominfo.com/
3.2.21. Whoodle https://www.whoodle.com/
3.2.22. PeekYou https://peekyou.com/
3.2.23. Webmil http://webmii.com/
3.2.24. CvGadget https://cvgadget.com/
3.2.25. Classmates https://www.classmates.com/
3.2.26. Name2Email