We are working a case and need to identify an anonymous suspect. If we reach out via email or social DMs, could we make them reveal identifying info like IP, device details and such?
If it is feasible to make the suspect click on a link, you could try something like Grabify — or a custom version of such a tool you implement in-house. You could also use Grabify with an invisible image, but many email clients would block that by default unless explicitly allowed by the end-user.
Their website states that they can track the following:
Here is the complete list of what Grabify can log:
- Date/Time
- IP Address
- Country
- City
- Battery
- Charging
- Orientation
- Connection Type
- Timezone
- Language
- Incognito/Private Window
- Ad Blocker
- Screen Size
- Local IP
- Browser
- Operating System
- Device
- GPU
- Bot Name
- Bot URL
- User Agent
- Referring URL
- Host Name
- ISP
- VPN/Proxy Detection
- Tor Detection
- Virtual Machine Detection