An attacker could also take advantage of Google's Forgot Password flow to figure out the country code associated with a victim's phone number, as well as obtain their display name by creating a Looker ...