OSINT Tools for Email Addresses
Analyze a suspicious email address, verify its existence, find linked accounts and identify data breaches. These free OSINT tools cover validation, profiling and phishing detection.
43 tools · Version française
- Blacklist Checkeralso written BlacklistCheckerChecks an IP, domain or address against the main blocklists, with an explanation of each listing.freemium
- breach.vipalso written breach vipFree database search engine providing access to 1000+ breach databases for research, email searching, and analysis of compromised credentials.free
- BreachDirectoryalso written Breach DirectoryFree breach data API and search engine covering 11B+ leaked records from 2,000+ breaches, with plaintext password exposure checks and SHA-1 hash lookups.free
- Burner Email Providers (T)also written Burner Email ProvidersCurated list of temporary email service domains with API references and detection library implementations across multiple languages.free
- DeHashed (R)also written DeHashed, De HashedModern breach search engine indexing historical breach data over a decade old, enabling searches by email, username, password, domain, phone, and IP address.freemium
- Disposable Email Domains (T)also written Disposable Email DomainsCommunity-maintained blocklist of 5,000+ disposable email domains with allowlist support and multi-language implementation examples. Used by PyPI and other projects.free
- Disposable Emails RegistrySearchable registry of disposable email domains with bulk download support for threat intelligence integration.free
- Email Address ValidatorDetailed validation of an address: syntax, domain, mail server, disposable-address detection and catch-all configuration.freemium
- Email Formatalso written EmailFormatTool for analyzing and discovering corporate email address patterns and formats to predict valid employee email addresses within an organization.free
- Email Hippoalso written EmailHippoVerifies an address actually exists without sending anything to it, by querying the mail server directly.freemium
- Email Permutatoralso written EmailPermutatorOSINT tool that generates all possible email address combinations from a person's name and domain(s) for reconnaissance and email guessing.free
- Email to Address (R)also written Email to AddressMelissa.com's data quality and verification service that validates and enriches email addresses with supplementary contact information.paid
- EmailableEmail verification API that checks deliverability, MX records, and syntax validity for any address. Returns detailed bounce risk and mailbox existence confidence.freemium
- EmailRepalso written Email RepEmail address reputation and intelligence lookup. Determine if an email is suspicious, associated with malicious activity, spam or data breaches. API available.freemium
- EpieosOSINT tool to reverse search emails and phone numbers. Finds linked Google accounts, social profiles, calendar events and more from an email address.freemium
- GHunt (T)also written GHunt, G HuntOffensive Google framework that investigates Google accounts using email addresses to uncover YouTube channels, Google Photos, Maps reviews, and associated artifacts.free
- GravatarGlobal avatar service tied to an email address. An MD5 hash of the address returns the profile picture, so a known address can be linked to a face and sometimes to a public profile without contacting anyone.free
- H8mail (T)also written H8mailCLI email OSINT and password breach hunting tool that chains multiple breach APIs (HaveIBeenPwned, Dehashed, etc.) and supports local breach file scanning.free
- Have I been pwned?Database of breached credentials and email addresses from known data breaches.freemium
- Holehe (T)also written HolehePython-based email enumeration tool that checks if an email is registered across 120+ websites and services using password-reset mechanisms.free
- HunterEmail finder and verifier that discovers business email addresses from company domains, names, and social profiles with up to 98% accuracy rate.freemium
- LeakCheck.ioalso written Leak Check.io, LeakCheckData breach search engine with 7B+ leaked records, searchable by email, username, domain, IP, phone or password hash — with plaintext context from original dumps.freemium
- MailboxValidatoralso written Mailbox ValidatorEmail verification API that validates email deliverability, detects catch-all addresses, and provides risk scoring for bulk email list cleaning.paid
- MailScrapalso written Mail ScrapEmail verification tool that connects to mail servers to verify mailbox existence and removes disposable email addresses from lists.freemium
- MailTesteralso written Mail TesterSimple free existence check for an address, useful as a second opinion when another verifier is ambiguous.free
- MOSINT (T)also written MOSINTAutomated email OSINT tool in Go. Consolidates multiple services to investigate a target email: breach checks, social media lookups, domain info. 5.8k GitHub stars.free
- MultirblQueries more than a hundred blocklists at once for one IP or domain, and shows which ones list it and why.free
- MxToolboxalso written Mx ToolboxEmail deliverability diagnostics tool that checks MX records, SPF, DKIM, DMARC configuration, and server health to prevent email delivery issues.free
- OSINT Industriesalso written OSINTIndustriesAccount linking service that extracts all registered accounts tied to an email or phone across 500+ platforms including social media, messaging apps, and lifestyle services.freemium
- OSINT Rocksalso written OSINTRocksOSINT aggregator for email and username investigation. Combines results from multiple OSINT sources to provide comprehensive intelligence on email addresses and usernames.free
- Predicta Searchalso written PredictaSearchReverse lookup engine covering 100+ social networks from a single email, phone number, username, or name to map a complete digital identity.freemium
- Reacher Demoalso written ReacherDemoHosted demo of the Reacher email verification API allowing free testing of email validation and deliverability checks online.free
- Reacher Github (T)also written Reacher Github, ReacherGithubOpen-source Rust-based email verification API that checks email deliverability without sending messages, detecting catch-all and disposable addresses.free
- Read Notifyalso written ReadNotifyEmail tracking and read receipt service that monitors email opens and engagement, useful for confirming email validity through delivery.freemium
- SherlockEyealso written Sherlock EyeStarts from an email address and returns the accounts, domains and public traces attached to it, with the source of each finding.freemium
- SkymemEmail finder that discovers company and personal email addresses by domain or name, with bulk search, email list creation, and advanced filtering capabilities.freemium
- Snov.io Email Finderalso written Snov io Email FinderFinds the professional addresses attached to a domain and infers the naming convention the company uses.freemium
- SnusbaseData breach search platform covering 100+ breaches, allowing lookups by email, username, IP, password hash or name across aggregated leaked databases.freemium
- Spamhaus Checkalso written SpamhausCheckChecks an address, domain or IP against the Spamhaus blocklists, the reference in the field. A listing says a lot about a sender's reputation.free
- theHarvester (T)also written theHarvester, the HarvesterCommand-line tool for gathering emails, subdomains, IPs, and URLs from public sources.free
- ToofrInfers a company's email naming convention from known examples, then builds the likely address for a given name.freemium
- Verify Emailalso written VerifyEmailFree existence check for an address by querying the mail server, with no message ever sent to the holder.free
- VoilaNorbertalso written Voila NorbertEmail finder and verifier with 98% success rate that discovers business emails by company/domain, person name, or LinkedIn profile with bulk upload capability.freemium
Frequently asked
- How to find all accounts linked to an email?
- Use Holehe or Epieos to test if the email is registered on dozens of online services.
- How to check if an email has been compromised?
- HaveIBeenPwned is the reference: it aggregates hundreds of known data breaches.