Search

Email OSINT Tools

Have an email address and need to know who is behind it? These OSINT tools turn an email into linked social accounts, data-breach hits, registered services, and a real name. Email is one of the strongest pivot points in any investigation — it bridges person, account, and company. Below are the 116 tools in our catalogue that take an email address as input, indexed by what they return so you can chain them together.

116tools
Browse with filters
DeHashed icon

DeHashed

Breach intelligence and credential search

PaidWebAPI
IN+2
OUT
GitHub User Search icon

GitHub User Search

Search public GitHub users and repos

FreeWebAPI
IN+1
OUT
Have I Been Pwned icon

Have I Been Pwned

Check exposure in known data breaches

FreemiumWebAPI
IN
OUT
Maltego icon

Maltego

Visual OSINT link-analysis platform

FreemiumDesktop AppWeb
IN+15
OUT+1
Recon-ng icon

Recon-ng

Modular web reconnaissance framework

FreeOSSCLI
IN+5
OUT+1
SpiderFoot icon

SpiderFoot

Automated OSINT reconnaissance framework

FreeOSSWebCLI
IN+13
OUT+3
AADInternals icon

AADInternals

Recon Azure AD / M365 tenant info from a domain

FreeOSSCLI
IN
OUT
AeroLeads icon

AeroLeads

a prospecting platform for finding business emails, phone numbers, and compan

FreemiumWebBrowser Extension
IN
OUT
Anymail Finder icon

Anymail Finder

an email discovery and verification platform for finding deliverable professi

FreemiumWebAPI
IN
OUT
BeenVerified icon

BeenVerified

People search and background reports

PaidWebMobile App
IN+1
OUT+1
Behind The Email icon

Behind The Email

Reverse email lookup that turns an address into a full identity profile.

PaidWebAPI
IN
OUT+3
Blackbird icon

Blackbird

Username and email reconnaissance across 600+ sites

FreeOSSCLIWeb
IN
OUT
Blacklist Checker icon

Blacklist Checker

Check IPs and domains against 100+ DNS blacklists

FreemiumWebAPI
IN
OUT
BreachAware icon

BreachAware

Paid breach-credential monitoring service

FreemiumWebAPI
IN
OUT
BreachSense icon

BreachSense

Paid stealer-log and breach monitoring

PaidWebAPI
IN
OUT
Burner Email Providers icon

Burner Email Providers

Maintained list of burner / temporary email domains

FreeOSSAPI
IN
OUT
Buster icon

Buster

Email reconnaissance Python CLI

FreeOSSCLI
IN
OUT
Canary Tokens icon

Canary Tokens

Honeytoken generator for tripwire alerts

FreeOSSWebAPI
IN
OUT
CheckLeaked icon

CheckLeaked

Aggregated breach search across Dehashed, Snusbase and LeakCheck

FreemiumWebAPI
IN+2
OUT+1
Cobwebs Tangles icon

Cobwebs Tangles

AI web-intelligence platform for law enforcement

PaidWeb
IN
OUT
Constella Hunter icon

Constella Hunter

Enterprise identity-leak intelligence platform

PaidWebAPI
IN+1
OUT
ContactOut icon

ContactOut

a recruiting and contact search platform for finding professional emails and

FreemiumWebBrowser Extension
IN
OUT
Cyble Vision icon

Cyble Vision

Cyble dark-web monitoring platform

PaidWebAPI
IN
OUT
Cynic Ashley Madison Checker icon

Cynic Ashley Madison Checker

Check if an email is in the Ashley Madison leak

FreeWeb
IN
OUT
DarkOwl Vision icon

DarkOwl Vision

Paid dark-web search and monitoring

PaidWebAPI
IN
OUT
Datasploit icon

Datasploit

Domain/email/username OSINT framework

FreeOSSCLI
IN+1
OUT
DeHashed API Tool icon

DeHashed API Tool

CLI for querying the DeHashed breach API by email, username or domain

PaidOSSCLI
IN+2
OUT
Disposable Email Domains icon

Disposable Email Domains

Reference list of disposable email-provider domains

FreeOSSAPI
IN
OUT
Elasticsearch Crawler icon

Elasticsearch Crawler

Crawls open Elasticsearch for breach data

FreeOSSCLI
IN
OUT
Email Hippo icon

Email Hippo

an email verification API and service for checking deliverability and fraud s

PaidWebAPI
IN
OUT
Email2PhoneNumber icon

Email2PhoneNumber

Recover phone numbers from email via reset flows

FreeOSSCLI
IN
OUT
Emailable icon

Emailable

Verify email deliverability via MX and SMTP checks

FreemiumWebAPI
IN
OUT
Enzoic icon

Enzoic

Compromised password REST API

PaidAPI
IN
OUT
Epieos icon

Epieos

an email and phone OSINT platform for finding accounts and traces linked to i

FreemiumWeb
IN
OUT
FindThatLead icon

FindThatLead

an email discovery and verification service for domains, companies, and profe

FreemiumWebAPI
IN
OUT
Flare icon

Flare

Dark-web and Telegram monitoring for leaked corporate credentials

PaidWebAPI
IN
OUT+2
Flashpoint Ignite icon

Flashpoint Ignite

Flashpoint dark-web and PAI platform

PaidWebAPI
IN
OUT
Flickr API icon

Flickr API

Resolve an email address to its Flickr account

FreeAPI
IN
OUT
FootprintIQ icon

FootprintIQ

Username/email/phone footprint search with exposure score

FreemiumWeb
IN
OUT
GetProspect icon

GetProspect

a B2B email finder and contact database for company and professional investig

FreemiumWebBrowser Extension
IN
OUT
GhostProject icon

GhostProject

Search leaked credentials by email address

FreemiumWeb
IN
OUT
GitFive icon

GitFive

Track GitHub users from a username or email to commits, keys and alt accounts

FreeOSSCLI
IN
OUT+2
GitRecon icon

GitRecon

Harvest emails and names from GitHub/GitLab profiles

FreeOSSCLI
IN
OUT
HackCheck icon

HackCheck

Search 16B+ breach records by email, username or password

FreemiumWebAPI
IN
OUT
Harpoon icon

Harpoon

Meta OSINT CLI wrapping 30+ APIs

FreeOSSCLI
IN+1
OUT
Holehe icon

Holehe

Check service registrations for an email

FreeOSSCLI
IN
OUT
Hudson Rock Cavalier icon

Hudson Rock Cavalier

Infostealer exposure lookup tool

FreemiumWeb
IN+1
OUT
Hudson Rock Cybercrime Tools icon

Hudson Rock Cybercrime Tools

Check emails and domains against infostealer data

FreemiumWeb
IN
OUT
IPQualityScore icon

IPQualityScore

Risk-scoring API for IP, email, phone, URL

FreemiumAPI
IN+1
OUT
IntelBase icon

IntelBase

Email-to-footprint with 40B+ breach and stealer-log records

FreemiumWebAPI
IN
OUT+2
IntelTechniques Search Tools icon

IntelTechniques Search Tools

Pivot one identifier across dozens of OSINT lookup sites

FreeWeb
IN+2
OUT
Kickbox icon

Kickbox

an email verification platform for checking mailbox existence, quality, and d

FreemiumWebAPI
IN
OUT
Lampyre icon

Lampyre

Desktop OSINT link-analysis with paid lookups

FreemiumDesktop App
IN+1
OUT
LeakCheck icon

LeakCheck

Search compromised breach records

FreemiumWebAPI
IN
OUT
LeakLookup icon

LeakLookup

Search breach exposure records

PaidWebAPI
IN+1
OUT
LeakPeek icon

LeakPeek

Paid breach credential search service

PaidWeb
IN
OUT
LeakRadar icon

LeakRadar

449B+ stealer-log and breach credential search, EU-hosted

FreemiumWebAPI
IN
OUT
Lusha icon

Lusha

a B2B contact data platform for enriching people, companies, emails, and phon

FreemiumWebAPI
IN
OUT
MIT PGP Key Server icon

MIT PGP Key Server

Search PGP public keys by name, email or key ID

FreeWeb
IN
OUT
MailboxValidator icon

MailboxValidator

Validate an email address for deliverability and disposability

FreemiumWebAPI
IN
OUT
Showing 60 of 116 — browse all

Find specific data from email address

Data Breach Records42Social Media Account42Report / Summary38Employee List18Leaked Credential13Real Name11Relationship Map10DNS Records9Paste Site Content9Physical Address9Phone Number7URL7

Investigate by other data types

Phone NumberUsernameReal NameIP AddressDomain NameCryptocurrency WalletImage / PhotoURLHash (MD5/SHA)Company NameMalware Sample