Email OSINT is a foundational skill for both offensive and defensive security work. From discovering corporate email formats used by a target organization to verifying whether a specific address is live, these tools cover the full spectrum. Use them to uncover email addresses tied to a domain, validate deliverability before outreach, check sender reputation for phishing analysis, and investigate whether addresses have been exposed in data breaches. Many tools combine multiple capabilities — email discovery, format detection, and verification — in a single workflow.Documentation Index
Fetch the complete documentation index at: https://mintlify.com/edoardottt/awesome-hacker-search-engines/llms.txt
Use this file to discover all available pages before exploring further.
Hunter.io
Find professional email addresses in seconds. Domain search reveals the email patterns used by any company.
PhoneBook
Lists all domains, email addresses, or URLs for the given input domain.
IntelligenceX
Search engine and data archive useful for finding email addresses across leaked datasets and the web.
Reacher.email
Open-source email verification service for checking deliverability without sending a message.
RocketReach
Your first-degree connection to any professional. Find verified email addresses and phone numbers.
email-format.com
Find the email address formats in use at thousands of companies.
EmailHippo
Email address verification technology for checking validity and deliverability.
ThatsThem
Reverse email lookup — find personal information tied to a known email address.
verify-email.org
Checks whether the mailbox exists or not without sending an email.
Melissa – Emailcheck
Check email addresses and verify they are live using Melissa’s data services.
VoilaNorbert
Find anyone’s email address by name and company domain.
SynapsInt
The unified OSINT research tool, aggregating email, domain, IP, and social intelligence.
skymem.info
Find email addresses of companies and people indexed from various public sources.
findemails.com
Find anyone’s email address in seconds by searching name and domain.
Experte Email Finder
Find the right email address even if you only know the name and the company.
EmailSherlock
Search for the person behind an email address and find a reputation score.
Anymail Finder
Find verified emails with a high accuracy rate across millions of companies.
Tomba.io
With 430+ million email addresses indexed, effective search filters, and deliverability checks.
Snov Email Finder
Find any email anywhere — search by domain, name, or company.
EmailSearch.io
Find any emails and phones from a domain, LinkedIn, name, and company.
Email Permutator+
Find potential email addresses by permutating different first/last name and domain combinations.
Emailrep.io
Simple Email Reputation — check the risk score and activity history of any email address.
Mailboxvalidator
Secure and reliable email validation service to check for invalid email addresses.
ContactOut
Most accurate email finder for personal and work email outreach.
validemail.io
Validate email addresses for deliverability with the Email Validation API.
Predicta Search
Reverse lookup search engine for email and phone numbers.
Infoga.io
Find out all emails for a certain domain using multiple search engines simultaneously.
Email lookup tools are subject to GDPR, CAN-SPAM, and other regional privacy regulations. Many of these services aggregate publicly available data, but using them to harvest email addresses for unsolicited contact or mass marketing may be unlawful. Always ensure your use case is compliant with applicable law and the terms of service of each platform. Treat personal email addresses discovered through OSINT with the same care as other personally identifiable information (PII).