Email OSINT & Breach Exposure Tools
Tools for checking whether an email address or domain appears in known breaches, verifying addresses, and understanding an organization's email footprint. Email addresses are personal data, so these lookups deserve more care than infrastructure checks.
Filter these in the interactive catalog
7 tools
- EmailRepReturns reputation signals for an email address based on public and provider-held indicators.
- MOSINTAn automated e-mail OSINT tool
- H8mailEmail OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email
- X-osintA Termux and Linux CLI combining lookups for domains, IPs, emails, phone numbers, metadata, ports, DNS, and related identifiers.
- OSINT SPYPerforms OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers and cyber crime investigator in order to find deep information about their target. If you want to ask something please feel free to reach out to me...
- ZehefZehef is an osint tool to track emails
- iKyOSINT Project. Collect information from a mail. Gather. Profile. Timeline.
Using email & exposure tools responsibly
- Only check addresses you are authorized to research, such as your own or your organization's.
- Breach results confirm exposure, not current account ownership.
- Never use exposed credentials to log in to anything.
Guides
- How to Investigate a Suspicious Email Address Check whether an email address is risky or part of a phishing attempt: reputation lookups, breach exposure, header analysis, and domain checks.