Email Validator & Domain OSINT — WHOIS, DNS, SSL, Breach
Pricing
from $5.00 / 1,000 target checkeds
Check email syntax, disposable and role accounts, DNS/MX, WHOIS, SSL, SPF/DMARC/DKIM, public breach metadata, and company-name guesses. Supports bulk CSV, domain, email, and username inputs. No user API key. Active PPE: $0.001 start plus $0.005 per target after five free targets.
Email addresses to validate and check. Domains are auto-derived from these. Example: ["hello@example.com"].
[]Paste multiple emails one per line. Merged with the 'emails' list above. Example: "hello@example.com\nadmin@example.org".
Domains to check in addition to those derived from emails. Example: ["example.com"].
[]Paste multiple domains one per line (e.g. example.com). Merged with the 'domains' list above. Example: "example.com\nexample.org".
Quick single-domain input. Example: "example.com".
URL to a CSV file whose first column (or the column at csvColumn index) contains domain names. Fetched and merged with the domains list above. Example: "https://example.com/domains.csv" for a public CSV you control.
Zero-based column index in the CSV that contains domain names. Example: 0 for the first column.
Extract company name from domain and generate LinkedIn/Crunchbase URL guesses. Example: false to omit company-name guesses.
Skip SMTP port 25 probe to MX host (checks if mail server is online). Example: true for a fast run.
If provided, checks if this password appears in known breaches via HIBP's k-anonymity model — only the first 5 chars of SHA-1 are sent. Plaintext is NEVER transmitted. Example: a private test password; never paste it into shared logs.
WHOIS adds 1-3s per domain. Disable for faster batch mode. Example: true for a fast run.
SSL cert lookup adds 0.5-2s per domain. Example: true for a fast run.
Usernames to look up across social/developer platforms. Example: ["exampleuser"].
[]Which platforms to check for each username. Leave empty to use all 20 defaults: github, twitter, reddit, instagram, youtube, tiktok, pinterest, medium, dev, hackernews, producthunt, stackoverflow, npm, pypi, dockerhub, gitlab, twitch, patreon, steam, keybase. Example: ["github","reddit"].
[]Track breach count per domain across runs. Flags 'breach_changed: true' when new breaches are detected since the last run. Use with a schedule to get notified when domains get newly breached. Example: true on scheduled runs.
Optional. Send a summary (or breach change alert) to Telegram when the run completes. Example: a private bot token.