Email OSINT Lookup

Email OSINT for investigators, fraud teams and security researchers. Give it an address; it tells you where that address is registered, who it belongs to, and what it has been exposed in.

Every platform check in this actor was measured live against a known-real address and an impossible one, and kept only if it discriminated. Checks whose upstream endpoint has since changed are reported as unknown, never as "no account". That distinction is the whole point: a dead source must not become a confident negative.

What you get

Identity enrichment

Not just a yes/no. Where the data exists, you get a name and real profile URLs.

Source	Returns
Gravatar	Real name, location, job title, and verified LinkedIn / X / GitHub / Instagram profile URLs
GitHub	GitHub username and profile resolved from commit authorship

Account detection (133 verified platforms)

Group	Platforms
Learning & education (19)	Alison, Allen, Asafeer, Aslbloom, Babbel, Bnrlanguages, Bunpo, Cakeapp, Cambly, Classdojo, Coursera, Duolingo, Hanzii, Hellochinese, Heyjapan, Programminghub, Quizlet, Talkpal, Vedantu
Developer & tech (18)	Codecademy, Codewars, Devrant, Envato, Hackerearth, Hackerone, Hackerrank, Hackthebox, Howtogeek, Huggingface, Luarocks, Medium, Qiita, Rubygems, Wix, Wondershare, Wordpress, Xda
Social (14)	Classmates, Couplejoy, Facebook, Instagram, Locket, Lovenudge, Mastodon, Meeff, Mewe, Pinterest, Plurk, Slowly, Whering, X
Entertainment (11)	Anilist, Appletv, Dreame, Girlslife, Hoichoi, Justwatch, Myanimelist, Nebula Tv, Stremio, Sunnxt, Weverse
Shopping & commerce (11)	Amazon, Etsy, Fixderma, Flipkart, Hautesauce, Naturabuy, Nykaaman, Rappi, Tatacliq, Vivino, Walmart
Productivity & other (10)	Anydo, Dragongroot, Dropbox, Eventbrite, Firefox, Moz, Numsify, Office365, Screener, Secondline
Creator & design (8)	Adobe, Buymeacoffee, Canva, Figma, Flickr, Kick, Patreon, Vimeo
News & media (7)	Aljazeera, Bbc, Cnn, Flipboard, Foxnews, Globaltimes, Indiatimes
Sports (7)	Aiscore, Besoccer, Espn, Marca, Nba, Playtomic, Uniscore
Fitness (5)	Evolveyou, Finch, Fitnessblender, Myfitnesspal, Sweat
Music (5)	Deezer, Gaana, Jiosaavn, Mixcloud, Spotify
Gaming (4)	Addictinggames, Chess Com, Crazygames, Stackb
CRM (3)	Axonaut, Insightly, Zoho
Dating (3)	Lespark, Okcupid, Skout
Travel (3)	Komoot, Polarsteps, Skyscanner
Community (2)	Disqus, Nextdoor
Hosting (2)	Bunny, Neocities
Jobs (1)	Freelancer

Email analysis

Format validation, disposable detection, free-provider detection, business-domain detection, role-account detection (info@, admin@), and name hints.

Security intelligence

Breach history and an A–F risk score based on exposure and account activity.

Input

Field	Type	Required	Default	Description
emails	string[]	Yes	,	Addresses to investigate, one per line
max_results_per_email	integer	No	25	Cap on sources reported per address. You are billed per found source, so this is your cost ceiling per address. 0 disables it
max_concurrency	integer	No	10	Emails processed at once (1–10)

Output

The dataset holds one row per channel where the address was found. A row says one thing, so it reads as a table and exports straight to CSV:

email	channel	found	username	profile_url
ann@example.com	github	true	octocat	https://github.com/octocat
ann@example.com	dropbox	true
ann@example.com	spotify	true

username and profile_url are filled for the channels that expose them and empty elsewhere, so the columns stay stable.

Per-address context is identical on every row, so it is not repeated there. Two records accompany the run instead:

• FULL_RESULTS — one complete record per address: email analysis, every breach with its exposed-data categories, the full channel map, and every unresolved check.
• NO_RESULTS — addresses where nothing was found, and separately any address whose lookup failed. A failed lookup is not the same as finding nothing: nothing is known about it. Neither produces rows and neither is billed.

Pricing

You are billed per found source, not per address. If an address turns up five sources, you pay for five. If it turns up nothing, you pay nothing.

Use max_results_per_email to set a hard ceiling per address. It defaults to 25, which covers a typical address comfortably while stopping a heavily-used one from returning 80+ billable channels. When the cap truncates, the rows that carry an identity (username, profile URL) are kept in preference, and the run log names every address that was capped. FULL_RESULTS always holds the complete channel map, so nothing is hidden by the cap.

Event	Price	When it fires
Found source (main)	$0.015	Once for each source an address was found on
Actor start	$0.00005	Once per run

Two things are never billed:

• Unknowns. A check that could not complete is not a found source.
• Unreliable sources. A check that cannot tell a real address from an impossible one never produces a finding, so it never charges.

Notes

• No email is ever sent to the address under investigation. Nothing notifies the target.
• The full scan always runs. Every address is checked against the complete source set, because a partial answer is not worth much in an investigation.
• A lookup takes roughly 5 to 15 seconds per address.
• Use this for lawful investigation, fraud prevention, due diligence and security research only.