Skip to content
osint_verified✓

tools / hunter

Hunter

Finds professional email addresses for a company domain, infers the address pattern (e.g. first.last@), and verifies deliverability.

freemiumacct reqapiwebextension

field note

Each result lists the public sources where the address was found, so you can confirm someone's role and employer.

used in playbooks

similar tools

Voila Norbertvoilanorbert.com

Guesses and verifies a person's work email from their name and company domain.

freemiumacct reqapi
real namecompanyemaildetails
Maltegomaltego.com

Graph-based link-analysis platform. Run "transforms" against entities (people, domains, emails, companies) to pull data from dozens of integrated sources.

freemiumacct reqdesktop
real nameemaildomaincompanyusernameip / asncryptodetails
Whoxywhoxy.com

WHOIS lookup with cheap historical WHOIS and reverse WHOIS by registrant name, email, company or keyword.

freemiumacct optionalapi
domainemailreal namecompanydetails
recon-nggithub.com

Metasploit-style modular reconnaissance framework in Python, with a marketplace of modules and a built-in workspace database and reporting.

freeactiveosscli
domaincompanyemailip / asndetails
SpiderFootgithub.com

OSINT automation framework with 200+ modules. Give it a domain, IP, email, name or username and it recursively correlates findings in a web UI.

freeactiveosscli
domainip / asnemailreal nameusernamephonecryptodetails
ViewDNS.infoviewdns.info

Swiss-army collection of DNS tools including reverse IP, reverse WHOIS, IP history, DNS records, reverse MX/NS and port checks.

freemiumapi
domainip / asnemailreal namedetails
>esc
↑↓ navigate · ↵ open · Shift ↵ tool details