Guesses and verifies a person's work email from their name and company domain.
tools / hunter
Hunter
Finds professional email addresses for a company domain, infers the address pattern (e.g. first.last@), and verifies deliverability.
field note
Each result lists the public sources where the address was found, so you can confirm someone's role and employer.
used in playbooks
similar tools
Graph-based link-analysis platform. Run "transforms" against entities (people, domains, emails, companies) to pull data from dozens of integrated sources.
WHOIS lookup with cheap historical WHOIS and reverse WHOIS by registrant name, email, company or keyword.
Metasploit-style modular reconnaissance framework in Python, with a marketplace of modules and a built-in workspace database and reporting.
OSINT automation framework with 200+ modules. Give it a domain, IP, email, name or username and it recursively correlates findings in a web UI.
Swiss-army collection of DNS tools including reverse IP, reverse WHOIS, IP history, DNS records, reverse MX/NS and port checks.