Person of Interest Search

Searches indexed data-breach dumps for emails, usernames, passwords, IPs and other leaked identifiers

Checks an email address against known data-breach dumps and paste sites, with breach details

Search engine and permanent archive indexing breach records, paste sites, dark-web/.onion content, historical WHOIS, and leaked documents by email, domain, or other selectors.

Free Law Project's nonprofit search engine for US federal court opinions and PACER dockets (via the crowd-sourced RECAP archive), searchable by party name or case keyword.

Searches for publicly indexed files hosted on Google Drive by keyword

Google Custom Search Engine preconfigured to search for document file formats by keyword

Finds email addresses tied to a domain or a named person, with paid bulk list downloads

Generates likely email address permutations from a person's name and a company domain

OSINT platform that takes an email or phone number and returns linked Google account data and hits across 100-560+ platforms depending on the access tier.

Reverse-looks-up an email address or phone number to surface linked social media and Google account profiles

Looks up the email address format (e.g. first.last@domain) used by a given company

Open-source Python tool that queries Google account internals from an email address to recover a linked profile name, photo, and public Google-service activity.

Python CLI that checks 120-300+ sites for whether an email is registered by exploiting password-reset-form response differences, without notifying the target.

Finds and verifies professional email addresses for a person or company domain, with cold-outreach tools

Reputation lookup for an email address covering breach exposure, domain validity and deliverability signals

Open-source OSINT tool that gathers emails, subdomains, names, and IPs tied to a domain or organization from search engines, certificate-transparency logs, and other public sources.

Extracts the sender's IP address from pasted email headers to trace an email's origin

Looks up the Skype account associated with a given email address

Reverse WHOIS search returning domains registered under a given email address, name or company

WHOIS, WHOIS history and reverse WHOIS lookup API for domains, returned as JSON or XML

Open-source Python OSINT framework that scrapes people-search and social sites to build a profile from a name, email, or phone number.

Manual tool for building node-and-edge link-analysis diagrams to map relationships between entities

Free genealogy database of historical records and family trees, searchable by ancestor name

Commercial link-analysis platform mapping entities and relationships via 'transforms'; its browser-based Maltego Search checks 200+ social platforms and breach data by email/username.

Organizational network analysis platform visualizing relationships from surveys or workplace data like email and Slack

Modular Python reconnaissance framework, pre-installed on Kali Linux, with a marketplace of modules integrating sources like Shodan, Hunter.io, and HIBP for person/domain OSINT.

Open-source OSINT automation framework with 200+ modules that pivots across a domain, email, IP, or person to build a correlated reconnaissance report via web UI or CLI.

US people-search engine returning names, addresses, phone numbers, and relatives from public records, searchable by name or address.

US white-pages directory for reverse phone lookup and finding a person's contact details

Public-data search engine checking a username, email, or phone across 700+ platforms in parallel and recursively surfacing linked accounts; free demo without account.

Pay-per-credit OSINT platform aggregating 39+ sources and 600B+ records for US person lookup, breach data, reverse face search, and 40+ platform username search.

Free international reverse phone lookup returning carrier, geographic region, and line type (mobile/landline/VoIP); does not disclose subscriber identity.

US people-search aggregating public records: phone numbers, addresses, criminal records and property history

Commercial real-time checker that takes an email, phone number, or username and returns linked accounts across 200+ platforms for investigators and law enforcement.

US people-search generating background reports (address history, relatives, records) from a name or phone

Open-source CLI that scans an international phone number for carrier, line type, and country data and generates search-engine footprint links for further pivoting.

Enterprise identity-resolution and fraud-risk platform matching people across a global identity graph

Google Custom Search Engine that searches Facebook, Twitter, LinkedIn, Pinterest and other social networks for a keyword

Commercial people-search aggregator combining property, court, business, and social-network records (billions of records) for name, phone, and address lookups.

Free US reverse-name lookup returning phone numbers, emails, addresses and estimated income

Commercial OSINT investigation platform offering 17 search types (username, email, phone, image, crypto, vehicle, court records) with case management for investigators.

Searches public web content, social profiles, news and blogs for a person's first and last name

Australian directory for finding personal, business and government contact listings

B2B contact database for finding business people's direct dials, emails and job titles by company or title

Username- and domain-availability checker that scans dozens of platforms simultaneously to see where a given handle is registered.

Checks a username's availability across many platforms simultaneously as you type

Sherlock-derived Python OSINT tool that checks 3,000+ sites for a username and extracts secondary identifiers (bio, email, links) from matched profile pages.

Python CLI that checks whether a given username exists on 400+ social networks by probing per-site URL patterns and response signatures.

Enumerates a username across hundreds of websites by category, showing where it is registered