Investigator Use
Skymem is an email address intelligence platform that searches its database for email addresses associated with a specific domain or individual, with a particular focus on exposing email addresses that have been indexed from public web sources, forum registrations, and other online contexts. It allows reverse lookups by domain to surface all email addresses the platform has indexed for that organization.
For OSINT investigators, Skymem's domain-based email enumeration is valuable during corporate reconnaissance. Entering an organization's domain retrieves all email addresses Skymem has indexed from public web crawling — revealing staff addresses, support contacts, developer accounts from code repositories, and other corporate email addresses that are discoverable through surface web indexing.
The depth of Skymem's database means it frequently surfaces email addresses that do not appear in a simple Google search, particularly addresses found in technical documentation, mailing list archives, bug reports, or developer forums. These technical context addresses can reveal internal roles, tool usage, and organizational structure.
For individual-targeted investigations, Skymem can search by person name to retrieve known email addresses, which then serve as pivot points for breach database lookups, social media account searches, and further email intelligence gathering.
Domain enumeration via Skymem is particularly useful during due diligence investigations to establish the current scope of an organization's email presence and identify personnel who are publicly associated with the domain through their email addresses.
Skymem's database also indicates when addresses were first indexed and from what general context (forum post, web page, document), providing provenance information that helps investigators understand the circumstances under which a specific email became public.
Limitations: Skymem's coverage is dependent on its crawling history and may not reflect the most recent email appearances. Newly created addresses or addresses that appear only on pages not indexed by Skymem will not be returned. Like all email intelligence tools, it should be used as one component of a broader email investigation workflow alongside EmailRep, HaveIBeenPwned, and social media searches.
Record the domain or name queried, the returned addresses, and the query date for case documentation.
Before You Pivot
Record Context
Capture the target, search terms, and why this source is relevant before you leave the page.
Preserve Evidence
Archive volatile pages, save screenshots, and keep timestamps for anything that may change.
Corroborate
Treat one tool as a lead source. Confirm important findings with independent sources.
Related Tools
Email Checker
Email OSINT
Email Checker is a free email verification tool. It helps you validate any email address online for free. Check if mailbox really exists.
Email Extractor
Email OSINT
Online Email Extrator, seperate your emails from the rest of your document easily with simple cut and paste. Then organize your emails here
Email Finder
Email OSINT
First 50 searches are FREE. Quickly find anyone's contact information for your lead research, talent acquisition, PR, or HR with our email finder!
Email IP Leak
Email OSINT
E-Mail IP Leak Test is a free tool for the internet allowing end users to test their e-mail provider
Email Scrap
Email OSINT
Check if an email is valid with our free online email verifier. Send your emails with complete confidence. Never get bounces anymore.
Email Verification
Email OSINT
Email Hippo verifies email address deliverability and syntax, detects disposable addresses, and identifies catch-all mail server configurations.