Email OSINT Verified May 16, 2026

Skymem

Skymem finds publicly listed email addresses for companies and individuals to support contact discovery and email-based OSINT.

Open Tool

Investigator Use

Skymem is an email address intelligence platform that searches its database for email addresses associated with a specific domain or individual, with a particular focus on exposing email addresses that have been indexed from public web sources, forum registrations, and other online contexts. It allows reverse lookups by domain to surface all email addresses the platform has indexed for that organization.

For OSINT investigators, Skymem's domain-based email enumeration is valuable during corporate reconnaissance. Entering an organization's domain retrieves all email addresses Skymem has indexed from public web crawling — revealing staff addresses, support contacts, developer accounts from code repositories, and other corporate email addresses that are discoverable through surface web indexing.

The depth of Skymem's database means it frequently surfaces email addresses that do not appear in a simple Google search, particularly addresses found in technical documentation, mailing list archives, bug reports, or developer forums. These technical context addresses can reveal internal roles, tool usage, and organizational structure.

For individual-targeted investigations, Skymem can search by person name to retrieve known email addresses, which then serve as pivot points for breach database lookups, social media account searches, and further email intelligence gathering.

Domain enumeration via Skymem is particularly useful during due diligence investigations to establish the current scope of an organization's email presence and identify personnel who are publicly associated with the domain through their email addresses.

Skymem's database also indicates when addresses were first indexed and from what general context (forum post, web page, document), providing provenance information that helps investigators understand the circumstances under which a specific email became public.

Limitations: Skymem's coverage is dependent on its crawling history and may not reflect the most recent email appearances. Newly created addresses or addresses that appear only on pages not indexed by Skymem will not be returned. Like all email intelligence tools, it should be used as one component of a broader email investigation workflow alongside EmailRep, HaveIBeenPwned, and social media searches.

Record the domain or name queried, the returned addresses, and the query date for case documentation.

#Skymem #Email OSINT tools #Email OSINT resources #email #account #addresses #capabilities #companies #correlation

Before You Pivot

Record Context

Capture the target, search terms, and why this source is relevant before you leave the page.

Preserve Evidence

Archive volatile pages, save screenshots, and keep timestamps for anything that may change.

Corroborate

Treat one tool as a lead source. Confirm important findings with independent sources.

Related Tools

Related Workflows