Pivot map
Use this map to decide whether Email Scrap accepts the lead you are holding, and what kind of lead it may return for the next step.
Pivot from here
Outputs from Email Scrap can become inputs for the next tool. These are the most relevant follow-on pivots in the library.
Lookup email addresses and mailing addresses with reverse email search to identify people and organizations in OSINT investigations.
Addresses.com provides US residential address lookups, reverse phone searches, and people finder tools for locating individuals.
Ancestry search provides access to billions of historical records including census data, vital records, immigration documents, and family trees.
Canada411 is Canada's people directory for finding individuals by name, providing addresses and phone numbers for OSINT investigations.
AccountKiller provides direct deletion links and step-by-step instructions for removing accounts on hundreds of websites and social platforms.
Lookup email addresses and mailing addresses with reverse email search to identify people and organizations in OSINT investigations.
Addresses.com provides US residential address lookups, reverse phone searches, and people finder tools for locating individuals.
Algo VPN automates deployment of a personal WireGuard or IKEv2 VPN server in the cloud for private, secure OPSEC browsing.
Investigator Use
MailScrap (mailscrap.com) is an online email harvesting tool that extracts email addresses from websites by crawling a target URL and its linked pages to collect all publicly accessible email addresses. Investigators provide a domain or starting URL, and the tool systematically crawls the site to compile a list of discovered email addresses.
For OSINT investigators conducting corporate reconnaissance, MailScrap automates the tedious process of manually navigating a target organization's website to identify contact email addresses. A single crawl can surface email addresses from staff directories, contact pages, press releases, legal notices, and embedded form targets across an entire site.
Harvested email addresses serve as foundational intelligence for multiple subsequent investigative steps: identifying the email naming convention used by the organization (enabling systematic generation of additional addresses), providing pivot points for breach database lookups, supplying account identifiers for social media enumeration, and establishing contact infrastructure for the target organization.
For corporate intelligence investigations, email harvesting often reveals organizational structure beyond what public-facing pages explicitly document. Development environment emails, support system addresses, and internal tool contact addresses occasionally appear in public-facing content and can reveal technology choices, vendor relationships, or internal personnel that are not otherwise apparent.
When combined with email validation tools, harvested addresses can be filtered to active accounts — ensuring that investigative resources are focused on live, relevant contacts rather than outdated or deprecated addresses.
Limitations: MailScrap crawls visible page content and cannot access JavaScript-rendered content, authenticated areas, or dynamically generated email addresses. Organizations using contact forms or obfuscation techniques (emails displayed as images) will have reduced email visibility. Crawl depth and site complexity can affect completeness of results.
All email harvesting should be limited to publicly accessible content and conducted within applicable legal frameworks. Email addresses collected from websites are generally intended to be public but using them for unauthorized contact or spam violates both legal and ethical standards.
Record the target domain, crawl date, number of pages crawled, and full extracted email list in case documentation.
Before You Pivot
Capture the target, search terms, and why this source is relevant before you leave the page.
Archive volatile pages, save screenshots, and keep timestamps for anything that may change.
Treat one tool as a lead source. Confirm important findings with independent sources.
Related tools
Email Checker is a free email verification tool. It helps you validate any email address online for free. Check if mailbox really exists.
Online Email Extrator, seperate your emails from the rest of your document easily with simple cut and paste. Then organize your emails here
First 50 searches are FREE. Quickly find anyone's contact information for your lead research, talent acquisition, PR, or HR with our email finder!
E-Mail IP Leak Test is a free tool for the internet allowing end users to test their e-mail provider
Email Hippo verifies email address deliverability and syntax, detects disposable addresses, and identifies catch-all mail server configurations.
Quickly find the email address format for large and small companies alike