Pivot map
Pivot from here
Outputs from Email tools can become inputs for the next tool. These are the most relevant follow-on pivots in the library.
Lookup email addresses and mailing addresses with reverse email search to identify people and organizations in OSINT investigations.
Addresses.com provides US residential address lookups, reverse phone searches, and people finder tools for locating individuals.
Ancestry search provides access to billions of historical records including census data, vital records, immigration documents, and family trees.
Canada411 is Canada's people directory for finding individuals by name, providing addresses and phone numbers for OSINT investigations.
AccountKiller provides direct deletion links and step-by-step instructions for removing accounts on hundreds of websites and social platforms.
Lookup email addresses and mailing addresses with reverse email search to identify people and organizations in OSINT investigations.
Addresses.com provides US residential address lookups, reverse phone searches, and people finder tools for locating individuals.
Algo VPN automates deployment of a personal WireGuard or IKEv2 VPN server in the cloud for private, secure OPSEC browsing.
Investigator Use
MXToolbox (mxtoolbox.com) is a comprehensive online suite of email and DNS diagnostic tools that provides investigators with detailed information about email infrastructure, DNS records, mail server configuration, blacklist status, and network diagnostics. It is one of the most widely used tools for email infrastructure analysis and troubleshooting.
For OSINT investigators, MXToolbox's email infrastructure analysis capabilities are particularly valuable during fraud, phishing, and corporate reconnaissance investigations. The MX record lookup reveals which mail servers handle email for any domain, exposing the email infrastructure provider (Google Workspace, Microsoft 365, ProtonMail, self-hosted) and any email security services in use.
The email blacklist check simultaneously queries over 100 email reputation databases to determine whether a domain or IP address has been flagged for spam, phishing, or malware distribution. For phishing domain investigations, a comprehensive blacklist check establishes how widely the malicious domain has been detected and reported.
SPF, DKIM, and DMARC record analysis reveals the email authentication configuration of a target domain. Missing or misconfigured authentication records indicate poor email security hygiene and also provide intelligence about the likelihood of email spoofing — organizations without DMARC enforcement cannot prevent email spoofing from their domain.
DNS record lookups (A, AAAA, CNAME, TXT, NS) provide a complete picture of a domain's DNS configuration. The full DNS record set exposes hosting infrastructure, CDN usage, third-party service integrations, verification records (Google Search Console, domain ownership tokens), and sometimes internal service indicators in TXT records.
For brand protection investigations, MXToolbox's WHOIS, DNS, and blacklist data provides a rapid initial assessment of suspicious domains that may be impersonating a target brand — combining registration data, hosting patterns, and reputation scores.
MXToolbox provides free access to most tools with generous rate limits. Record all lookup results with the domain or IP queried, tool used, and query timestamp for case documentation.
Before You Pivot
Capture the target, search terms, and why this source is relevant before you leave the page.
Archive volatile pages, save screenshots, and keep timestamps for anything that may change.
Treat one tool as a lead source. Confirm important findings with independent sources.
Related tools
Email Checker is a free email verification tool. It helps you validate any email address online for free. Check if mailbox really exists.
Online Email Extrator, seperate your emails from the rest of your document easily with simple cut and paste. Then organize your emails here
First 50 searches are FREE. Quickly find anyone's contact information for your lead research, talent acquisition, PR, or HR with our email finder!
E-Mail IP Leak Test is a free tool for the internet allowing end users to test their e-mail provider
Check if an email is valid with our free online email verifier. Send your emails with complete confidence. Never get bounces anymore.
Email Hippo verifies email address deliverability and syntax, detects disposable addresses, and identifies catch-all mail server configurations.