IntelBase / Email Search
Look up an email address
See which of 230+ sites it's registered on, who the address likely belongs to, and whether it has turned up in breaches or stealer logs. Free to try, no account needed.
230+
Platforms checked live
40B+
Breach & infostealer records
<5s
Avg. lookup
What you get
One email, the full picture
Most email checkers stop at a yes or no. IntelBase gives you the account, the details on it, the person behind it, and the data that leaked from it.
Registered accounts
Every platform the email is registered on, checked in real time, not looked up in a stale cache.
Profile details
Display names, usernames, profile photos, bios, locations, and linked sites pulled from each account found.
Recovery hints
Partially masked phone numbers and backup emails exposed by account recovery flows, so you can pivot to the next identifier.
Data breaches
Every breach the email appears in, with the source, date, and the fields that leaked alongside it.
Infostealer logs
Credentials captured by stealer malware, including the URL each one was saved for and enrichment from the infected device.
Activity timeline
Account creation and update dates merged into one timeline, so you can see when the email first showed up online.
Likely owner
The name and face that the address's accounts agree on, with an explanation of which details tie them together.
Authenticity & exposure scores
Two 0–100 scores: how established the address looks and how exposed its credentials are, each with the reasons behind it.
Suggested next searches
Usernames and other emails found in the results, ranked by whether they belong to the same person, ready to search next.
Beyond registration checks
Know who's behind the address and what has leaked
Account presence tells you who someone is. Exposure tells you what's at risk. Every email lookup works out both, so investigators and fraud teams get answers without switching tools.
The likely owner
Names, profile photos, bios, and links from every account are compared to find the person they describe, shown with their name and photo at the top of the report.
Accounts that don't fit
An account showing someone else's name is flagged. That can mean the address was mistyped at sign-up, recycled, or is shared, which matters before you act on it.
Breach history
See which breaches the address was part of and which fields came with it: passwords, hashes, IPs, phone numbers, and names.
Stealer log exposure
Find out if the email was harvested from an infected machine, which login URLs it was saved for, and when the log was posted.
Coverage
230+ platforms, checked live on every lookup
From big tech accounts to fitness trackers, shopping sites, and developer tools. We keep adding new platforms every week.
Big tech & email
Social
Work & developer
Shopping & money
Fitness & lifestyle
Media, food & travel
Plus 182+ more platforms, with new ones added every week.
Workflow
How it works
From a single email address to a full report, in one search.
Enter an email address
Paste a single address in the dashboard, upload a list with bulk lookup, or send it to the API.
Platforms are checked live
Every platform is queried in parallel and results stream into your report as each one responds.
Exposure and ownership are checked
The address is checked against breach data and infostealer logs, and the profiles found are compared to see whether they all fit one person.
Review, pivot, and share
Follow usernames and phone hints into new lookups, map connections in the graph, and publish the result as a shareable report.
Built for
Who uses email search
Fraud & KYC teams
A real person's email has years of accounts behind it. A throwaway has none, and a borrowed one shows someone else's name. Score signups by digital footprint.
Threat investigators
Attribute phishing senders, extortion contacts, and threat actor emails to real accounts and leaked data.
Private investigators
Turn a single email into names, photos, usernames, and locations to build out a subject profile.
Security teams
Check employee and customer emails for breach and stealer log exposure before attackers use it.
API
Build it into your stack
Run the same lookup from your own systems. Get every account, the likely owner, breaches, and stealer logs as structured JSON, or stream results as they arrive.
curl -X POST https://api.intelbase.is/lookup/email \
-H "x-api-key: YOUR_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"email": "[email protected]",
"timeout_ms": 10000,
"include_data_breaches": true
}'Frequently Asked Questions
About email search.