Illuminate the "reputation" behind an email address
EmailRep uses hundreds of factors like domain age, traffic rankings, presence on social media sites, professional networking sites, personal connections, public records, deliverability, data breaches, dark web credential leaks, phishing emails, threat actor emails, and more to answer these types of questions:
Is this email risky?
Is this a throwaway account?
What kind of online presence does this email have?
Is this a trustworthy sender?
Get the API
curl emailrep.io/bill@microsoft.com
{ "email": "bill@microsoft.com", "reputation": "high", "suspicious": false, "references": 79, "details": { "blacklisted": false, "malicious_activity": false, "malicious_activity_recent": false, "credentials_leaked": true, "credentials_leaked_recent": false, "data_breach": true, "first_seen": "07/01/2008", "last_seen": "05/24/2019", "domain_exists": true, "domain_reputation": "high", "new_domain": false, "days_since_domain_creation": 10341, "suspicious_tld": false, "spam": false, "free_provider": false, "disposable": false, "deliverable": true, "accept_all": true, "valid_mx": true, "spoofable": false, "spf_strict": true, "dmarc_enforced": true, "profiles": [ "myspace", "spotify", "twitter", "pinterest", "flickr", "linkedin", "vimeo", "angellist" ] } }
View on Github
Frequently Asked Questions
What can I use emailrep.io for?
Defensive use cases
- Detect targeted phishing attacks.
- Detect and prevent fraud.
- Detect throwaway accounts.
- Require additional layers of verification (MFA) during your signup flow to prevent abuse.
- Contextualize netflow and other products that analyze email addresses or related data.
- Conduct recon on a target email address for credential brute forcing.
- Construct targeted phishing attacks based off of target's social media profiles.
- Inform reputation of social engineering campaigns (higher reputation can help avoid the spam folder).
- Real email address and delivery validation, not reliant on just technical delivery indicators.
- Protect your sender reputation.
- Fidelity on catch-all emails and domains.
- Enrichment on inbound or outbound leads.
What does it mean for an email to have no reputation?
This means the email hasn't been seen anywhere trustworthy on the internet. Trustworthy email addresses have a history and record across multiple sources on the web.
If I receive an email from a high reputation sender, does that mean it’s safe?
No. Spammers and criminals can takeover legitimate accounts or spoof the sender address to trick the end user. A more thorough analysis is required on the email contents and headers to be sure.