Domain Email Finder

Domain Email Finder

Find public email addresses for a website or domain.

Domain Email Finder is a Coreclaw Python Worker that crawls a target website, checks common contact-related pages, queries selected free public sources, and outputs deduplicated email findings with source attribution, classification, confidence, and evidence.

Marketplace Description

Find public email addresses for a website or domain using website crawling and selected free public sources. Results include deduplicated emails, source URLs, mailbox type, confidence, and evidence snippets. Optional EmailCrawlr and Snov.io integrations are supported when the user provides their own credentials.

What It Collects

Each successful result row represents one email finding. The worker can detect:

• Plain text email addresses
• mailto: links
• HTML-encoded at signs such as @
• Common obfuscation patterns such as sales [at] example [dot] com
• Email addresses found in public source pages or public search endpoints

The worker filters common placeholder and demo addresses such as info@example.com, your@email.com, name@company.com, *.test, *.invalid, *.localhost, and affiliate domains based on example-* patterns.

Included Sources

Default no-auth sources:

• Website crawler and HTTP response headers
• Common contact, about, support, privacy, and security pages
• EmailFormat
• Skymem
• PGP keyservers
• searchcode
• grep.app
• Flickr public site key discovery
• StackOverflow public search endpoint
• Gravatar enrichment for emails already found

Optional credential-based sources:

• EmailCrawlr, enabled only when emailcrawlr_api_key is provided and the emailcrawlr source is selected
• Snov.io, enabled only when snov_client_id and snov_client_secret are provided and the snov source is selected

The worker does not connect paid commercial providers such as Hunter, BuiltWith, FullContact, Dehashed, Host.io, JsonWHOIS, ZoneFiles, or IntelligenceX.

Input

Use start_urls for one or more URLs or domains. Coreclaw can split this field into separate tasks.

Important options:

• sources: Select which public sources to use.
• max_results: Maximum unique email findings per target.
• max_pages: Maximum website pages to crawl per target.
• max_depth: Maximum link depth for website crawling.
• max_source_pages: Maximum pages to request from paginated public sources.
• same_domain_only: Restrict website crawling to the target domain.
• include_subdomains: Treat subdomain pages and emails as target-owned.
• include_affiliate_emails: Include unrelated-domain emails found on crawled website pages.
• include_external_source_affiliate_emails: Include unrelated-domain emails found by external public sources.
• request_timeout: HTTP request timeout in seconds.
• request_delay_seconds: Optional delay between HTTP requests.

If emailcrawlr or snov is selected without credentials, the worker skips that source and writes a source-level diagnostic to the logs instead of emitting error rows.

Output

The output table contains these fields:

• email: Email address found for the target.
• email_type: target, generic, or affiliate.
• target: Target domain being scanned.
• target_url: Normalized target URL.
• source: Discovery source that found the email.
• source_url: URL or endpoint where the email was found.
• is_generic: Whether the mailbox is a generic role mailbox.
• is_affiliate: Whether the email domain differs from the target domain.
• confidence: Confidence score for this finding.
• evidence: Snippet around the matched email.
• status: Row status such as ok, no_results, or failed.
• error: Error message for failed rows.

Network and Secrets

Coreclaw HTTP workers should use the runtime proxy. This worker reads PROXY_DOMAIN and PROXY_AUTH automatically and never logs proxy credentials.

User-provided API keys and access tokens are not written to logs or output rows.

Recommended First Run

Start with the default website and contact page sources:

{
  "start_urls": [{"url": "https://example.com"}],
  "sources": ["website", "contact_pages"],
  "max_results": 50,
  "max_pages": 50,
  "max_depth": 2,
  "same_domain_only": true,
  "include_subdomains": true,
  "include_affiliate_emails": false,
  "include_external_source_affiliate_emails": false,
  "request_timeout": 20,
  "request_delay_seconds": 0
}

Use broader public sources when the target website does not publish obvious contact addresses.

Limitations

• Public source coverage varies by target domain.
• JavaScript-only pages may expose fewer addresses because this worker uses HTTP requests rather than a full browser.
• Some public sources may rate-limit requests or change their response format.
• Results are best treated as public contact discovery data, not as a verified lead database.

Responsible Use

Run this worker only for domains where you have authorization or where collecting public contact information is permitted. Follow applicable privacy, anti-spam, and website terms of service requirements.