Email finder for any web page
Enter a web page to list every email address it publishes, where each one appears and whether it is a team inbox or a personal address. Handy for finding a contact, and for checking what your own site exposes to bots.
- Shows where each address was found
- One page at a time, no bulk crawling
- No signup needed
Email addresses on this page
Enter a URL to start
- URLWaiting for inputThe page you entered
- Response—Status and redirects
- Addresses—Unique, after cleanup
- Exposure—What bots can read
Email finder report
Enter a page URL above to see every address it publishes, where each one appears, and whether the page uses a contact form or protects its addresses from bots.
Fair-use limit: 20 pages per hour and 100 per day for each visitor IP address. Please respect privacy and anti-spam laws when you contact anyone.
How email addresses end up on a page
The same address can be shown, hidden or protected. Where it appears decides who can read it.
Links and visible text
A mailto link or an address written in the text is what visitors expect to find. It is also the first thing spam bots collect, so many sites accept some spam as the price of being easy to reach.
Hidden in the page code
Addresses can sit in structured data for search engines, in scripts, form settings or HTML comments. Visitors never see them, but any bot that reads the HTML does. These are the addresses site owners most often expose by accident.
Protected addresses
Services such as Cloudflare replace the address with a placeholder and rebuild it in the visitor's browser. Simple bots only see the placeholder. This tool counts protected addresses but does not decode them.
Team inboxes and personal addresses
info@, sales@ and support@ are shared inboxes meant for first contact. Addresses with a person's name belong to that person, and privacy laws give them more protection.
Ways a site can publish an address
What visitors see, what this tool reports and how exposed each method is to spam bots.
| Method | What visitors see | What this tool shows | Exposure to spam bots |
|---|---|---|---|
| mailto link | A clickable address | Yes, labelled Link | High: every scraper looks for mailto links. |
| Plain text | The address as text | Yes, labelled Visible | High: a simple pattern match finds it. |
| HTML entities | The address as text (for example @ for @) | Yes, labelled Encoded | High: entities are decoded by most scrapers. |
| Structured data | Nothing, it is in JSON-LD for search engines | Yes, labelled Structured data | High: invisible to visitors but easy for bots. |
| Cloudflare obfuscation | The address, after a script runs | Counted as protected, not revealed | Low: simple bots see [email protected] instead. |
| Contact form | A form, no address | Detected, no address to show | None: the address never reaches the page. |
How this tool works
What happens between entering a URL and seeing the list.
The URL is checked
Only http and https addresses on ports 80 and 443 are accepted. The domain is resolved in DNS, and private, internal or reserved IP addresses are refused before anything is fetched.
One page is fetched
Our server requests the page as AllInOneToolsEmailFinder, without cookies and without running JavaScript. It follows up to 5 redirects, checks every new address again, and stops after 8 seconds or 2 MB.
Addresses are matched and cleaned up
We look for email patterns in links, visible text, structured data and the rest of the code, then drop false matches such as logo@2x.png, example.com addresses and error-tracking IDs.
Each address is labelled
For every address you see where it appears, whether it uses the site's own domain, and whether it looks like a team inbox such as info@ or a personal one.
You get the list
The result goes straight to your browser and is not saved. Links on the page are not followed, so no other pages are scanned.
What this tool does, and what it doesn't
A plain list, so you know exactly what to expect.
This tool does
- List the addresses one public page publishes
- Show where each address appears on the page
- Mark team inboxes and the site's own domain
- Detect contact forms and protected addresses
- Filter out false matches such as image names
- Copy the list or download it as CSV
This tool does not
- Crawl a website or follow links
- Guess addresses from names or patterns
- Decode addresses a site has protected
- Check whether a mailbox exists or send any email
- Read pages behind a login or run JavaScript
- Store the pages or addresses you find
Where your data goes
Our server fetches the page you enter, identifying itself as AllInOneToolsEmailFinder. The website sees a request from our server, not from you, and no cookies are sent. The page and the addresses found go straight to your browser and are not stored or cached. No third-party service is involved. Like any website, our server may keep normal access logs, as described in our privacy policy.
Run a website? Cloudflare explains how to hide your addresses from bots while keeping them visible to people.
Why your results might look unexpected
The six surprises people run into most, and what each one means.
No addresses found
The site uses a contact form, loads its address with JavaScript or shows it as an image. Try the contact, about or imprint page instead of the home page.
An address is only in the code
It sits in structured data, a script or a comment. Visitors cannot see it, but bots can, so remove it if it was not meant to be public.
Addresses are counted as protected
Cloudflare or the site itself hides them from bots. Open the page in your browser to see them, the normal way.
Addresses from other domains
Agencies, plugins, payment providers and embedded widgets often leave their own addresses in the code. Check the domain before you use one.
Error 403 or a challenge page
Bot protection blocked our server. The page may still show its addresses to normal visitors in a browser.
A personal name in an address
Addresses such as priya.shah@ belong to a person. They need more care under privacy laws than team inboxes like sales@.
Questions about finding emails on a page
Can I send marketing email to the addresses I find?
Finding an address on a public page does not mean its owner agreed to receive marketing. Laws such as the GDPR in Europe and CAN-SPAM in the United States set rules for consent, honest sender details and an easy way to opt out, and personal addresses are protected more strictly than team inboxes like info@. Use found addresses for a relevant, one-to-one message, and check the rules where the recipient lives. This is general information, not legal advice.
Why were no email addresses found?
Many sites use a contact form instead of an address, add the address with JavaScript after the page loads, show it as an image, or protect it from bots. This tool reads only the HTML the server sends. Try the site's contact, about or imprint page, which is where addresses are usually published.
Can this tool find a specific person's email address?
No. It only lists addresses that are written on the page you enter. It does not guess addresses from name patterns, search other websites or use any database of contacts.
What does "only in the page code" mean?
The address is in the HTML, for example in structured data, a script, a form setting or a comment, but it is not shown to visitors. Spam bots read the code, so site owners often find addresses here that they did not mean to publish.
Does the tool reveal protected addresses?
No. When a site hides an address with Cloudflare Email Address Obfuscation or writes it as name [at] domain, the tool counts it as protected but does not decode it. The owner chose to keep it from automated tools, and we respect that.
Does it scan the whole website?
No, one page at a time. It does not follow links, so it cannot be used to harvest addresses from a whole site. To check several pages, such as your contact and team pages, enter each one separately.
Are the pages I check or the emails found stored?
No. The page is fetched, scanned and the result goes straight to your browser. Neither the URL nor the addresses are saved or cached on our server. A hashed, temporary copy of your IP address is used for rate limiting and expires within 24 hours. Like any website, our server may keep normal access logs, as described in our privacy policy.