How to Find Every Email Address on a Website: 6 Pages, 3 Searches and a Free Extractor

This post is the written companion to our video on the same topic. The searches from the video are below so you can copy them.

Where companies publish addresses

Six places, roughly in the order they pay off:

Page	What you usually find
Footer	One general address, often info@ or hello@
Contact	General, sales or support addresses, sometimes per office
Team or about	Names and titles; at small firms, sometimes their addresses
Imprint (Impressum)	Legal name, postal address and a contact address, on many European sites
Careers	Sometimes the person hiring, more often careers@ or jobs@
Press	A named media contact

How often does this work? When we ran 337 roofing, plumbing, HVAC and electrical businesses through our local business list-building funnel on 1 October 2026, 302 of the websites loaded, and 156 of those published at least one address on the homepage or up to two contact pages. So about half.

Be realistic about what you get. Of the 111 sites with an address on their own domain, 96 showed a role address like info@ or office@, and 19 showed at least one named person's address. That is fine: at a five-person company, office@ is often read by the owner. Treat a named address as a bonus, not the target. Our guide to role-based email addresses covers when to send to them.

That study read fewer pages per site than the extractor described below, so treat 52% as a rough guide for small trades businesses, not a prediction for your market.

Three searches that find the right pages

You don't need to click through the whole site. Type these into Google, one company at a time:

site:example.com (inurl:contact OR inurl:impressum OR inurl:team)
site:example.com (inurl:careers OR inurl:jobs OR inurl:press)
site:example.com "@example.com"

• site: keeps results on the company's domain.
• inurl: only returns pages with that word in their address. OR, in capitals, gives you any of them, and the brackets group them.
• The first search finds the contact, imprint and team pages. The second finds the pages people forget: careers, jobs and press.
• The third is the workhorse from our guide to Google search operators: any page on the site that mentions an address at the company's own domain. It also catches blog posts, PDFs and old event pages.

Google doesn't document inurl: or OR on its help pages, and it ignores most punctuation, so @ is a hint rather than a filter. Both still worked when we wrote this; test on a site you know first. Type the searches by hand: Google's Terms of Service forbid automated access that ignores machine-readable instructions such as robots.txt.

Swap example.com for the company's domain. If you don't know the domain, the company name to domain tool finds it.

The imprint page

Imprint pages are underused, and on German sites they are often the most reliable contact on the page.

In Germany, section 5 of the Digitale-Dienste-Gesetz (DDG), which we read on the official federal law site on 8 November 2026, requires providers of commercial digital services, usually offered for payment, to keep certain information easy to recognise, directly reachable and permanently available. That includes the name and postal address, the legal form and an authorised representative for companies, and "details that enable quick electronic contact and direct communication with them, including the email address". The DDG replaced the older Telemediengesetz rule in 2024.

So if you sell into Germany, read the Impressum. The address is usually general rather than named, but it tends to be current, because the company has a legal reason to keep it right. Many sites in Austria, Switzerland and elsewhere publish an imprint too, and our extractor looks for both "impressum" and "imprint" links.

One honest caveat: an imprint address is published because the law requires it, not as an invitation to send marketing. In Germany, section 7 of the UWG generally requires prior consent for advertising email, including to businesses (see GDPR for B2B cold email). The imprint helps you identify the company and its format; it doesn't change the consent rule.

Let the extractor read the pages for you

Or skip the clicking. Enter the website in the free website email extractor:

• It reads up to five pages a site. The page you enter, plus up to four linked pages on the same site that look like contact, imprint, team, about, press, support or legal pages, contact pages first. It doesn't crawl the rest of the site.
• It finds addresses in mailto: links and the visible text, including written-out spellings like name [at] domain [dot] com. It leaves out addresses that belong to error-reporting services, such as Sentry IDs, rather than people.
• Every address comes with the page it was found on, and whether it's on the site's own domain. Copy that into your source column.
• It reads robots.txt first and skips anything the site disallows for its user agent. If robots.txt returns a server error or doesn't answer, it doesn't read the site at all.
• It sends no cookies, so it never sees anything behind a login.

Limits: 10 websites an hour without an account, 50 an hour signed in with Google.

What it can't see

Some sites add the address with JavaScript after the page loads, some show it as an image, and plenty only offer a contact form. The extractor can't see those, and neither can most tools.

Careers and jobs pages aren't on its list of links to follow either. If your search found one, enter that exact page, or copy its visible text and paste it into the email extractor, which pulls every address out of pasted text in your browser. For a brochure or price list, the PDF email extractor does the same and tells you the page number each address appears on.

Reading what you found

Ask two questions of every address.

Is it on the company's own domain? In our trades check, 23 sites listed a free webmail address like Gmail, and 25 only listed addresses on some other domain, often a parent company or an old brand. Those can be real inboxes, but they tell you the company's mail may not live on its website domain.

Is it a person or a role? info@, office@ and sales@ are shared. Fine at a small firm, weaker at a large one. To separate them in bulk, the role-based email filter flags them in your browser.

And watch for typos. In our sample, three sites published addresses that would not deliver as written: two were on misspellings of the company's own domain, each missing a letter, and one was on a parked domain. Copy addresses from websites and you copy their typos too.

Check the domain can receive mail

Before checking any mailbox, check the domain receives mail at all. In the same sample, 42 of the 337 website domains, about 12%, could not: 41 had no MX record, and one published a null MX, a record that says the domain accepts no mail. Those businesses get email somewhere else.

Put the domain into the free email provider lookup. It reads the MX records and tells you who handles the domain's mail (Google Workspace, Microsoft 365 and others) and whether a security gateway sits in front. More in check if a domain accepts email.

Verify the addresses you'll write to

Published isn't the same as working. Check the ones you will actually email:

1. One at a time. The free email checker asks the mail server whether it would accept mail for the address, then ends the conversation before anything is sent. Five checks a minute, no account.
2. The whole list. Upload it on the verify page. The first 100 email checks are free with a Google sign-in, no card. Valid, risky and invalid come back as separate files.

Expect a lot of catch-all results on small business domains. In our trades check, 93 of the 145 mail servers that gave a definite answer accepted an address we made up. On those domains no verifier can confirm a specific mailbox, so the honest result is risky (catch-all scoring explains how we grade them). A published address on a catch-all domain is still a reasonable send, because a person put it there. A guessed address on a catch-all domain is a coin flip. See what is a catch-all domain.

Split the list before you send

Segment	How to send
Published, verified valid	Main sends
Published, risky (catch-all)	Small separate batches; watch bounces
Invalid, typo domain or no mail server	Remove

Sending risky addresses separately means a few bounces don't drag down the rest. Invalid addresses get removed, not skipped. For addresses collected from many sites at once, read verify scraped emails.

The rules, briefly

This is not legal advice; if you're unsure, ask a lawyer. The detail, with the regulators' own text, is in is it legal to collect business emails?

• Public business information only. Read pages any visitor can see. Respect each site's terms and its robots rules; the extractor handles the robots part. Nothing behind a login.
• US (CAN-SPAM). There is no exception for business-to-business email. Every message needs honest headers and subject lines, your physical postal address and a working opt-out honoured within 10 business days. Under 15 U.S.C. 7704(b), sending an otherwise unlawful message to addresses obtained by automated means from a site that displays a notice saying it won't give addresses away is an aggravated violation. Any extractor is an automated means, so if a site shows that notice, leave it alone. See CAN-SPAM for cold email.
• UK and EU. A named work address is personal data under GDPR. You need a lawful basis (often legitimate interests), the message should be relevant to the person's job, and you must tell them where you got their details, at the latest in your first email. Whether you may email a business unasked depends on the country: Germany generally requires consent, the UK's PECR allows it for limited companies. See GDPR for B2B cold email and PECR and UK cold email.

The source column you kept for every address is your record for all of this, and often your first line too.

What checking costs

All the tools above are free. To verify whole lists every month:

• Starter, $9 a month: 2,500 checks.
• Pro, $39 a month: Unlimited email verification.*
• Business, $99 a month: the first 300,000 checks a month at full speed, 5 seats.
• Agency, $249 a month: the first 750,000 checks a month at full speed, 15 seats, client workspaces.

*Pro fair use: the first 100,000 checks a month at full speed, then slower, never cut off. See pricing.

More reading: find the decision-maker at a company, how to find someone's business email, find a small business owner's email, company email patterns.