Address check
What the address itself gives away, worked out on the spot.
- Mailbox and domain
- Free, custom or disposable provider
- Role mailbox such as info@ or sales@
- Plus-tags hiding the real mailbox
गुप्तचरguptachar, noun: a secret agent
Your secret agent for email intelligence.
Hand Guptachar one email address. It reports back what the address gives away, who runs its mail, and where it has been seen, each finding the moment it comes in.
$guptachar lookup agent@example.com
address check2 mscustom domain, not a role mailbox
mail domain17 msaccepts mail, SPF published, DMARC reject
linked accounts701 ms3 accounts, 1 breach record
report ready in 702 ms
One address in. Three reports back.
Every lookup asks all three at the same moment.
Mail domain
What live DNS says about where the mail goes.
- Whether the domain accepts mail at all
- Who hosts it
- SPF record published or missing
- DMARC policy
Linked accounts and breaches
Where the address has been seen, from the lookup API connected to your server.
- Accounts registered with the address
- Breach records that include it
- The raw response, one click away
No waiting on the slowest source.
Most lookup tools show a spinner until everything is back. Guptachar streams each report as it lands and shows you how long each one took.
- Asked in parallel
- All sources start together, so the total time is the slowest source, not the sum.
- Streamed row by row
- A fast answer is on screen in milliseconds while a slow one is still out in the field.
- Warmed while you type
- The free checks start as soon as the address looks complete. No paid lookup is spent.
- Remembered for ten minutes
- Repeat an address and the report is instant, and the API is not billed twice.
A case file that is yours alone.
Lookups sit behind your sign-in. Your history shows what you ran and when, and nobody else’s.
- Private history
- Every lookup is logged to your account so you can pick a case back up.
- Passwords never stored
- Only a salted scrypt hash is kept. Sessions are stored as hashes too.
- Keys stay on the server
- The lookup API key never reaches a browser.
- Rate limited per person
- One account cannot drain the lookup budget for everyone else.
Rules of engagement
Guptachar is for security work, fraud checks and due diligence on addresses you are authorised to investigate. It is not for stalking, harassment or looking into people out of curiosity.