Holehe

Open-source email registration checker for public account-signal triage

Verification: Pending Verification Status: Active
Best for Checking whether an email address may have public account-registration or account-recovery signals during authorized people or exposure research.
Workflow Discovery, Enrichment
Pricing / access Free ยท Desktop, Self-Hosted
Source checked 2026-05-27

Claims and corrections are reviewed before public profile changes.

Signal summary

  • VendorMegadose
  • PlatformCLI
  • Reviewed2026-05-27

Trust / disclosure

How to read this profile

Editorial

Editorial line

Editorial judgment and commercial context are kept separate on OSINT4ALL.

Review status

This profile has an editorial review date. Source checking does not mean the tool was hands-on tested.

Claims / submissions

Corrections and claim requests are reviewed before any public change is made.

Commercial context

No commercial relationship is disclosed on this profile.

Editorial verdict

Use case and fit

This is editorial guidance, not vendor copy.

Best for

Checking whether an email address may have public account-registration or account-recovery signals during authorized people or exposure research.

Editorial read

Useful for advanced researchers when handled as sensitive lead-generation rather than definitive enrichment.

Overview

Best when an email address needs cautious public registration-signal triage, not account ownership or access proof.

Operational snapshot

Workflow, access, and coverage

WorkflowDiscovery, Enrichment
PricingFree
AccessDesktop, Self-Hosted
RegionsGlobal
LanguagesEnglish
StatusActive
Tool function
Core jobs

Email registration signals from supported website responses

Works from

Email

Produces

Registration Signal, Rate Limit Status

Workflow roles

Discovery, Identity Corroboration

Interpretation limits

Registration signals do not prove ownership, activity or a data breach. Checks contact supported services; rate limits and changed responses can make results inconclusive. Do not assume notification behavior is guaranteed.

Recommended workflow

Start from an authorized email lead, run the check only where proportionate, discard weak or irrelevant signals, then corroborate plausible account links with independent public evidence before drawing conclusions.

Language notes

Tooling and documentation are English-first. Account context may require local-language review depending on the services returned.

Limits

Strengths, caveats, and risk

Strengths

Open-source and focused, with a clear email-led workflow for finding account-registration leads across services.

Limitations

Results can be noisy, blocked by services, rate-limited, outdated, or misinterpreted as stronger evidence than they are.

Does not prove identity, account ownership, account access, current control, compromise, consent, or private activity.

Risk note

Email registration checks can expose private individuals to misidentification, stalking, harassment, or unsupported account-linking if weak signals are treated as facts.

Use only for lawful, authorized research. Do not use outputs for credential attacks, harassment, doxxing, account recovery abuse, or attempts to access accounts.

Trust note

Treat every hit as a lead requiring independent verification from public profile context, archives, documents, or direct confirmation.

Maintenance

Source status & suggest an update

Help keep this profile accurate. Update requests are reviewed and logged before publication.

Source checked: 2026-05-27

If something is outdated, please submit a correction or ownership update request. Claim requests are reviewed and do not grant editorial control.

Commercial or sponsorship requests use the separate partner workflow.

Claim / Correct Listing