Tool profile
Holehe
Open-source email registration checker for public account-signal triage
Claims and corrections are reviewed before public profile changes.
Trust / disclosure
How to read this profile
Editorial line
Editorial judgment and commercial context are kept separate on OSINT4ALL.
Review status
This profile has an editorial review date. Source checking does not mean the tool was hands-on tested.
Claims / submissions
Corrections and claim requests are reviewed before any public change is made.
Commercial context
No commercial relationship is disclosed on this profile.
Editorial verdict
Use case and fit
This is editorial guidance, not vendor copy.
Checking whether an email address may have public account-registration or account-recovery signals during authorized people or exposure research.
Useful for advanced researchers when handled as sensitive lead-generation rather than definitive enrichment.
Best when an email address needs cautious public registration-signal triage, not account ownership or access proof.
Operational snapshot
Workflow, access, and coverage
Email registration signals from supported website responses
Registration Signal, Rate Limit Status
Discovery, Identity Corroboration
Registration signals do not prove ownership, activity or a data breach. Checks contact supported services; rate limits and changed responses can make results inconclusive. Do not assume notification behavior is guaranteed.
Start from an authorized email lead, run the check only where proportionate, discard weak or irrelevant signals, then corroborate plausible account links with independent public evidence before drawing conclusions.
Tooling and documentation are English-first. Account context may require local-language review depending on the services returned.
Limits
Strengths, caveats, and risk
Open-source and focused, with a clear email-led workflow for finding account-registration leads across services.
Results can be noisy, blocked by services, rate-limited, outdated, or misinterpreted as stronger evidence than they are.
Does not prove identity, account ownership, account access, current control, compromise, consent, or private activity.
Email registration checks can expose private individuals to misidentification, stalking, harassment, or unsupported account-linking if weak signals are treated as facts.
Use only for lawful, authorized research. Do not use outputs for credential attacks, harassment, doxxing, account recovery abuse, or attempts to access accounts.
Treat every hit as a lead requiring independent verification from public profile context, archives, documents, or direct confirmation.
Maintenance
Source status & suggest an update
Help keep this profile accurate. Update requests are reviewed and logged before publication.
Source checked: 2026-05-27
If something is outdated, please submit a correction or ownership update request. Claim requests are reviewed and do not grant editorial control.
Commercial or sponsorship requests use the separate partner workflow.