Tool profile
Holehe
Open-source email registration checker for public account-signal triage
Claims and corrections are reviewed before public profile changes.
Trust / disclosure
How to read this profile
Editorial line
Editorial judgment and commercial context are kept separate on OSINT4ALL.
Review status
Hands-on notes or editorial review dates are attached where available.
Claims / submissions
Corrections and claim requests are reviewed before any public change is made.
Commercial context
No commercial relationship is disclosed on this profile.
Editorial verdict
Use case and fit
This is editorial guidance, not vendor copy.
Checking whether an email address may have public account-registration or account-recovery signals during authorized people or exposure research.
Useful for advanced researchers when handled as sensitive lead-generation rather than definitive enrichment.
Best when an email address needs cautious public registration-signal triage, not account ownership or access proof.
Operational snapshot
Workflow, access, and coverage
Public account-registration signals, Email and professional identity research
Email, Username, Domain, Phone Number, Organization
Service Registration Signal, Account Lead, Account Clue, Professional Contact Pattern, Reputation Signal
Discovery, Enrichment, Verification
Start from an authorized email lead, run the check only where proportionate, discard weak or irrelevant signals, then corroborate plausible account links with independent public evidence before drawing conclusions.
Tooling and documentation are English-first. Account context may require local-language review depending on the services returned.
Limits
Strengths, caveats, and risk
Open-source and focused, with a clear email-led workflow for finding account-registration leads across services.
Results can be noisy, blocked by services, rate-limited, outdated, or misinterpreted as stronger evidence than they are.
Does not prove identity, account ownership, account access, current control, compromise, consent, or private activity.
Email registration checks can expose private individuals to misidentification, stalking, harassment, or unsupported account-linking if weak signals are treated as facts.
Use only for lawful, authorized research. Do not use outputs for credential attacks, harassment, doxxing, account recovery abuse, or attempts to access accounts.
Treat every hit as a lead requiring independent verification from public profile context, archives, documents, or direct confirmation.
Alternatives
Alternatives
Epieos for email-led enrichment, Have I Been Pwned for breach-exposure checks, and GHunt for Google-account public-signal triage.
Maintenance
Last verified & suggest an update
Help keep this profile accurate. Update requests are reviewed and logged before publication.
Last verified: 2026-05-27
If something is outdated, please submit a correction or verified update request. Claim requests are reviewed and do not grant editorial control.
Commercial or sponsorship requests use the separate partner workflow.