Typorithm · medium

Email Intelligence

email-osintosintemailholehecorrelation

Saved on this device

Full lesson · 8 learning steps Open any exercise for focused practice

Step 1 of 8 · intro card

Learn Email Intelligence

Email & Phone

Email OSINT verifies an address with deliverability checks that send nothing, discovers where it is registered (holehe), correlates it against public breach databases, and resolves it to names or avatars (Gravatar) — for authorized investigations, fraud checks, and recruiting, on public data only.

Email intelligence starts with verification: deliverability checks query the domain's mail records to confirm an address can receive mail. They send no email, so they never tip off the holder, and they stay within authorized, ethical use.

Account-discovery tools such as holehe ask public sign-up and password-reset endpoints whether an address is already registered, mapping the platforms a person openly uses. The same address can be correlated against public breach databases to confirm prior exposure.

Finally, an address often resolves to a public name or avatar through services like Gravatar — data the owner chose to make public. Combined, these signals support fraud checks, due diligence, and recruiting, and must never be used to harass or target private individuals.

Deliverability checks send no email and stay silent.

holehe maps where an address is registered.

Breach databases and Gravatar add public context.

# verify deliverability (sends no email)
# holehe: where an email is registered
# correlate with breach databases
# email-to-name and gravatar lookups

Read the implementation

Connect each part of the code to the concept before you type.

1. Deliverability check

Deliverability checks probe mail-server records to see if an address can receive mail, without ever sending a message that would alert the holder.

# verify deliverability (sends no email)

2. Account discovery

holehe queries public sign-up and password-reset flows to map which sites an address has registered on — useful for authorized due-diligence.

# holehe: where an email is registered

3. Breach correlation

Cross-referencing public breach datasets shows where an address has previously appeared, helping verify identity and assess exposure.

# correlate with breach databases

4. Name & avatar

Gravatar and similar public profiles resolve an address to a display name or avatar that the owner chose to publish.

# email-to-name and gravatar lookups

A complete learning loop

Understand

Read the concept map and follow the code breakdown.

Reconstruct

Type the implementation, repair mistakes and work through every recall exercise.

Verify

Use the final check without hints; revisit weak concepts in short practice sessions.