xiry.

Development · GitHub repo

holehe

Check if an email address is registered across 120+ online platforms.

From the Xiry library · Updated 3 October 2026

Visit github.com ↗

Holehe is an open-source OSINT tool that queries over 120 websites to determine if an email is attached to an existing account. It relies primarily on password recovery endpoints, allowing researchers to inspect account existence without notifying or alerting the target user. It can be run directly from the command line, in Docker, or imported into Python scripts.

What it's for

  • Identify which social networks and web services a target email address is registered on
  • Gather secondary recovery email hints or obfuscated phone numbers during OSINT investigations
  • Embed email footprint checks into custom Python intelligence pipelines

Features

  • Scans over 120 platforms including Twitter, Instagram, Discord, and GitHub
  • Checks forgotten password and registration endpoints without sending notifications to the target
  • Returns partial recovery email addresses and phone numbers when exposed by services
  • Flags rate-limited services clearly in terminal output
  • Can be used as a CLI tool or imported as an asynchronous Python module
  • Available as a Docker image or standard pip package

Pricing

Open source

Details

Type
GitHub repo
Category
Development
Topic
OSINT Tools
Open source
Yes
Platforms
Command line, Code library, Linux, macOS, Windows
For
OSINT analysts, cybersecurity researchers, and digital investigators
Alternative to
socialscan, Sherlock
Tags
osint, security, email, reconnaissance, investigation, python, cli

Why it was saved

  • @d3ndr1t30x, 23 March 2024: Enables security researchers and investigators to discover which online platforms an email is associated with without alerting the target user.

Related

  • Argus

    Python interactive CLI toolkit for automated OSINT, network reconnaissance, and security checks

  • AIMap

    Discovery and security testing platform for exposed internet-facing AI endpoints.

  • gitGraber

    Real-time GitHub monitoring tool to find leaked credentials and API tokens

  • BabelStrike

    Transliterate non-Latin names and generate username wordlists for security assessments

  • Browser Use Agent Sandbox Architecture

    Architecture pattern for securely running code-executing agents inside isolated micro-VMs

  • Gmail Creator Pro

    Python CLI automation script for bulk Gmail account creation using Selenium

Updated