Unverified50% confidenceFactExact time
Holehe determines whether an email address is registered by exploiting behavioral differences in websites' forgot-password and registration interfaces, rather than through brute force or credential stuffing.
1
Sources
50%
Confidence
Long-term
Relevance
8/15/2026
First Seen
Sources
Holehe：通过邮箱反查注册账号的开源OSINT工具
Related Claims
Unverified恶意站点可利用伪造的OAuth授权请求，在真实页面上诱导用户授权，从而无需获取密码即可控制账号66% similarUnverifiedSensitive user information accumulated in noreply mailboxes can support identity theft, account takeover, and even financial fraud.66% similarUnverifiedMany online services do not enforce an email verification process during user registration, allowing users to complete registration with an email address that does not belong to them.66% similarUnverifiedMany enterprises configure noreply addresses as real but unmonitored mailboxes, causing emails replied to by users to be successfully delivered and stored.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/751795API
curl https://kongchang.com/api/v1/knowledge/claims/751795MCP
get_claim(id=751795)