osint-email

What problem does it solve?

Reduces manual, error-prone effort required to determine whether an email address has been exposed in data breaches, appeared in paste sites, or has linked social/service accounts, enabling faster risk assessment and informed decision-making.

Core Features & Use Cases

• Email format validation to catch malformed targets before querying external services.
• Breach and paste history checks using the Have I Been Pwned API to enumerate exposures and paste occurrences.
• MX DNS inspection to verify whether the email domain accepts mail delivery.
• Optional social account enumeration via holehe to map public account presence across services.
• Use Cases: pre-phishing simulation checks, employee exposure audits, and OSINT reconnaissance for incident response.

Quick Start

Run the osint-email skill to validate [email protected], check Have I Been Pwned for breaches and pastes, verify MX records, and optionally enumerate social accounts.