Email as an Identifier
An inbox string is a join key — then lock YOUR EMAIL from scope on
Visual · email_as_identifier
YOUR email only. Official HIBP later, not dumps.
An email address is a passport number the internet already knows how to index.
Services treat email as a unique key: password resets, Gravatar, “this email is already registered.” Self-OSINT asks which sites still know YOUR address, whether YOUR domain’s MX points where you think, and whether YOUR address appears in official breach monitors. It does not ask you to holehe a classmate, harvest a company you do not own, or buy a dump. Original Cyberlium. GATE 192.168.0.1. Have I Been Pwned (haveibeenpwned.com) is named now as the official place for YOUR email — not random checkers. Hunter.io is named only for a domain YOU own. Next: holehe Gravatar and MX Records.
1. Email is a join; dumps are not a classroom dataset
If a site says “email already registered,” that is a public-ish signal. holehe automates many of those checks — next lesson, YOUR address only. Buying combo lists to “search yourself faster” still funds crime and is out.
Have I Been Pwned is the official breach monitor you will use in the lab for YOUR email in the real website. Random “pwn checkers” that want to harvest you are out. ; routers are not inboxes.
Command guide
Email is a join; dumps are not a classroom dataset
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
pipx install holehe
macOS:
Command — copy this
pipx install holehe
Windows:
Command — copy this
pip install holehe
2. Hunter.io and “email finders” only on a domain you own
Hunter.io and similar finders exist to list addresses on a domain. In this course that domain must be in your scope.yaml (you pay the registrar). Using Hunter on your school or a local shop you do not own is harvesting, not homework.
If you own no domain, you will still do holehe/HIBP on YOUR mailbox and skip Hunter/theHarvester later with an honest none.
Command guide
Hunter.io and “email finders” only on a domain you own
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
pipx install theHarvester sudo apt install curl
macOS:
Command — copy this
pipx install theHarvester
Windows:
Command — copy this
pip install theHarvester
Built-in (PowerShell: Invoke-WebRequest)
═══ COMMANDS ═══
Command — copy this
curl -sS -m 8 -I "https://haveibeenpwned.com/" | head -n 8
3. What you will never type into an email OSINT tool
[email protected]. The CEO of a company you like. A leaked list from a Telegram channel. Those queries are out even if the CLI accepts them.
Next: holehe on YOUR email, Gravatar on YOUR address, MX for YOUR domain (or skip).
4. What you ship: EMAIL from scope, HIBP official URL, dump refusal
Confirm scope.env EMAIL is yours. Bookmark haveibeenpwned.com. Hunter/theHarvester only if you own the domain. DEMO GATE. Notes 600.
5. What you record before the next lesson
Date. EMAIL (yours). HIBP official. NEVER dumps/classmates. File t12-m04-l01-email-id.txt chmod 600.
6. Wrong vs right: strangers vs identifiers YOU own
Worked failure — same OSINT word, opposite target. Right never needs a classmate or a dump site.
- Wrong: Paste a dump into grep for fun. holehe the class list. Hunter.io the university.
- Right: Lock YOUR email in notes. Next: holehe Gravatar and MX Records.
Mission: treat YOUR inbox string as the only email target
1) / STOP if router. 2) Print EMAIL from scope.env and confirm it is yours. 3) Bookmark haveibeenpwned.com (do not use random checkers). Never classmate inboxes. Never dumps.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor why HIBP’s official site matters — not where to download dumps.
APPLY: Where do you check whether YOUR email appeared in known breaches in this course?
APPLY: True or False: Hunter.io against your school domain is required practice.
APPLY: curl http://192.168.0.1/ is Router Admin in an email lesson. You:
holehe Gravatar and MX Records
Part of OSINT with AI — Email OSINT Your Inbox.
theHarvester on a Domain YOU Own
Part of OSINT with AI — Email OSINT Your Inbox.
Lab — Check YOUR Email Footprint
Part of OSINT with AI — Email OSINT Your Inbox.