# Email OSINT Search — 120+ Sites Account Discovery (`ntriqpro/email-osint-search`) Actor Discover which 120+ sites an email address is registered on (LinkedIn, Twitter, Spotify, Pinterest, Imgur, and more) using the open-source holehe tool. No password-reset emails sent to target. For authorized OSINT and security research. - **URL**: https://apify.com/ntriqpro/email-osint-search.md - **Developed by:** [daehwan kim](https://apify.com/ntriqpro) (community) - **Categories:** AI, Developer tools, Business - **Stats:** 9 total users, 5 monthly users, 100.0% runs succeeded, NaN bookmarks - **User rating**: No ratings yet ## Pricing Pay per usage This Actor is paid per platform usage. The Actor is free to use, and you only pay for the Apify platform usage, which gets cheaper the higher subscription plan you have. Learn more: https://docs.apify.com/platform/actors/running/actors-in-store#pay-per-usage ## What's an Apify Actor? Actors are a software tools running on the Apify platform, for all kinds of web data extraction and automation use cases. In Batch mode, an Actor accepts a well-defined JSON input, performs an action which can take anything from a few seconds to a few hours, and optionally produces a well-defined JSON output, datasets with results, or files in key-value store. In Standby mode, an Actor provides a web server which can be used as a website, API, or an MCP server. Actors are written with capital "A". ## How to integrate an Actor? If asked about integration, you help developers integrate Actors into their projects. You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready. The best way to integrate Actors is as follows. In JavaScript/TypeScript projects, use official [JavaScript/TypeScript client](https://docs.apify.com/api/client/js.md): ```bash npm install apify-client ``` In Python projects, use official [Python client library](https://docs.apify.com/api/client/python.md): ```bash pip install apify-client ``` In shell scripts, use [Apify CLI](https://docs.apify.com/cli/docs.md): ````bash # MacOS / Linux curl -fsSL https://apify.com/install-cli.sh | bash # Windows irm https://apify.com/install-cli.ps1 | iex ```bash In AI frameworks, you might use the [Apify MCP server](https://docs.apify.com/platform/integrations/mcp.md). If your project is in a different language, use the [REST API](https://docs.apify.com/api/v2.md). For usage examples, see the [API](#api) section below. For more details, see Apify documentation as [Markdown index](https://docs.apify.com/llms.txt) and [Markdown full-text](https://docs.apify.com/llms-full.txt). # README ## Email OSINT Search — 120+ Sites Account Discovery Discover **which 120+ sites an email address is registered on** — LinkedIn, Twitter, Spotify, Pinterest, Imgur, Tumblr, and many more — without ever sending a password-reset notification to the target. Powered by [holehe](https://github.com/megadose/holehe) (GPL-3.0, 5.6k+ stars), the standard open-source email OSINT tool. Built for **security researchers, fraud investigators, OSINT analysts, KYC teams, and recruiters** who need to verify online presence of a given email address with zero footprint. > **Legal Disclaimer:** This Actor is an unofficial integration of holehe (megadose) and is not affiliated with or endorsed by the original project. Use only on email addresses you own or have explicit authorization to investigate. Comply with PIPA (KR), GDPR (EU), CCPA (US), and applicable privacy laws. ### Why this Actor - **120+ sites checked** in one call (LinkedIn, Twitter/X, Spotify, Pinterest, Imgur, Tumblr, Adobe, Atlassian, etc.) - **No password-reset emails sent** to target — uses passive account-existence signals - **Structured JSON output** — site name, domain, category per match - **Bulk mode** — process up to 50 emails per run (hard cap) - **Pay only per account found** — $0.02 per confirmed account - **No subscription, no setup, no scraping** — just an API call ### Use Cases - **Security incident response** — given a breached email, map exposure across SaaS - **Fraud investigation** — confirm an email is a real online identity, not a throwaway - **Recruiter verification** — confirm candidate email is registered on professional platforms - **KYC enhancement** — supplement identity verification with online-account footprint - **OSINT pentesting** — reconnaissance phase for authorized engagements - **Data-broker compliance** — auditing your own organization's email exposure ### Input | Field | Type | Required | Description | |---|---|---|---| | `emails` | array of string | ✅ | Up to 50 email addresses to investigate | | `email` | string | — | Legacy single-email input (use `emails` for batch) | | `timeout` | integer | — | Per-site timeout in seconds (default 30) | | `maxEmails` | integer | — | Soft cap per run; hard cap 50 | ```json { "emails": ["alice@example.com", "bob@example.org"], "timeout": 30, "maxEmails": 10 } ```` ### Output One dataset item per email: | Field | Type | Description | |---|---|---| | `email` | string | Email checked | | `foundCount` | integer | Number of registered accounts discovered | | `found` | array | List of `{site, domain, category, rateLimit, fullName, phoneNumber}` | | `sitesChecked` | integer | Total sites probed | | `error` | string | Populated only on per-email failure | | `disclaimer` | string | Legal-use notice | ```json { "email": "alice@example.com", "foundCount": 7, "found": [ {"site": "LinkedIn", "domain": "linkedin.com", "category": "social", "rateLimit": false}, {"site": "Twitter", "domain": "twitter.com", "category": "social", "rateLimit": false}, {"site": "Spotify", "domain": "spotify.com", "category": "music", "rateLimit": false} ], "sitesChecked": 121 } ``` ### Pricing - **$0.02 per registered account found** (event: `account-found`) - No charge for sites where the email is NOT registered - No charge for failed/rate-limited sites - Apify platform compute usage is included (no separate charge) **Cost example**: Email registered on 10 sites = $0.20. Email registered on 50 sites = $1.00. ### Quick Start #### curl ```bash curl -X POST "https://api.apify.com/v2/acts/ntriqpro~email-osint-search/runs?token=YOUR_TOKEN" \ -H "Content-Type: application/json" \ -d '{"emails": ["alice@example.com"]}' ``` #### Python (Apify Client) ```python from apify_client import ApifyClient client = ApifyClient("YOUR_TOKEN") run = client.actor("ntriqpro/email-osint-search").call(run_input={ "emails": ["alice@example.com", "bob@example.org"] }) items = list(client.dataset(run["defaultDatasetId"]).iterate_items()) for item in items: print(f"{item['email']}: {item['foundCount']} accounts") for hit in item['found']: print(f" - {hit['site']} ({hit['category']})") ``` ### Limitations | Limitation | Detail | |---|---| | Sites blocking holehe | Some platforms have added defenses; ~10-15% sites may return rate-limited | | False positives | Existence signals can be ambiguous; treat as leads, not proof | | New site discovery | holehe upstream adds sites quarterly; we update with library releases | | Rate limiting | Recommended: batch <10 emails per run to avoid IP-based throttling | ### Technology - **[holehe](https://github.com/megadose/holehe)** (GPL-3.0) — Email-based account existence checker, 5.6k+ stars - **[Apify SDK for Python](https://docs.apify.com/sdk/python)** (Apache 2.0) — Actor runtime - **[httpx](https://www.python-httpx.org/)** (BSD) — Async HTTP client ### Disclaimer This Actor is an **unofficial** open-source wrapper around megadose/holehe. It is not affiliated with, sponsored by, or endorsed by the holehe project, its maintainers, or any of the platforms being probed. OSINT results are based on publicly observable account-existence signals and may produce false positives. **You are solely responsible** for ensuring you have legal authorization to investigate any email address. Misuse may violate privacy laws (PIPA, GDPR, CCPA, etc.) and the terms of service of target platforms. This tool is intended for security research, fraud prevention, and authorized investigation use only. *** ### 🔗 Related Actors by ntriqpro Build your full OSINT stack: - [**maigret-actor**](https://apify.com/ntriqpro/maigret-actor) — Maigret OSINT Username Search across 3000+ sites (5.0★ rated) - [**phish-radar**](https://apify.com/ntriqpro/phish-radar) — Phishing & Malicious Domain Detector - [**website-tech-detector**](https://apify.com/ntriqpro/website-tech-detector) — Website Tech Stack Scanner - [**github-repo-intelligence**](https://apify.com/ntriqpro/github-repo-intelligence) — GitHub Repo Security Audit ### ⭐ Rate this Actor If this saves you investigation time, please [leave a review](https://apify.com/ntriqpro/email-osint-search/reviews) — it helps other security researchers discover it. # Actor input Schema ## `emails` (type: `array`): List of email addresses to investigate (max 50). Use only addresses you own or have authorization to investigate. ## `email` (type: `string`): Alternative single-email input. Use 'emails' for batch. ## `timeout` (type: `integer`): Maximum time to wait for each site check. Default: 30 seconds. ## `maxEmails` (type: `integer`): Soft cap on emails processed per run (hard cap 50). ## Actor input object example ```json { "emails": [ "test@gmail.com" ], "timeout": 30, "maxEmails": 5 } ``` # Actor output Schema ## `results` (type: `string`): No description # API You can run this Actor programmatically using our API. Below are code examples in JavaScript, Python, and CLI, as well as the OpenAPI specification and MCP server setup. ## JavaScript example ```javascript import { ApifyClient } from 'apify-client'; // Initialize the ApifyClient with your Apify API token // Replace the '' with your token const client = new ApifyClient({ token: '', }); // Prepare Actor input const input = { "emails": [ "test@gmail.com" ], "timeout": 30, "maxEmails": 5 }; // Run the Actor and wait for it to finish const run = await client.actor("ntriqpro/email-osint-search").call(input); // Fetch and print Actor results from the run's dataset (if any) console.log('Results from dataset'); console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`); const { items } = await client.dataset(run.defaultDatasetId).listItems(); items.forEach((item) => { console.dir(item); }); // 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs ``` ## Python example ```python from apify_client import ApifyClient # Initialize the ApifyClient with your Apify API token # Replace '' with your token. client = ApifyClient("") # Prepare the Actor input run_input = { "emails": ["test@gmail.com"], "timeout": 30, "maxEmails": 5, } # Run the Actor and wait for it to finish run = client.actor("ntriqpro/email-osint-search").call(run_input=run_input) # Fetch and print Actor results from the run's dataset (if there are any) print("💾 Check your data here: https://console.apify.com/storage/datasets/" + run["defaultDatasetId"]) for item in client.dataset(run["defaultDatasetId"]).iterate_items(): print(item) # 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start ``` ## CLI example ```bash echo '{ "emails": [ "test@gmail.com" ], "timeout": 30, "maxEmails": 5 }' | apify call ntriqpro/email-osint-search --silent --output-dataset ``` ## MCP server setup ```json { "mcpServers": { "apify": { "command": "npx", "args": [ "mcp-remote", "https://mcp.apify.com/?tools=ntriqpro/email-osint-search", "--header", "Authorization: Bearer " ] } } } ``` ## OpenAPI specification ```json { "openapi": "3.0.1", "info": { "title": "Email OSINT Search — 120+ Sites Account Discovery", "description": "Discover which 120+ sites an email address is registered on (LinkedIn, Twitter, Spotify, Pinterest, Imgur, and more) using the open-source holehe tool. No password-reset emails sent to target. For authorized OSINT and security research.", "version": "1.0", "x-build-id": "OdLC6EcrNLNsJeDGw" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/ntriqpro~email-osint-search/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-ntriqpro-email-osint-search", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/ntriqpro~email-osint-search/runs": { "post": { "operationId": "runs-sync-ntriqpro-email-osint-search", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/ntriqpro~email-osint-search/run-sync": { "post": { "operationId": "run-sync-ntriqpro-email-osint-search", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "properties": { "emails": { "title": "Email Addresses", "maxItems": 50, "type": "array", "description": "List of email addresses to investigate (max 50). Use only addresses you own or have authorization to investigate.", "items": { "type": "string" } }, "email": { "title": "Single Email (legacy)", "type": "string", "description": "Alternative single-email input. Use 'emails' for batch." }, "timeout": { "title": "Per-Site Timeout (seconds)", "minimum": 10, "maximum": 120, "type": "integer", "description": "Maximum time to wait for each site check. Default: 30 seconds." }, "maxEmails": { "title": "Max Emails Per Run", "minimum": 1, "maximum": 50, "type": "integer", "description": "Soft cap on emails processed per run (hard cap 50)." } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 } } } } } } } } } } ```