Sample — email OSINTPhone →Domain →
INTELLIGENCE REPORT

alex.thorne@example.com

EMAIL OSINT ANALYSIS
Wed, 16 Sep 2026 11:04:00 GMT · DEMO-EMA

Identity footprint
1 HIGH1 MEDIUM1 INFO

Executive Summary

01

Elevated public identity footprint

alex.thorne@example.com has a visible public footprint. The address appears in three published breach collections, is registered on GitHub and Gravatar, and a close alias is used on Instagram. This is identity OSINT — not a vulnerability assessment. No host, port, or TLS checks were run.

  • Assume the password from the 2023 Collection #1 dump is burned; rotate anywhere it was reused
  • Review GitHub public activity tied to this mailbox
  • Enable a unique password and MFA on accounts that still use this address

Target Intelligence

02
Valuealex.thorne@example.com
Typeemail

Exposure signals (3)

03
OSINT signals
IDSeverityFinding
e-001HIGH
Present in three published breach collections
Have I Been Pwned lists this mailbox in Collection #1 (2019), LinkedIn (2021 scrape), and Adobe (2013). Presence in a breach dump is not a live exploit. It means the address and, in some dumps, a password hash were published.
HIBP: Collection #1, LinkedIn, Adobe. No new dumps since 2021 in this demo set.

Identifiers

04
TypeValueSourceContext
EMAILalex.thorne@example.comSearchquery
EMAILa.thorne@example.comEmail OSINTalias, unconfirmed

Entity graph

05
Public pages
alex.thorne@example.comalex.thorne@example.comhttps://github.com/thorne-labgithubhttps://github.com/thorne-labhttps://www.gravatar.com/avatar/00000000000000000000000000000000?d=identicongravatarhttps://www.gravatar.com/avatar/00000000000000000000000000000000?d=identiconhttps://www.instagram.com/thorne.lab/instagramhttps://www.instagram.com/thorne.lab/
PlatformPageNamePublic text
githubhttps://github.com/thorne-lab—Existence only. Title and bio were not extracted in this scan.
gravatarhttps://www.gravatar.com/avatar/00000000000000000000000000000000?d=identicon—Existence only. Title and bio were not extracted in this scan.
instagramhttps://www.instagram.com/thorne.lab/—Existence only. Title and bio were not extracted in this scan.

Methodology

06
OfferIdentity footprint
ScopeIdentity OSINT on a single email. No port scan, no HTTP probe, no CVE scoring.
AuthorizationPublic sources only. Synthetic demo data.
Modules4 executed
email osintcredential searchsocial media osintusername hunt