INTELLIGENCE REPORT
alex.thorne@example.com
EMAIL OSINT ANALYSIS
Wed, 16 Sep 2026 11:04:00 GMT · DEMO-EMA
Identity exposure: 62, grade C
Identity footprint
1 HIGH1 MEDIUM1 INFO
Executive Summary
01Elevated public identity footprint
alex.thorne@example.com has a visible public footprint. The address appears in three published breach collections, is registered on GitHub and Gravatar, and a close alias is used on Instagram. This is identity OSINT — not a vulnerability assessment. No host, port, or TLS checks were run.
- Assume the password from the 2023 Collection #1 dump is burned; rotate anywhere it was reused
- Review GitHub public activity tied to this mailbox
- Enable a unique password and MFA on accounts that still use this address
Target Intelligence
02Valuealex.thorne@example.com
Typeemail
Exposure signals (3)
03
GitHub@thorne-lab- gravatar.com@00000000000000000000000000000000
- Instagram@thorne.lab
| ID | Severity | Finding |
|---|---|---|
| e-001 | HIGH | Present in three published breach collections Have I Been Pwned lists this mailbox in Collection #1 (2019), LinkedIn (2021 scrape), and Adobe (2013). Presence in a breach dump is not a live exploit. It means the address and, in some dumps, a password hash were published. HIBP: Collection #1, LinkedIn, Adobe. No new dumps since 2021 in this demo set. |
Identifiers
04| Type | Value | Source | Context |
|---|---|---|---|
| alex.thorne@example.com | Search | query | |
| a.thorne@example.com | Email OSINT | alias, unconfirmed |
Entity graph
05Public pages
| Platform | Page | Name | Public text |
|---|---|---|---|
| github | https://github.com/thorne-lab | — | Existence only. Title and bio were not extracted in this scan. |
| gravatar | https://www.gravatar.com/avatar/00000000000000000000000000000000?d=identicon | — | Existence only. Title and bio were not extracted in this scan. |
| https://www.instagram.com/thorne.lab/ | — | Existence only. Title and bio were not extracted in this scan. |
Methodology
06OfferIdentity footprint
ScopeIdentity OSINT on a single email. No port scan, no HTTP probe, no CVE scoring.
AuthorizationPublic sources only. Synthetic demo data.
Modules4 executed
email osintcredential searchsocial media osintusername hunt