Unverified50% confidenceFactExact time
OWASP recommends that developers return consistent generic prompts for both registered and unregistered email addresses to avoid information leakage.
1
Sources
50%
Confidence
Long-term
Relevance
8/15/2026
First Seen
Sources
Holehe：通过邮箱反查注册账号的开源OSINT工具
Related Claims
UnverifiedMany enterprises configure noreply addresses as real but unmonitored mailboxes, causing emails replied to by users to be successfully delivered and stored.65% similarUnverified建议采用允许注册限制权限的策略：临时邮箱用户可注册，但在完成验证或达到信誉分前限制提现、领取优惠券等高风险操作61% similarUnverifiedHolehe determines whether an email address is registered by exploiting behavioral differences in websites' forgot-password and registration interfaces, rather than through brute force or credential stuffing.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/751796API
curl https://kongchang.com/api/v1/knowledge/claims/751796MCP
get_claim(id=751796)