v1.1 — Now Live

Heimdallr

> mail checker · anti-detection · inbox intelligence · mass validation

WebIO browser login + IMAP intel in one pass. Microsoft, Gmail, Yahoo, and AOL. Real-time hit counters, keyword search, and server-backed run history. Single .exe. No install.

Download v1.1 Buy License

> free download. license key required to run scans.

// free tools

HeimCombo

Dedupe, domain filter, and format combo lines — 100% in your browser, nothing uploaded.

Open free tools →

// licensed pool

HeimIndex

Live server combo pool — browse, filter by domain, claim exclusive pulls. $35/mo or $75 lifetime.

Buy or activate →

// what's new v1.1 Patch Notes

Released May 2026 · Checker build 2026-05-22-defer-golden

Fixed

Checker hanging / freezing on Microsoft lists (threading bug)
WebIO → IMAP intel path — login hits now feed OAuth tokens into inbox search
MS lockout pages no longer marked as Invalid (wrong password)
Double-counting when WebIO invalid still ran golden IMAP
Empty IMAP hits tab on DB duplicate logins
Stop button blocked while waiting on IMAP / OAuth slots
Single release binary — Heimdallr.exe only

Improved

Skip recheck pass for rate-limited / lockout combos (auto retry after cooldown)
MS OAuth slot pacing under high thread counts
Separate Web login hits and IMAP hits tabs with live counters
Verbose debug trace log for support (%LOCALAPPDATA%\Heimdallr\)
RDP / second-PC setup documented — enable Web login hits + Playwright once

Recommended for Microsoft lists (no proxies): Web login hits ON · 35–45 threads · load proxies if available. Replace your old exe with the new download.

// pricing

Choose Your Plan

Full access on every plan. WebIO + IMAP modes. Intelligence module. Server-backed history. No feature gates.

3 Days

$15

Buy

1 Week

$20

Buy

2 Weeks

$30

Buy

1 Month

$40

Buy

3 Months

$75

Buy

Special

Lifetime

$99

$55

Limited-time lifetime offer

Buy

Want both tools? Lifetime bundle — Heimdallr + HeimDork for $75

Free trial

1-hour full access via The Lounge. No card required.

Free

Lounge

Lifetime bundle

Heimdallr + HeimDork both lifetime for $75.

Special

$75

// screenshots

v1.1 in action

Live scan

IMAP hits, Web login hits, intel tabs, CPM tracker — one dashboard.

Mass emailer

Send from validated hits with templates and pacing controls.

// anti-detection engine

WebIO + IMAP Hybrid

v1.1 runs browser login first on Microsoft accounts, pulls the OAuth token from the live session, then opens IMAP for inbox intel — all in one combo pass. No second login. No stale tokens.

Rate-limited combos are queued for an automatic recheck after cooldown instead of blocking the whole scan. Lockout pages go to Errors or Skip — never Invalid.

🔒

Anti-Detection Engine

Proprietary fingerprint spoofing makes every request look like a real user on a real browser. Not a headless browser — something faster and completely undetectable.

🌐

Stealth Validation

Validates credentials the same way a real person would. Handles all the security challenges, redirects, and session tokens automatically. Detects 2FA.

[+]

All Major Providers

Microsoft (Outlook, Hotmail, Live, MSN + all regionals), Gmail, Yahoo (all regionals, Ymail, Rocketmail), AOL (AIM, Verizon). Other domains fall back to standard mode automatically.

{2FA}

2FA Detection

Detects two-factor authentication and reports it separately. You know the credentials are valid and that 2FA is enabled. No guessing.

// core capabilities

What It Does

Mass Mail Validation

Multi-threaded checking up to 500 threads. Smart per-host throttling prevents provider lockouts. Multiple connection modes. Proxy rotation built in.

[?]

Inbox Intelligence

On every valid login, automatically scan the inbox for keywords and senders you care about. Find password resets, invoices, security codes. Export per-account HTML snapshots with full email content.

|#|

Live Dashboard

Real-time counters for IMAP hits, Web login hits, Intel, Invalids, Errors, and Skipped. Pause, resume, or stop mid-scan. See everything as it happens.

[=]

Organized Output

Timestamped scan folders. Hits, Invalids, Errors, Intelligence summaries. Categorized by error type. Clean, sorted, ready to use.

{db}

Hits Database

Every valid login is saved to a local database with country detection from the email domain. Track duplicates across runs. Never lose a hit.

</>

Microsoft Auth

Full automated authentication for Microsoft consumer accounts. WebIO session tokens feed directly into XOAUTH2 IMAP — no duplicate OAuth round-trips.

{<>}

Server-Backed Runs

Results stream to the server in real time. Run history, hit archives, intelligence data all backed up. Re-download scan artifacts anytime.

[W]

Windows Native

Single Heimdallr.exe download. No install, no runtime, no dependencies. Windows 10/11 64-bit. Dark themed UI with tabbed workspace. Auto-update built in.

🔒

Secure by Design

Encrypted credential storage. Secure update delivery with integrity checks. Server-side authentication. Rate-limit protection. No plaintext secrets on disk.

// two modes, one tool

How It Works

IMAP / XOAUTH2

Direct OAuth2 login to outlook.office365.com
Golden path for maximum IMAP hits
Full inbox intelligence on the live session
Works with any mail provider
HTML export per account per keyword
Best for: intel gathering on clean IPs

WebIO Mode v1.1

Browser login first — anti-detection active
OAuth token scraped from live session
Feeds IMAP intel without a second web login
Microsoft, Gmail, Yahoo, AOL supported
Skip recheck for throttled combos
Best for: avoiding blocks on hot IPs

Enable Web login hits in Settings for the hybrid path. Turn off for IMAP-only maximum hits on the same list.

Ready to start?

Download v1.1 free. Buy a license from $15. Join The Lounge.

Download v1.1 Buy License — from $15 ✉ The Lounge