[operator-name]

So the crux of the technique is to roughly date how long an email has existed for, using leaked databases as a timestamping measure. I'm not sure this metric is a good one though, as older and importantly "pwned" emails are far more likely to have been taken over.

Without an idea for the percentage of emails that are still in the original owners hands, this risks a high false negative rate.