Email address lookup
An email address is the highest value identifier you can search, because it is the key most services use to identify an account. Breach records routinely carry the address alongside a password hash, a plaintext password, and sometimes a name or a phone number from the same registration form.
Why email is the right identifier to start with
An address is the key most services use to identify an account, so a breach that exposes one usually exposes the account with it: a password hash, sometimes a plaintext password, and whatever name and phone number the same form collected.
That makes it the best first search rather than the most interesting one. It establishes which services a person held accounts on, and every other identifier in the result becomes somewhere to pivot next.
What a result contains
Credentials
Passwords and password hashes recorded against the address.
Linked accounts
Services where the address was used to register.
Identity fragments
Names, phone numbers, and locations captured in the same record.
Timeline
The date each source recorded, which shows when exposure happened.
How to read the result
- If a password appears in plaintext, treat it as compromised everywhere it was ever reused, not just on the breached service.
- An address with no results is not proof of safety. It means the modules queried did not hold it.
- Search the address, then search any username you find in the results. The second search is usually where the picture completes.
Modules queried
- Snusbase
- IntelX
- LeakCheck
- HackCheck
- BreachBase
- IntelVault
Each row in a result set names the module it came from, so findings stay traceable.
Questions
What does a full lookup return that a masked one does not?
The values themselves. A paid lookup returns passwords, hashes, names, addresses and the source each row came from. A masked result shows the shape of the data with the values hidden.
Does a lookup tell me whether the account is still active?
No. Breach data records what was captured when the leak happened. Whether the account still exists, or whether the password still works, is not something a lookup can answer.
Why does an address return nothing when I know it leaked?
Results come from the modules we query and coverage differs between them. An empty result means those modules did not hold that address. It is not proof the address never leaked.
What does one lookup cost?
The first lookup on a new account is free and reveals one record in full. After that, a lookup costs $1.75 in credits, or comes out of a plan allowance: $19.99 for 15 a day, $39.99 for 50 a day. A search that returns nothing costs nothing.