Cybersecurity

Breach-Associated Domains Domain-level signal, not credential search

We ingest the Have I Been Pwned breach catalogue as a domain feed, so domains tied to publicly disclosed breaches appear as credential-leak indicators alongside the rest of our data. This is a domain-level signal — we do not index, store, or search individual credentials.

Check a domain API Documentation

No credit card required · Free API key

Try it nowFree⌘K

Try

risk score · threat categories · sources · age · confidence — in one request

Capabilities

Key features. Everything you need to protect your infrastructure and users.

Domain-Level Signal

Domains associated with disclosed breaches are flagged as credential-leak indicators.

Correlated With Everything Else

The signal sits alongside reputation, DNS, WHOIS and infrastructure data in the same report.

API Access

The indicator is returned by the standard check API — no separate breach endpoint.

Applications

Use cases. How security teams use this tool.

Vendor Assessment

See whether a supplier domain carries a breach association before onboarding.

Report Context

Read the breach signal next to the other indicators for the same domain.

Support

Frequently asked questions.

Can I search for an email address?

No. We work at the domain level only. To check whether an individual address appears in a breach, use Have I Been Pwned, which is the source of the domain catalogue we ingest.

Do you store passwords, hashed or otherwise?

No. We hold no credentials of any kind — no plaintext, no hashes, no derived values. The catalogue is a list of domains.

What does a match actually tell me?

That the domain is associated with at least one publicly disclosed breach in the Have I Been Pwned catalogue. It does not tell you which accounts were affected, when, or what data was exposed.

Can I get alerts when a new breach affects my domain?

Not today. Breach-associated domains are ingested as indicators and surface in reports; there is no dedicated breach alerting.

Explore

Ready to get started?

Join thousands of security teams using isMalicious to protect their infrastructure.

Get Started Contact Sales