Skip to content
LeakRadar
HomeFeaturesSolutionsIndustriesPricingLiveFAQ

Domain credential exposure reports

Explore public reports on credentials associated with a domain. See the scale of exposure, understand how records relate to the domain, then investigate your organization's accounts in LeakRadar.

Explore the public reports
Your organization's exposure

Start with your domain.

Paste a domain or website URL. Subdomains are kept as entered.

Public overview. No account required.

Explore the public reports

Browse the existing directory or filter it by domain name. Public reports show aggregate figures; account details are available in the member area.

Page 155

  1. square-enix.com
  2. squarespace.com
  3. squareup.com
  4. srcei.cl
  5. sre.gob.mx
  6. sri.gob.ec
  7. sribu.com
  8. sribulancer.com
  9. srmist.edu.in
  10. srmuniv.ac.in
  11. ssa.gov
  12. ssbjk.org.in
  13. ssc.gov.in
  14. ssc.gov.jo
  15. ssc.nic.in
  16. sslforfree.com
  17. ssm.com.my
  18. sso.go.th
  19. ssoidp.gov.ps
  20. ssportplus.com
  21. ssru.ac.th
  22. sss.gov.ph
  23. st.com
  24. stackoverflow.com
  25. stackry.com
  26. stake.com
  27. stamps.com
  28. stan.com.au
  29. standardbank.co.za
  30. standardchartered.com
  31. stanford.edu
  32. stanleybet.ro
  33. staples.com
  34. star-clicks.com
  35. star7arab.com
  36. starbreeze.com
  37. starbucks.com
  38. stardix.com
  39. stardock.com
  40. stardoll.com
  41. stargames.com
  42. stargames.net
  43. starhealth.in
  44. starlink.com
  45. starpets.gg
  46. starplus.com
  47. starstable.com
  48. startech.com.bd
  49. startimes.com
  50. startupindia.gov.in
Understand the signal

How to read a domain report

Stealer Log records are grouped by the domain in the service URL and the email address. These groups describe matches, not verified employees or customers.

01

URL + email domain

Both the service URL and the email address match the domain. Review these records to identify potentially exposed access to your own services.

02

Email domain only

The email address matches the domain, while the service URL belongs elsewhere. Review where organization addresses appear in external services.

03

URL domain only

The service URL matches the domain, while the account identifier does not match its email domain. Investigate exposure associated with users of that service.

Data methodology
The data behind LeakRadar

Investigate the exposed records, with the data to act.

641,680,817,914lines across indexed leak files

File lines, not a count of unique accounts.

Updated

Plaintext passwords, with their account context

Inspect the exposed password alongside the account and, for stealer logs, its service URL. When the source includes plaintext, that detail helps your team scope password resets and investigate exposed access.

Compare plans for plaintext access and included unlock points.

  • Stealer logs

    Connect a captured login to its service URL, username and password to understand which access is exposed.

    url:user:pass

  • Combolists

    Find email/password and username/password pairs, including records without a service URL.

    email:passuser:pass

  • Raw leak files

    Search the text of leaked files, database dumps and unstructured records beyond normalized credential fields.

  • Dark web forums

    Search indexed forum posts for mentions of your organization and examine the discussion's source context.

Get notified via Email, Slack, Discord, Telegram or Webhook when new exposed credentials match your monitored domains or email addresses.

Explore our data coverage
FAQ

About domain reports

What can I see in a public report?

Public reports show aggregate credential exposure associated with a domain. Stealer Logs use estimated counts and domain-based groups. Combolist figures, when available, appear separately. The two totals are not combined.

Can I check a domain that is not listed?

Yes. Enter a domain in the directory to open its public report, when available, without an account. The member area is used to investigate account details. Start with your domain.

Does a report mean the website was breached?

No. A domain can appear in credentials captured from an infected device or reused across services. A match alone does not prove a breach of the website's servers or that a password still works.

Can my team inspect the exposed passwords?

LeakRadar provides account-linked plaintext when it is present in the source. An account is required; visibility and unlocking depend on your plan and preferences. Public reports never display the passwords.