Directory
Explore Breach & Phishing Checks resources in Privacy & Security.
Breach Detective is a data breach search engine for checking whether personal data has been exposed in data leaks. It searches billions of records to show compromised credentials, including leaked passwords. Free, Pro and Ultimate plans differ in daily search allowances. Breach notifications are listed as coming soon.
isitPhishing is a privacy tool for blocking ads, trackers, popups, proxies, or unwanted web behavior.
Leak Lookup is a data breach search engine for searching database leaks and dumps. It offers username, email and IP address lookups across thousands of breaches to help track credentials compromised in the wild. A hash API provides hash-cracking capabilities and an API key is required to make requests.
LeakPeek is a search service for checking whether an email, username, phone number or password has appeared in a data breach or password leak. It also offers searches of US and UK public records and a face search of public websites. Membership plans range from a 24-hour trial to three months of access.
OpenPhish is a privacy tool for blocking ads, trackers, popups, proxies, or unwanted web behavior.
Phish Report is a tool for detecting, disrupting and deterring consumer phishing attacks. It analyses phishing sites automatically to identify hosting providers, captures evidence screenshots with a real Chrome browser, and provides verified abuse reporting steps and guided takedown processes. A case timeline tracks reports and hosting provider responses, and an open-source signature language is used to detect phishing kits impersonating a brand.
PhishStats is a phishing database and real-time feed used in cybersecurity research since 2014. It allows searching phishing URLs, IPs, domains and threat scores via a web interface or REST API, with API access subject to tier quotas.
PhishTank is a collaborative clearing house for data and information about phishing on the Internet, operated by Cisco Talos Intelligence Group. Users can submit suspected phishes, track the status of their submissions, and verify other users' submissions. It also provides a free open API for developers and researchers to integrate anti-phishing data into their applications.
Scattered Secrets is a service that lets users search data breaches to see whether their password has been compromised. Its site describes how cybercriminals collect stealer logs and crack passwords to take over accounts, and presents the service as protection against account takeovers. A free account is offered.
Trufflehog is a privacy tool for blocking ads, trackers, popups, proxies, or unwanted web behavior.
Netcraft Report is a page for reporting phishing, malware or suspicious URLs, emails and files so they can be automatically blocked. Reports are analyzed by Netcraft's classification system. The page notes that some site areas may not work if the browser is unsupported.
Pwned Passwords is a corpus of previously breached passwords made freely available so services can block them from being reused. It is free and open source, and offers API access or a downloadable dataset. Passwords are checked using k-anonymity so the full password or hash is not sent to the service.
Breach exposure lookup service for checking whether an email appears in known breach datasets.
Have Ibeen Pwned is a code project with source, releases, documentation, or setup notes.
Phishstats API Network is a code project with source, releases, documentation, or setup notes.
Details from each project's website. Open a listing for its full overview.
