SearchIn queries each provider below from one prepaid wallet. The totals add the coverage those providers publish. The same breach row or domain can sit in more than one index, so these sums are not unique records.
LeakRadar 653.7 billion file lines, LeakOSINT 110.13 billion records, DeHashed 24.51 billion pieces of data, and Snusbase 18.52 billion rows.
Whoxy 725.3 million monitored domains, WhoisXML 1.2 billion+ historical domains, SecurityTrails 630 million domains, and BuiltWith 549.1 million root domains.
Whoxy 3.09 billion WHOIS records and WhoisXML 28.7 billion+ WHOIS records.
Hostnames SecurityTrails publishes. A SearchIn query returns current DNS and the first page of subdomains.
Addresses in Hunter’s index, drawn from about 650 million public web sources.
BuiltWith detections across 549 million root domains and 14.95 billion web pages.
14 providers across 6 categories: 3 People & identity, 4 Breach intelligence, 4 Domain intelligence, 1 Host intelligence, 1 Facial recognition, 1 Image geolocation.
Breach records add LeakRadar file lines, LeakOSINT records, DeHashed pieces of data, and Snusbase rows. Domain and WHOIS totals add each vendor’s published count. WhoisXML’s 28.7 billion WHOIS records and 1.2 billion historical domains, and SecurityTrails’ 630 million domains, are the rounded figures those vendors publish. The table under these totals is the provider-by-provider breakdown.
| Provider | Category | Published coverage | Snapshot |
|---|---|---|---|
| OSINT Industries | People & identity | A basic email scan covers 407 modules, a basic phone scan covers up to 90 depending on the number’s country, a basic username scan covers 402, and a basic name scan covers 94. The $1.80 premium add-on is separate: the search box lists 43 email, 28 phone, 40 username, 5 name, and 4 image premium modules. | See provider note |
| Predicta Search | People & identity | 514 modules from Predicta's live network catalog — mostly social and consumer platforms, plus leak corpora, WHOIS, dark-web forum, and profile-history sources — returned as one platform-hit list per identifier. | See provider note |
| LeakRadar | Breach intelligence | 159,933 indexed files · 653.7 billion lines in those files | 22 September 2026 |
| LeakOSINTbot | Breach intelligence | 10,750 databases loaded · 110.13 billion records | 23 September 2026 |
| DeHashed | Breach intelligence | 24,051 data wells · 24.51 billion pieces of data | 22 September 2026 |
| Snusbase | Breach intelligence | 2,251 tables · 18.52 billion rows | 22 September 2026 |
| Whoxy | Domain intelligence | 725.3 million domains monitored · 3.09 billion whois records | 22 September 2026 |
| WhoisXML | Domain intelligence | 1.2 billion+ historical domains · 28.7 billion+ whois records | 9 July 2026 |
| SecurityTrails | Domain intelligence | 630 million domains tracked · 10.19 trillion historical dns lookups | 22 September 2026 |
| Shodan | Host intelligence | At least weekly internet crawl · 30 days host lookup window | Current docs |
| Hunter.io | People & identity | Hunter builds its professional-email index from the public web: about 150 million addresses, about 650 million public sources, and about 30 million pages crawled a day. Domain Search returns each contact with where and when it was found. Email Finder says whether the address was found on a public page or guessed from public patterns at that domain. Sources that can no longer be found are labeled Removed, and contact or company data with no remaining public source is dropped after six months. People can claim an address and delete it; site owners can block the crawler with robots.txt. | See provider note |
| BuiltWith | Domain intelligence | 549 million root domains · 19.25 billion technology detections | 22 September 2026 |
| Facecheck.id | Facial recognition | Public pages indexed from · 50–100 published score bands | 22 September 2026 |
| Picarta.ai | Image geolocation | Worldwide image-to-GPS estimation with top-k ranked predictions, city / province / country labels, and EXIF camera context where present. | See provider note |
A basic email scan covers 407 modules, a basic phone scan covers up to 90 depending on the number’s country, a basic username scan covers 402, and a basic name scan covers 94. The $1.80 premium add-on is separate: the search box lists 43 email, 28 phone, 40 username, 5 name, and 4 image premium modules.
SearchIn queries OSINT Industries by Email, Username, Phone, Name.
514 modules from Predicta's live network catalog — mostly social and consumer platforms, plus leak corpora, WHOIS, dark-web forum, and profile-history sources — returned as one platform-hit list per identifier.
SearchIn queries Predicta Search by Email, Username, Phone, Name.
As of 22 September 2026, LeakRadar’s public catalogue lists 159,933 indexed files and 653.7 billion file lines, split across stealer logs, combolists, and database dumps.
SearchIn queries LeakRadar by Email, Username, Domain.
File lines inside indexed leak files. LeakRadar states this is not a count of unique accounts.
| Slice | Count | What it is |
|---|---|---|
| Stealer logs | 85,120 files | A captured login tied to its service URL, username, and password, so you can see which access was exposed. |
| Combolists | 26,690 files | An email or username paired with a password, including records that have no service URL. |
| Database dumps | 48,123 files | Text from leaked files and unstructured records beyond a normalized URL, username, and password. |
On 23 September 2026 LeakOSINT reported 10,750 databases loaded and 110,125,319,231 records, and said new databases are added every day. SearchIn queries that corpus by email, username, phone, domain, or IP.
SearchIn queries LeakOSINTbot by Email, Username, Phone, Domain, IP address.
The exact figure is 110,125,319,231 records. That is a record count, not a count of unique people. Field totals below are stored values, and one record can hold several fields.
LeakOSINT service status
| Slice | Count | What it is |
|---|---|---|
| 29,017,977,376 | Email is a SearchIn query. A hit returns the databases that stored this address. | |
| Telephone | 16,664,522,678 | Phone is a SearchIn query. LeakOSINT calls this field Telephone. |
| Nick | 12,533,362,032 | Username search looks for handles. LeakOSINT stores those as Nick, separate from Login. |
| IP | 1,866,978,034 | IP address is a SearchIn query. |
| Domain | 84,443,729 | Domain is a SearchIn query. |
| Full name | 18,174,239,687 | Names sit on records. SearchIn does not take a name as the LeakOSINT query. |
| Password | 14,776,343,285 | Passwords appear on a row when the dump stored one. A password is historical, not proof it still works. |
| Passport number | 3,016,946,855 | Stored on some records. Not a SearchIn query input. |
| Link | 2,603,204,738 | URLs stored next to a matching identifier. Not a SearchIn query input. |
| VK ID | 1,898,415,438 | Stored on some records. Not a SearchIn query input. |
| Document number | 1,751,997,597 | Stored on some records. Not a SearchIn query input. |
| Steam ID | 989,145,687 | Stored on some records. Not a SearchIn query input. |
| SSN | 933,835,461 | Stored on some records. Not a SearchIn query input. |
| Taxpayer number | 867,649,114 | Stored on some records. Not a SearchIn query input. |
| Company name | 826,516,135 | Stored on some records. Not a SearchIn query input. |
| Facebook ID | 766,261,868 | Stored on some records. Not a SearchIn query input. |
| Car number | 759,740,851 | Stored on some records. Not a SearchIn query input. |
| SNILS number | 732,793,903 | Stored on some records. Not a SearchIn query input. |
| Contact person | 628,374,856 | Stored on some records. Not a SearchIn query input. |
| VIN | 576,616,008 | Stored on some records. Not a SearchIn query input. |
| Login | 297,856,649 | A separate login field from Nick. SearchIn username search is the handle query, not this column. |
| Telegram ID | 167,326,991 | Stored on some records. Not a SearchIn query input. |
| App | 143,795,442 | Mobile or desktop application names stored on some records. |
| Instagram identifier | 46,974,817 | Stored on some records. Not a SearchIn query input. |
As of 22 September 2026, DeHashed’s public list has 24,051 data wells and 24,507,853,884 pieces of data. Each well is a named source with a date and a record count.
SearchIn queries DeHashed by Email, Username, Phone, Domain, Name, IP address.
DeHashed’s published total is 24,507,853,884 pieces of data across those wells. That is a record count, not a count of unique people.
| Slice | Count | What it is |
|---|---|---|
| Named sources | 24,051 wells | DeHashed publishes each data well by name. A SearchIn result is grouped under the well it came from. |
| Record counts | Per well | Each well has its own record count. Added together, DeHashed reports 24,507,853,884 pieces of data. |
| Well dates | On the public list | Each well includes a date. DeHashed’s site also says 4.0 records are still being indexed, so a missing well may not be searchable yet. |
As of 22 September 2026, Snusbase’s public statistics list 18,523,442,591 rows in 2,251 tables. Table names include a category. The largest groups by table count are gaming, social, hacking, store, tech, and Minecraft.
SearchIn queries Snusbase by Email, Username, Domain, Name, IP address.
Exact row count from Snusbase’s public statistics: 18,523,442,591. That counts rows, not unique people. The groups below count tables, so one large dump can outweigh many small tables.
| Slice | Count | What it is |
|---|---|---|
| Gaming | 341 tables | Tables whose Snusbase name uses the GAMING category. |
| Social | 215 tables | Tables whose Snusbase name uses the SOCIAL category. |
| Hacking | 193 tables | Tables whose Snusbase name uses the HACKING category. |
| Store | 119 tables | Tables whose Snusbase name uses the STORE category. |
| Tech | 115 tables | Tables whose Snusbase name uses the TECH category. |
| Minecraft | 95 tables | Tables whose Snusbase name uses the MINECRAFT category. |
Whoxy’s public database lists 725,300,921 monitored domains and 3,085,597,696 WHOIS records across 1,596 TLDs. History recording started in November 2012, and Whoxy says history is available for about 75% of those domains.
SearchIn queries Whoxy by Email, Domain, Name.
Exact published totals: 725,300,921 domain names and 3,085,597,696 WHOIS records. Whoxy says this is domains it has monitored, not every domain ever registered.
| Slice | Count | What it is |
|---|---|---|
| TLDs | 1,596 | Whoxy says its WHOIS API supports 1,596 TLDs. |
| .COM | 325,084,703 domains | The largest extension slice Whoxy publishes on the database page. |
| United States | 231,993,433 domains | Domains Whoxy lists as registered from the United States. |
| History | Since November 2012 | Whoxy says the earliest stored WHOIS is from November 2012, and history is available for about 75% of domains in the complete database. |
WhoisXML measured these figures on 9 July 2026: 28.7 billion+ WHOIS records, 1.2 billion+ domains tracked historically, 374 million+ active domains, and 7,596+ TLDs. SearchIn queries last-known WHOIS, the history archive count, reverse WHOIS, and reverse IP.
SearchIn queries WhoisXML by Email, Domain, Name, IP address.
WhoisXML’s published date for these figures is 9 July 2026. The same page also lists 50 billion+ domains and subdomains and 116 billion+ DNS records. SearchIn does not query those DNS or subdomain products.
| Slice | Count | What it is |
|---|---|---|
| Active domains | 374 million+ | WhoisXML’s published count of active domains, separate from the 1.2 billion+ historical set. |
| TLDs | 7,596+ | TLDs and country-code TLDs WhoisXML says it tracks. |
| Crawl history | 15+ years | WhoisXML says it has more than 15 years of data crawling. |
| IP coverage | 99.5% of addresses in use | Relevant to reverse IP. WhoisXML also publishes 10.6 million+ IP netblocks and 64,200 unique ASNs. |
SecurityTrails publishes 630 million domains, 2.6 billion hostnames, 4.2 billion historical WHOIS records, and 10.19 trillion historical DNS lookups. This integration returns current DNS and the first page of subdomains from the free API.
SearchIn queries SecurityTrails by Domain.
SecurityTrails also publishes 2.6 billion hostnames and 4.2 billion historical WHOIS records. Those historical and WHOIS datasets are not what this SearchIn integration returns.
| Slice | Count | What it is |
|---|---|---|
| Domains | 630 million | Domains SecurityTrails lists on its homepage. |
| Hostnames | 2.6 billion | Total hostnames SecurityTrails lists on its homepage. |
| Historical WHOIS | 4.2 billion records | Published on the SecurityTrails homepage. SearchIn does not return WHOIS from this provider. |
| Historical DNS | 10.19 trillion lookups | Published on the SecurityTrails homepage. SearchIn returns the current DNS record, not this history. |
Shodan says it crawls the public Internet at least once a week. Host lookups show the most recent banner for each IP and port from the past 30 days. With history enabled, a lookup can go back up to 90 days and at most 1,000 banners.
SearchIn queries Shodan by Domain, IP address.
Shodan’s homepage says it crawls the entire Internet every week. The host API uses a 30-day window. History on that API is capped at 90 days and 1,000 banners.
| Slice | Count | What it is |
|---|---|---|
| Weekly crawl | Public Internet | Shodan says crawlers run continuously and are designed to cover the Internet randomly at least once a week. |
| Host banners | Past 30 days | An IP lookup shows the latest banner Shodan collected for each port in the past 30 days. |
| History | Up to 90 days | When the membership key allows history, the host API can return older banners, capped at 90 days and 1,000 banners. |
| DNS domain | Indexed domains | A domain query reads DNS records and subdomains Shodan has associated with that name. |
Hunter builds its professional-email index from the public web: about 150 million addresses, about 650 million public sources, and about 30 million pages crawled a day. Domain Search returns each contact with where and when it was found. Email Finder says whether the address was found on a public page or guessed from public patterns at that domain. Sources that can no longer be found are labeled Removed, and contact or company data with no remaining public source is dropped after six months. People can claim an address and delete it; site owners can block the crawler with robots.txt.
SearchIn queries Hunter.io by Email, Domain, Name.
BuiltWith’s public coverage page lists 549,079,578 root domains, 19,250,085,045 technology detections, and 14,952,754,700 web pages, across 6,047 TLDs and 1,056 countries. A SearchIn query returns the technology profile for one domain.
SearchIn queries BuiltWith by Domain.
Exact published totals: 549,079,578 root domains, 19,250,085,045 technologies, and 14,952,754,700 web pages. BuiltWith says it covers .com, .net, and .org fully, and active domains on ccTLDs and gTLDs.
| Slice | Count | What it is |
|---|---|---|
| Web pages | 14.95 billion | Web pages BuiltWith lists on its coverage page. |
| eCommerce products | 3.13 billion | BuiltWith publishes 3,134,203,904 unique eCommerce products. |
| TLDs | 6,047 | TLDs BuiltWith lists in its TLD coverage section. |
| Countries | 1,056 | Countries and territories BuiltWith lists in its coverage database. |
| Crawl | 25.1 million domains a day | BuiltWith publishes 17,461 domains a minute, 25,143,840 domains a day, and 8.1 billion GET requests a month, from six cities. It says the crawl follows robots.txt. |
FaceCheck indexes faces from public web pages: social media, news and blogs, videos, mugshots, sex-offender sites, and scammer listings. It publishes match bands from 50 to 100 and says a face match alone is not an identification.
SearchIn queries Facecheck.id by Image.
FaceCheck’s bands: 90–100 certain, 83–89 confident, 70–82 uncertain, 50–69 weak. It says many unrelated people look alike, and that its index is public web pages only.
| Slice | Count | What it is |
|---|---|---|
| Social media | Public profiles | Faces FaceCheck has found on public social pages. |
| News and blogs | Public articles | Faces from news sites and blogs. |
| Videos | Public video | Faces FaceCheck lists from public video. |
| Mugshots | Public records | Faces from public mugshot pages. |
| Sex offenders | Public registries | Faces from public sex-offender sites. |
| Scammers | Public listings | Faces FaceCheck lists from public scammer and fraud pages. |
Worldwide image-to-GPS estimation with top-k ranked predictions, city / province / country labels, and EXIF camera context where present.
SearchIn queries Picarta.ai by Image.