DeHashed
Credential and breach intelligence from the DeHashed dataset.
DeHashed searches billions of breach records for emails, usernames, phones, domains, names, and IPs — returning credential rows with database provenance, leak dates, and related identity fields.
Capabilities
- Field-scoped search across email, username, phone, domain, name, and IP
- Return breach records with database name and leak metadata
- Surface plaintext and hashed passwords when present in source data
- Show total hits and remaining API balance from upstream metadata
What you get back
- Records grouped by breach database
- Masked password fields with reveal toggle
- Filter across databases and record fields
- Upstream total and balance metadata
UI workflow
Choose Email, Username, Phone, Domain, Name, or IP.
Select DeHashed.
Review grouped breach records and expand sensitive fields as needed.
Sample queries
| Input type | Query | Notes |
|---|---|---|
email | [email protected] | Credential exposure check |
domain | example.com | Domain-wide breach footprint |
ip | 203.0.113.45 | IP-linked breach records |
Pricing
email $0.30 · username $0.30 · phone $0.30 · domain $0.30 · name $0.30 · ip $0.30
Best for
- Credential stuffing and account takeover assessments
- Domain and employee exposure reviews
- Complementing LeakRadar and LeakOSINTbot breach views
API example
$0.30 per query. Live runs charge the active workspace wallet — the same rates as the dashboard.
Records
3
12 total upstream
Databases
3
Distinct breach sources
Upstream
145ms
4,990 credits left
curl -X POST "https://apiv1.osintverse.com/v1/search" \ -H "Content-Type: application/json" \ -H "x-api-key: ov_your_api_key" \ -d '{"provider":"dehashed","input_type":"email","query":"[email protected]"}'Invalid provider + input_type pairs return HTTP 422. Confirm combinations with GET /v1/providers or the pricing matrix.
Run this in the SearchIn UI or create an API key. Full HTTP reference: search workflow. Marketing overview: DeHashed integration.