LeakOSINTbot
Breach-database style leak search for emails, usernames, phones, domains, and IPs.
LeakOSINTbot returns hits organized by breach database — each database lists records with flexible fields plus aggregate result counts. On 23 September 2026 the service reported 10,750 databases and 110,125,319,231 records, and said it adds databases every day.
Capabilities
- Search by email, username, phone, domain, or IP
- Group findings by breach / dump name
- Surface passwords, URLs, and other leak fields when the dump stored them
- 10,750 databases and 110,125,319,231 records loaded (snapshot 23 September 2026)
Data
SearchIn queries email, username, phone, domain, and IP. The figures below are stored values in the loaded databases, not extra search boxes. One record can hold several fields, so these counts are not a second copy of the 110,125,319,231 record total.
- Email — 29,017,977,376. SearchIn input.
- Telephone — 16,664,522,678. SearchIn phone input.
- Nick — 12,533,362,032. SearchIn username input. Separate from Login.
- IP — 1,866,978,034. SearchIn input.
- Domain — 84,443,729. SearchIn input.
- Full name — 18,174,239,687. Stored field.
- Password — 14,776,343,285. Stored field. Historical, not proof it still works.
- Passport number — 3,016,946,855. Stored field.
- Link — 2,603,204,738. Stored field.
- VK ID — 1,898,415,438. Stored field.
- Document number — 1,751,997,597. Stored field.
- Steam ID — 989,145,687. Stored field.
- SSN — 933,835,461. Stored field.
- Taxpayer number — 867,649,114. Stored field.
- Company name — 826,516,135. Stored field.
- Facebook ID — 766,261,868. Stored field.
- Car number — 759,740,851. Stored field.
- SNILS number — 732,793,903. Stored field.
- Contact person — 628,374,856. Stored field.
- VIN — 576,616,008. Stored field.
- Login — 297,856,649. Stored field, separate from Nick.
- Telegram ID — 167,326,991. Stored field.
- App — 143,795,442. Mobile or desktop application name.
- Instagram identifier — 46,974,817. Stored field.
What you get back
- Collapsible database sections
- Per-field rows with secret masking
- Search filter across returned databases
- Upstream search metadata when available
UI workflow
Choose Email, Username, Phone, Domain, or IP.
Select LeakOSINTbot.
Browse databases, expand records, and copy fields as needed.
Sample queries
| Input type | Query | Notes |
|---|---|---|
username | hackru | Handle across leak DBs |
email | hackru@gmail.com | Email-centric dumps |
phone | +15550001111 | Phone-linked leak records |
domain | example.com | Domain-wide leak corpus |
ip | 203.0.113.10 | IP-linked leak records |
Pricing
email $0.20 · username $0.20 · phone $0.20 · domain $0.20 · ip $0.20
Best for
- Quick leak corpus lookups
- Complementing LeakRadar credential views
- Investigators who need dump-level provenance
How it works & why through OSINTverse
How the request runs
- 1Choose email, username, phone, domain, or IP and select LeakOSINTbot.
- 2SearchIn issues the lookup over an authenticated HTTP call — no Telegram session on your side.
- 3Findings come back grouped by breach database, each with the fields that dump happens to carry.
- 4SearchIn renders collapsible database sections with secret masking, plus upstream counts and totals.
Coverage. On 23 September 2026 LeakOSINT reported 10,750 databases loaded and 110,125,319,231 records, and said new databases are added every day. SearchIn queries that corpus by email, username, phone, domain, or IP.
Why route LeakOSINTbot through OSINTverse
- ·At $0.20 it is the cheapest sweep on the desk — run it first, then spend on LeakRadar or DeHashed only if it hits.
- ·Results arrive as searchable, collapsible database sections in the browser instead of a chat log you scroll.
- ·Available over the same POST /v1/search contract as every other integration, so it automates like the rest.
| LeakOSINTbot directly | Through OSINTverse | |
|---|---|---|
| Getting started | LeakOSINTbot is operated through its own Telegram bot with token top-ups, and responses arrive as chat messages. | Sign in, top up from $10, and run LeakOSINTbot the same minute — no vendor contract, seat, or sales call. |
| What a query costs | Plan, credit pack, or contract pricing set by the vendor and paid up front. | Pay per query from your prepaid balance — LeakOSINTbot starts at $0.20 for email lookups, with the exact price shown before you run it. |
| Failed lookups | Handled under the vendor's own credit and refund policy. | Automatically refunded to your wallet — a search that fails upstream after billing is not charged. |
| Output format | A vendor-specific response shape you normalise and render yourself. | Normalised result panels plus the raw JSON, returned by the same POST /v1/search contract as every other integration. |
| Cross-source work | Copy-paste between vendor dashboards to follow a lead into another dataset. | Results join one case graph, so you can pivot an entity into any of the other 16 integrations in a click. |
| Running it for a team | Per-seat or per-account access, billed and administered per analyst. | One shared team wallet with roles, provider allowlists, enforced MFA, and audit history — no per-seat fee. |
| Volume work | Script the vendor API yourself, including retries, polling, and rate handling. | Bulk search takes up to 50 queries across selected providers in one submission (max 100 jobs), with per-job status and partial-failure handling. |
One wallet, no subscriptions
Top up prepaid USD from $10 and spend it a query at a time across all 17 integrations. No monthly fee, no seat count — and the balance never expires.
Failed searches are refunded
If an upstream provider errors or times out after the charge, the search is marked refunded and the money goes back to your wallet automatically.
One API for every source
The same POST /v1/search contract and x-api-key header work for every integration, so adding a source to your automation is a one-word change.
Cases and pivot graph
Results land in a named case you can reopen. Entities become graph nodes you can pivot from into any other integration without retyping.
Team wallets and controls
Share one balance with roles, provider allowlists, enforced MFA, and audit history — instead of buying a vendor seat for every analyst.
Exports built in
Download any result as JSON, CSV, or PDF, and export the case graph as PNG, SVG, entities CSV, or graph JSON.
Good to know
- Field shapes vary by source dump — records render flexibly rather than against a fixed schema.
- SearchIn queries email, username, phone, domain, and IP only. Name, password, passport, document, taxpayer, SNILS, SSN, vehicle, and social ids are stored fields, not search inputs.
- The 10,750 databases and field counts are a 23 September 2026 snapshot. LeakOSINT says it adds databases every day.
- Provenance is only as good as the upstream corpus; corroborate before acting on a record.
API example
$0.20 per query. The Example tab is free sample data. The Try it tab runs a real search and charges the active workspace wallet at the same rates as the dashboard.
Databases
34
Breach sources with hits
Records
100
Credential and identity rows
Search time
0.047s
18 free requests left
curl -X POST "https://apiv1.osintverse.com/v1/search" \ -H "Content-Type: application/json" \ -H "x-api-key: ov_your_api_key" \ -d '{"provider":"leakosintbot","input_type":"email","query":"hackru@gmail.com"}'Invalid provider + input_type pairs return HTTP 422. Confirm combinations with GET /v1/providers or the pricing matrix.
Run this in the SearchIn UI or create an API key. Full HTTP reference: search workflow. Marketing overview: LeakOSINTbot integration.