LeakRadar
Credential and breach lookups — $1.00 unlocks 1,000 results, then $0.50 per extra 1,000.
LeakRadar searches leaked credentials by email, username, or domain. Its public catalogue, as of 22 September 2026, indexes 159,933 files — stealer logs, combolists, and database dumps — holding 653.7 billion lines (file lines, not unique accounts). Domain searches include exposure summaries and password-strength breakdowns. Each query unlocks the first 1,000 credentials; remaining rows unlock from the same result for $0.50 per 1,000.
$1.00 includes 1,000 unlocks. Remaining results unlock from the same search at $0.50 per 1,000 — billed in 1,000-result blocks, with leftover count and cost shown before you confirm.
Capabilities
- Email and username credential search with unlock visibility
- Domain compromise summaries (employees, customers, third parties)
- Password strength distributions for domain investigations
- Public file catalogue of 159,933 indexed files: 85,120 stealer logs, 26,690 combolists, and 48,123 database dumps (as of 22 September 2026)
- 1,000 unlocks included per query, then $0.50 per extra 1,000
Data
LeakRadar’s public file catalogue, updated 22 September 2026, lists 159,933 indexed files and 653.7 billion lines across those files. The line count is file lines, not unique accounts.
- Stealer logs — 85,120 files. Each record is a service URL, username, and password (
URL : USER : PASS). - Combolists — 26,690 files. Email or username plus a password, including records with no service URL (
EMAIL / USER : PASS). - Database dumps — 48,123 files. Raw leaked text and unstructured records beyond normalized credential fields (
RAW / DATABASE).
What you get back
- Domain exposure stats and category tabs
- Individual leak cards with host, identity, and password fields
- Locked vs unlocked status and a remaining-results unlock button
- Pagination / total match metadata when present
UI workflow
Choose Email, Username, or Domain.
Select LeakRadar.
Run the search and review summary stats. If more than 1,000 credentials remain, unlock them from the result panel.
Sample queries
| Input type | Query | Notes |
|---|---|---|
email | [email protected] | Credential hits for one address |
domain | example.com | Org-wide exposure overview |
Pricing
email $1.00 · username $1.00 · domain $1.00 — 1,000 unlocks included. Extra unlocks $0.50 per 1,000.
Best for
- Breach triage without picking a LeakRadar tier
- Domain exposure reviews of any size
- Cost-controlled credential lookups that scale only when the footprint is large
How it works & why through OSINTverse
How the request runs
- 1Choose email, username, or domain, then select LeakRadar.
- 2SearchIn calls the LeakRadar enterprise API and unlocks the first 1,000 credential rows in the $1.00 query price.
- 3Domain searches return exposure summaries — employees, customers, third parties — plus a password-strength breakdown.
- 4If more matches remain, a result-panel button shows the leftover count and unlocks them at $0.50 per 1,000.
Coverage. As of 22 September 2026, LeakRadar’s public catalogue lists 159,933 indexed files and 653.7 billion file lines, split across stealer logs, combolists, and database dumps.
Why route LeakRadar through OSINTverse
- ·A $1.00 query unlocks the first 1,000 credentials — you only pay more if the footprint is larger.
- ·Remaining results unlock from the same job at $0.50 per 1,000, with the leftover count and cost shown before you confirm.
- ·No enterprise contract or minimum commitment: top up $10 and run one lookup.
| LeakRadar directly | Through OSINTverse | |
|---|---|---|
| Getting started | LeakRadar's enterprise API is contracted per organisation, with unlock accounting handled under your own agreement. | Sign in, top up from $10, and run LeakRadar the same minute — no vendor contract, seat, or sales call. |
| What a query costs | Plan, credit pack, or contract pricing set by the vendor and paid up front. | Pay per query from your prepaid balance — LeakRadar starts at $1.00 (1,000 included; $0.50 / extra 1k) for email lookups, with the exact price shown before you run it. |
| Failed lookups | Handled under the vendor's own credit and refund policy. | Automatically refunded to your wallet — a search that fails upstream after billing is not charged. |
| Output format | A vendor-specific response shape you normalise and render yourself. | Normalised result panels plus the raw JSON, returned by the same POST /v1/search contract as every other integration. |
| Cross-source work | Copy-paste between vendor dashboards to follow a lead into another dataset. | Results join one case graph, so you can pivot an entity into any of the other 13 integrations in a click. |
| Running it for a team | Per-seat or per-account access, billed and administered per analyst. | One shared team wallet with roles, provider allowlists, enforced MFA, and audit history — no per-seat fee. |
| Volume work | Script the vendor API yourself, including retries, polling, and rate handling. | Bulk search takes up to 50 queries across selected providers in one submission (max 100 jobs), with per-job status and partial-failure handling. |
One wallet, no subscriptions
Top up prepaid USD from $10 and spend it a query at a time across all 14 integrations. No monthly fee, no seat count — and the balance never expires.
Failed searches are refunded
If an upstream provider errors or times out after the charge, the search is marked refunded and the money goes back to your wallet automatically.
One API for every source
The same POST /v1/search contract and x-api-key header work for every integration, so adding a source to your automation is a one-word change.
Cases and pivot graph
Results land in a named case you can reopen. Entities become graph nodes you can pivot from into any other integration without retyping.
Team wallets and controls
Share one balance with roles, provider allowlists, enforced MFA, and audit history — instead of buying a vendor seat for every analyst.
Exports built in
Download any result as JSON, CSV, or PDF, and export the case graph as PNG, SVG, entities CSV, or graph JSON.
Good to know
- A returned password comes from an indexed leak file. It does not confirm the credential still works.
- Catalogue totals count lines inside indexed files. They are not a count of unique accounts, and they change as LeakRadar indexes new files. Figures on this page are from 22 September 2026.
- The first page of a query includes 1,000 unlocks; larger domains need an extra unlock charge on that same search.
- Extra unlocks bill in 1,000-result blocks (a leftover 200 rows still costs $0.50).
API example
$1.00 (1,000 included; $0.50 / extra 1k) per query. Live runs charge the active workspace wallet — the same rates as the dashboard.
Leaks
3
Unique hosts
3
Unlocked
2
Credentials visible in this result set
Auto-unlock consumed 1 point.
curl -X POST "https://apiv1.osintverse.com/v1/search" \ -H "Content-Type: application/json" \ -H "x-api-key: ov_your_api_key" \ -d '{"provider":"leakradar","input_type":"email","query":"[email protected]"}'Invalid provider + input_type pairs return HTTP 422. Confirm combinations with GET /v1/providers or the pricing matrix.
Run this in the SearchIn UI or create an API key. Full HTTP reference: search workflow. Marketing overview: LeakRadar integration.