# LeakRadar

Credential and breach lookups — $1.00 unlocks 1,000 results, then $0.50 per extra 1,000.

URL: https://osintverse.com/docs/providers/leakradar

LeakRadar searches leaked credentials by email, username, or domain. Its public catalogue, as of 22 September 2026, indexes 159,933 files — stealer logs, combolists, and database dumps — holding 653.7 billion lines (file lines, not unique accounts). Domain searches include exposure summaries and password-strength breakdowns. Each query unlocks the first 1,000 credentials; remaining rows unlock from the same result for $0.50 per 1,000.

> $1.00 includes 1,000 unlocks. Remaining results unlock from the same search at $0.50 per 1,000 — billed in 1,000-result blocks, with leftover count and cost shown before you confirm.

## Capabilities

* Email and username credential search with unlock visibility
* Domain compromise summaries (employees, customers, third parties)
* Password strength distributions for domain investigations
* Public file catalogue of 159,933 indexed files: 85,120 stealer logs, 26,690 combolists, and 48,123 database dumps (as of 22 September 2026)
* 1,000 unlocks included per query, then $0.50 per extra 1,000

## Data

LeakRadar’s [public file catalogue](https://leakradar.io/en/leaks), updated 22 September 2026, lists **159,933** indexed files and **653.7 billion** lines across those files. The line count is file lines, not unique accounts.

* **Stealer logs** — 85,120 files. Each record is a service URL, username, and password (`URL : USER : PASS`).
* **Combolists** — 26,690 files. Email or username plus a password, including records with no service URL (`EMAIL / USER : PASS`).
* **Database dumps** — 48,123 files. Raw leaked text and unstructured records beyond normalized credential fields (`RAW / DATABASE`).

## What you get back

* Domain exposure stats and category tabs
* Individual leak cards with host, identity, and password fields
* Locked vs unlocked status and a remaining-results unlock button
* Pagination / total match metadata when present

## UI workflow

Choose Email, Username, or Domain.

Select LeakRadar.

Run the search and review summary stats. If more than 1,000 credentials remain, unlock them from the result panel.

## Sample queries

| Input type | Query                     | Notes                           |
| ---------- | ------------------------- | ------------------------------- |
| `email`    | `alex.rivera@example.com` | Credential hits for one address |
| `domain`   | `example.com`             | Org-wide exposure overview      |

## Pricing

`email` **$1.00** · `username` **$1.00** · `domain` **$1.00** — 1,000 unlocks included. Extra unlocks **$0.50** per 1,000.

## Best for

* Breach triage without picking a LeakRadar tier
* Domain exposure reviews of any size
* Cost-controlled credential lookups that scale only when the footprint is large

## How it works & why through OSINTverse

### How the request runs

1. Choose email, username, or domain, then select LeakRadar.
2. SearchIn calls the LeakRadar enterprise API and unlocks the first 1,000 credential rows in the $1.00 query price.
3. Domain searches return exposure summaries — employees, customers, third parties — plus a password-strength breakdown.
4. If more matches remain, a result-panel button shows the leftover count and unlocks them at $0.50 per 1,000.

**Coverage.** As of 22 September 2026, LeakRadar’s public catalogue lists 159,933 indexed files and 653.7 billion file lines, split across stealer logs, combolists, and database dumps.

### Why route LeakRadar through OSINTverse

- A $1.00 query unlocks the first 1,000 credentials — you only pay more if the footprint is larger.
- Remaining results unlock from the same job at $0.50 per 1,000, with the leftover count and cost shown before you confirm.
- No enterprise contract or minimum commitment: top up $10 and run one lookup.

|  | LeakRadar directly | Through OSINTverse |
| --- | --- | --- |
| Getting started | LeakRadar's enterprise API is contracted per organisation, with unlock accounting handled under your own agreement. | Sign in, top up from $10, and run LeakRadar the same minute — no vendor contract, seat, or sales call. |
| What a query costs | Plan, credit pack, or contract pricing set by the vendor and paid up front. | Pay per query from your prepaid balance — LeakRadar starts at $1.00 (1,000 included; $0.50 / extra 1k) for email lookups, with the exact price shown before you run it. |
| Failed lookups | Handled under the vendor's own credit and refund policy. | Automatically refunded to your wallet — a search that fails upstream after billing is not charged. |
| Output format | A vendor-specific response shape you normalise and render yourself. | Normalised result panels plus the raw JSON, returned by the same POST /v1/search contract as every other integration. |
| Cross-source work | Copy-paste between vendor dashboards to follow a lead into another dataset. | Results join one case graph, so you can pivot an entity into any of the other 16 integrations in a click. |
| Running it for a team | Per-seat or per-account access, billed and administered per analyst. | One shared team wallet with roles, provider allowlists, enforced MFA, and audit history — no per-seat fee. |
| Volume work | Script the vendor API yourself, including retries, polling, and rate handling. | Bulk search takes up to 50 queries across selected providers in one submission (max 100 jobs), with per-job status and partial-failure handling. |

- **One wallet, no subscriptions.** Top up prepaid USD from $10 and spend it a query at a time across all 17 integrations. No monthly fee, no seat count — and the balance never expires.
- **Failed searches are refunded.** If an upstream provider errors or times out after the charge, the search is marked refunded and the money goes back to your wallet automatically.
- **One API for every source.** The same POST /v1/search contract and x-api-key header work for every integration, so adding a source to your automation is a one-word change.
- **Cases and pivot graph.** Results land in a named case you can reopen. Entities become graph nodes you can pivot from into any other integration without retyping.
- **Team wallets and controls.** Share one balance with roles, provider allowlists, enforced MFA, and audit history — instead of buying a vendor seat for every analyst.
- **Exports built in.** Download any result as JSON, CSV, or PDF, and export the case graph as PNG, SVG, entities CSV, or graph JSON.

### Good to know

- A returned password comes from an indexed leak file. It does not confirm the credential still works.
- Catalogue totals count lines inside indexed files. They are not a count of unique accounts, and they change as LeakRadar indexes new files. Figures on this page are from 22 September 2026.
- The first page of a query includes 1,000 unlocks; larger domains need an extra unlock charge on that same search.
- Extra unlocks bill in 1,000-result blocks (a leftover 200 rows still costs $0.50).

## API example

Try `leakradar` free with mock data in the API sandbox: https://osintverse.com/developers/sandbox

> Invalid `provider` + `input_type` pairs return HTTP 422. Confirm combinations with [GET /v1/providers](https://osintverse.com/docs/api/overview) or the [pricing matrix](https://osintverse.com/docs/pricing).

Run this in the [SearchIn UI](https://osintverse.com/searchin/search) or create an [API key](https://osintverse.com/dashboard/api). Full HTTP reference: [search workflow](https://osintverse.com/docs/api/search). Marketing overview: [LeakRadar integration](https://osintverse.com/integrations/leakradar).