Have I Been Pwned ? Data Breach Website

[Carl]

Not sure whether anyone else has knowledge of this website, but it forms part of an online course I have just undertaken and I thought it was worth sharing.

The website is run, and maintained, by a well known security researcher and uses a large database to compare against your email address.

Quite simply you enter your email address and it will return any website data breaches that has exposed your details.

https://haveibeenpwned.com/

[freddo]

Looks more like a selling site for the mentioned password manager also a good way of email address harvesting

[Carl]

Looks more like a selling site for the mentioned password manager also a good way of email address harvesting

I agree with you Fred about them trying to sell the password manager.

I did look at their Privacy Policy before posting the link, and they are quite clear how your email address is used and that it is not stored - obviously you have to trust what they say, as with any website these days.

Harvesting of email addresses has become so easy these days, anybody can do it. As an example:

Go to Google search box and type: site:tripadvisor.com "@gmail" and it will return pages of results.

Email addresses related to something specific you add + "keyword" like: site:tripadvisor.com "@gmail" + "Torrevieja"

You can change the site: to whatever you want and "@gmail" could be "@yahoo" or any other alternative email provider.

So you now have pages of search results containing email addresses, but all you want is the actual email address.

Simply open a new tab in your browser and go to https://emailx.discoveryvip.com/

Copy the page of results from Google and paste it into the email extractor box in the website you have opened in the new tab and click on extract. The email extractor will extract the email address from the text leaving a list of emails that you can then download to use as you wish, all seperated by commas ready to use a bulk email tool.

We are fortunate that on this forum that people do not post their email addresses publicly. However on another local forum people regularly post their email addresses as part of their posts or listings in the buy/sell section, making it easy to harvest hundreds on email addresses from that site alone.