泄露邮箱检测

检查指定邮箱地址是否出现在已知的数据泄露事件中。提交任意邮箱地址，即可获取其泄露历史报告——包括该邮箱涉及的泄露事件、被泄露的数据类型、泄露发生日期，以及相应的风险缓解建议。适用于用户注册阶段的安全检查、员工凭证监控及威胁暴露面评估。

使用方法

{
  "tool": "breached_email_check",
  "input": {
    "email": "user@example.com"
  }
}

参数说明

返回内容

• 泄露状态 — 邮箱是否在任何已知泄露事件中被发现
• 泄露事件列表 — 邮箱所涉泄露事件的名称及发生日期
• 被泄露的数据类型 — 每起事件中具体暴露的数据（如密码、电话号码、物理地址、信用卡信息等）
• 泄露严重性评级 — 基于所暴露数据敏感度综合评定的整体风险等级
• Paste 暴露情况 — 邮箱是否曾出现在公开 Paste 站点（如 Pastebin 等）
• 缓解建议 — 根据泄露结果提供的具体操作指引（例如重置密码、启用 MFA、持续监控账户活动等）

示例输出

{
  "email": "user@example.com",
  "breached": true,
  "breach_count": 3,
  "severity": "High",
  "breaches": [
    {
      "name": "LinkedIn (2012)",
      "date": "2012-06-05",
      "compromised_data": ["Email Addresses", "Passwords"],
      "description": "Password hashes exposed in large-scale breach; later cracked and published",
      "verified": true
    },
    {
      "name": "Adobe (2013)",
      "date": "2013-10-04",
      "compromised_data": ["Email Addresses", "Password Hints", "Passwords", "Usernames"],
      "description": "Source code and encrypted credentials exposed for 153 million accounts",
      "verified": true
    },
    {
      "name": "DataBreach.com (2020)",
      "date": "2020-03-21",
      "compromised_data": ["Email Addresses", "Phone Numbers", "Physical Addresses"],
      "description": "Aggregated breach data compilation including PII from multiple sources",
      "verified": false
    }
  ],
  "paste_exposure": true,
  "paste_count": 1,
  "remediation": [
    "Change passwords on all accounts using this email address immediately",
    "Enable multi-factor authentication (MFA) on all associated accounts",
    "Check for unauthorized account activity on LinkedIn and Adobe",
    "Consider using a unique email alias for sensitive accounts going forward",
    "Monitor credit report if physical address was exposed"
  ]
}

当邮箱未被泄露时

{
  "email": "safe@example.com",
  "breached": false,
  "breach_count": 0,
  "severity": "None",
  "breaches": [],
  "paste_exposure": false,
  "paste_count": 0,
  "remediation": [
    "No known breaches found — continue using strong, unique passwords",
    "Enable MFA as a proactive measure"
  ]
}

典型应用场景

• 用户注册流程 — 新用户注册时实时检测其邮箱是否出现在已知泄露事件中
• 员工安全审计 — 提前识别存在凭证泄露风险的员工，防范其成为攻击入口
• 威胁暴露面评估 — 全面评估企业邮箱域名在全体员工范围内的泄露暴露情况
• 密码重置触发机制 — 自动向存在泄露记录的用户推送密码重置提示
• 安全意识提升 — 向用户展示其个人邮箱的泄露历史，推动 MFA 的采用与普及

API 参考文档

基础 URL： https://portal.toolweb.in/apis/security/breached-email-check

认证方式： 请在请求头中传入 API 密钥作为 X-API-Key 字段，或通过 MCP 以 mcp_api_key 参数传递。

定价方案

关于 ToolWeb

ToolWeb.in — 提供 200+ 个安全类 API，通过 CISSP 与 CISM 认证，专为企业的安全从业者构建。

支持平台：按次计费 · API 网关 · MCP Server · OpenClaw · RapidAPI · YouTube

• 🌐 toolweb.in
• 🔌 portal.toolweb.in
• 🤖 hub.toolweb.in (MCP Server)
• 🦞 toolweb.in/openclaw/
• ⚡ rapidapi.com/user/mkrishna477
• 📺 youtube.com/@toolweb-009