Enrich and verify
Email Validity
Is this address safe to send to? Returns valid, invalid, catch-all, or risky.
Email Identity
Who is behind this email? A full person profile: name, role, company, socials.
Email Gender
Predict likely gender and country to personalize outreach.
Email Compliance
May you cold-email this address, and under whose law?
Detect risk and breaches
Email Breaches
Where has this email leaked, and what data was exposed?
Password Breaches
Has this password appeared in a breach? Checked privately with k-anonymity.
GitHub Leaks
Scan a public repo for exposed secrets, keys, and tokens.
Exposed API Keys
Scan collected text for credentials and check whether supported keys are live.
Scan suspicious content
All five scan types usePOST /api/lookup/malware/scan. Set kind to choose
the scanner.
URL scan
Inspect redirects, hosting, page signals, downloads, and threat intelligence.
QR code scan
Decode QR, Data Matrix, and Aztec payloads and inspect their links.
Barcode scan
Decode common 1D barcode formats and assess their payloads.
Image scan
Check metadata, hidden content, embedded codes, OCR text, and discovered links.
File scan
Scan file bytes or a short-lived download URL for malware and rule matches.
Compare at a glance
Most lookups are 1 credit with free repeats during the
6-month free-repeat window. Email
Identity is a premium lookup at 1,000 credits. GitHub Leaks and Exposed API
Keys charge only for findings, so clean scans are free. Each malware scan
costs 1 credit. See Credits for the full breakdown.
Not sure which to use?
Clean a list before a campaign
Clean a list before a campaign
Start with Email Validity to drop undeliverable addresses, then
Email Compliance to confirm you may contact each one.
Enrich a lead or user
Enrich a lead or user
Email Identity returns the full person profile. Add Email Gender when
you only need a lightweight personalization signal.
Assess account risk
Assess account risk
Email Breaches shows past exposure for an address. Password Breaches
guards sign-up and reset flows against leaked passwords.
Catch secrets in your code
Catch secrets in your code
GitHub Leaks scans a public repository for committed credentials.
Find credentials in collected text
Find credentials in collected text
Exposed API Keys scans text you already collected and can validate
whether supported credentials still work.
Inspect a suspicious link or attachment
Inspect a suspicious link or attachment
Malware Scan checks URLs, QR codes, barcodes, images, and files through
one endpoint.
Next steps
Quickstart
Make your first lookup in under two minutes.
All endpoints
Full request and response schemas for every lookup.