Horus Leak Check checks whether an identity (e-mail, domain, password) appears in known leaks or looks untrustworthy. It is not proof that a mailbox is hijacked right now, and it is not Horus Web Check (website TLS/CSP).
Syntax, MX, disposable and role lists, then the local Horus corpus (breaches, pastes, stealer rows). No third-party breach API.
RDAP age, MX, SPF/DMARC, and whether the domain is listed in the Horus corpus. Mailbox search uses boites.tsv after ownership proof (/.well-known/horus-leakcheck.txt or DNS TXT).
The browser computes SHA-1 locally and sends only a 5-character prefix plus suffix. The server compares that suffix to corpus/mots-de-passe.sha1. The password is never stored or logged.
Pack of 10 credits / 9.90 € (VAT art. 293 B CGI). Stealer logs 2, domain reputation 1, domain-wide search 5, PDF 12 months 1.
The corpus is a file the operator loads. The product ships with an empty corpus and does not embed stolen dumps. Legal notice.