Horus Leak Check checks whether an identity (e-mail, domain, password) appears in known leaks or looks untrustworthy. It is not proof that a mailbox is hijacked right now, and it is not Horus Web Check (website TLS/CSP).
Syntax, MX, disposable/role lists, Have I Been Pwned breaches and pastes. Optional stealer logs (credits).
RDAP age, MX, SPF/DMARC, whether the domain is a known HIBP breach source. Optional VirusTotal/Safe Browsing and domain-wide mailbox search after ownership proof (/.well-known/horus-leakcheck.txt or DNS TXT).
The browser computes SHA-1 locally and sends only a 5-character prefix plus suffix. The server queries the Pwned Passwords range API (k-anonymity). The password is never stored or logged.
Pack of 10 credits / 9.90 € (VAT art. 293 B CGI). Stealer logs 2, domain reputation 1, domain-wide search 5, PDF 12 months 1.
Breach data via Have I Been Pwned. Horus does not host stolen dumps.