Skip to main content

CSINT — Email & Breach Search

Quick examples and notes for searching emails, IPs, phone numbers, Minecraft UIDs and Discord IDs in SearchHub. Includes a short Snusbase overview and legal guidance.

Search an email to find linked accounts, public exposures and breach hits.

Example:

test@gmail.com
Notes:
  • Returns linked profiles, indexed mentions and breach dataset hits (when available).
  • Use full email for best precision; partials may return noisy results.

Lookup an IP to surface observed connections, hosting info and related records.

Example:

203.0.113.45
IP results can include session logs, reports and associated identifiers (when indexed).

Phone number

Search by phone number. Prefer international (normalized) formats for consistency.

Example:

061234567
Normalize local numbers (country code) for best matches.

Minecraft UID

Lookup Minecraft UIDs / UUIDs to find linked activity or associated identifiers.

Example:

550e8400-e29b-41d4-a716-446655440000
Use the full UUID when possible. Partial matches may return unrelated results.

Discord ID

Search by Discord numeric ID.

Example:

1098175931635482634
Discord IDs are deterministic.

Snusbase (breach datasets)

Snusbase is a breach/leak aggregator. Use the appropriate type to focus breach searches.

Email

Search leaked email addresses.

Example:

test@gmail.com
Returns leaked entries where the email appears.

Username

Search account handles / usernames found in leaks.

Example:

te5t_user
Useful to find usernames reused across breaches.

IP

Search last-observed IPs associated with leaked records.

Example:

203.0.113.45
IP hits show where a record listed an IP address (connections, logs, etc.).

Password

Search plaintext passwords found in leaks (do not store or share).

Example:

T3st123!
Handle plaintext password hits with strict controls and do not redistribute.

Hash

Search hashed credentials or password hashes.

Example:

5f4dcc3b5aa765d61d8327deb882cf99
Hash hits may require additional cracking/context to map back to plaintext.

Name

Search person or display names present in leak entries.

Example:

John Doe
Names are noisy — combine with other fields (email/username) for precision.

Domain

Search domain or host references present in leak entries.

Example:

example.com
Use to find leak entries that reference specific domains or hosts.
I