Enter a target
Accepted input: Email address.
api module · premium
XposedOrNot Plus OSINT search
Checks an email address against the XposedOrNot breach database through its commercial API+ service and returns full detail for every breach it appears in. Results land in a Command One case with their source and confidence, alongside the rest of your investigation. Part of Reverse email lookup · all tools.
public sources only · free registration
how it works
From email address to evidence
Run the module
The provider is called server-side; no key is needed on your side.
Review results
Each matching breach with its name, breach date, affected site, exposed data types (for example emails, usernames, passwords), record count and how the passwords were stored.
Verify and export
Link findings in CommandDeck, add notes and export a PDF or CSV case report.
related modules
Pair XposedOrNot Plus with
Combining modules gives independent sources that confirm or rule out a lead.
Email Recon
Fast checks on an email address: domain mail records, disposable-provider detection and any public Gravatar profile.
socialscan
Asks official platform signup endpoints whether a username or email is already taken.
Holehe
Checks whether an email address is registered on more than a hundred services without alerting the owner.
GHunt
Looks up public artefacts tied to a Google account, such as profile details and public Google services.
mosint
Runs several email intelligence checks in a single pass.
email2phonenumber
Recovers masked recovery-phone digits that providers reveal during password-reset flows.
questions
XposedOrNot Plus questions
What does XposedOrNot Plus find?
Each matching breach with its name, breach date, affected site, exposed data types (for example emails, usernames, passwords), record count and how the passwords were stored.
What do I need to start a XposedOrNot Plus search?
Email address. Command One only runs a module against targets it accepts.
What are the limits of XposedOrNot Plus?
Only email addresses are accepted. It shows that an address appears in a breach corpus, not that the account is currently compromised, and it never returns the leaked passwords themselves. Costs 4 gold credits per search and is not charged while the service is unconfigured.
How much does XposedOrNot Plus cost?
Registration is free. This premium module draws on purchased credits. Current costs are listed on the credits page, and you are only charged when the module can actually run.
Try XposedOrNot Plus in a case
Create a free account to run available modules. For lawful research and authorised assessments only.