Catch all
Implement support for catch all email addresses. I use a different mail address per website I register to. Its all on the same domain that is configured to support catch all e-mail. In theory I could use an UUID email adres per website.
In order to proof you are the owner you could send a verification mail to a random mailadres for the given domain.
This feature already exists, it’s under the “Domain search” link in the nav.
-
François Rey
commented
I think the main point of this suggestion is to serve the need of individuals using a personal domain with a catch-all email address, As the original poster said, using the web site name before the @ when registering makes it possible to segment a leak and identiffy its origin.
For such use by an individual it would be great to have access to a full domain search, which is a feature intended for businesses/orgs.
The difficulty on HIBP side is to ensure the domain is effectively used by an individual not an organization. Some automation with AI could easily check DNS and registration info, as well as detect the intent of a website. If no website is present on a domain then it it probably isn't for a business/org, but a manual check would be best. In my case I have no web site and only an email server configured on my domain.