Add basic email validation on the main search box on the website
If I search for @example.com on the home page https://haveibeenpwned.com/, then it shows "Good news — no pwnage found!".
That could give the false impression that there is no pwnage on that domain. If a user is not aware of the process for domains, then they might not realise that they need to enter a specific email like pwned@example.com in order to see the "Oh no — pwned!" on the homepage.
I'm aware that validating emails is difficult, so I'm not suggesting something complicated that covers all possibilities, but I think it would be an improvement to show a warning if the user enters example.com or @example.com
Alasdair
shared this idea
The form also accepts usernames and phone numbers, hence not validating email addresses. Because this data was only loaded for a couple of breaches, the field isn't presently displaying the prompt to search for non-email address identifiers, but it may do so again in the future.