My password manager told me that my info was leaked, including IP address, address, email, personal information, and phone number, in a data breach of eye4fraud.com. However, I don’t use eye4fraud, so it must have been a site that uses their services. I would like to change my login credentials on the site that shared my data with them (and stop using their service since they’re sharing my info with a security company that was breached), but I don’t know which site that was. I found this list of sites that use eye4fraud, but that list has over 1,600 entries. Other than reviewing every single sight on the list, is there a way of finding out which site that I use leaked my info?
Does something similar exist aside from Gmail? Cus you know. Gmail.
You could use something like simplelogin.io to create aliases.
Integrates with password managers like Bitwarden nicely to generate aliases.
I think many other services support the + trick though too. The downside is that spammers know the + trick and can find out your base email easily; they can’t if you use an alias.
I think it’s a fairly standard feature. At least Protonmail also supports this kind of “alias”.
If I’m not mistaken it’s part of the original spec, Dylan beattle had a bit in a talk about email at some point
Edit: I was in fact mistaken it’s a Google only thing and not part of the spec
YMMV on all of these. These are things I use or have considered.
Protonmail supports + addresses as well. Not sure about others.
Afaik this is not a feature unique to Gmail, it’s a feature of the email system as a whole. Same with a dot. Any characters after a plus or dot in the first part of the email are ignored.
I’m fairly certain you’re wrong about the “.” in an email address