: Organizations use these dorks to see if employee credentials have been leaked in public files. Reconnaissance
: Ethical hackers and bug bounty hunters use them during "passive recon" to find exposed sensitive info without interacting directly with a target's server. Malicious Intent
: Use Have I Been Pwned to see if your email or phone number has been part of a public data breach.
: Limits results to files containing these exact keywords. This frequently uncovers leaked credentials or "combolists" (lists of stolen account details). -facebook.com : The minus sign (