Tenminbox · Spam source checker
Who did you
give this email address to?
Wondering which website may have exposed your email? Start by checking whether you used that address for just one site.
A dedicated alias can narrow down the possibilities, but a registration record doesn’t prove who exposed it.
If you reused an old address, one email usually can’t reveal where it came from
Addresses can spread through public pages, past breaches, partner services, or other channels. Sender names can also be spoofed. A better starting point is to match “who this email was sent to” with records of where you used the address, then check for unusual messages.
Organize clues about this emailMatch the email to the right inbox
Spam source checker
Enter what you already know to get suggested next steps. This isn’t an email scanner and doesn’t look up breach records from websites.
Check the email itself instead of guessing from the sender
Search the 30-day archive by alias
The example below is fictional. Real emails sent to aliases are available only after you log in to the dashboard. Temporary inbox emails aren’t part of this forwarding archive.
Your order has shipped
ForwardedOrder notification <dispatch@shop-demo.example>
Limited-time offer from an unfamiliar store
BlockedPromotions <offers@promo-demo.example>
Both emails went to the same alias, but that doesn’t mean the online store sold your address. “Blocked” only means the email was stopped; it doesn’t tell you where it came from.
What can this record tell you?
The order notification shows that this alias receives account messages you need. An unfamiliar ad arriving later could mean another sender has your address. Since you used it for just one registered source, you can start by checking that website and related services.
Next, check that the recipient alias matches, that your registration records are complete, whether unusual emails keep arriving, and whether you ever posted the address publicly. Sender names, subject lines, and timing are only clues; none proves a leak or sale on its own.
Emails sent to aliases are kept online for 30 days, including blocked spam. Deleted emails and records past the retention period can’t be restored. If you need to contact a website, save only the necessary information before it expires, and avoid forwarding unnecessary personal data.
After checking, decide whether to disable the alias
Keep the messages you need before disabling an alias
Disabling an alias doesn’t just block one sender. It affects all future email to that address, including orders, account verification, and password recovery messages.
Disabling an alias won’t reclaim an address that’s already been shared or undo a past leak. Before you do, make sure the website’s new email address is working. For details on usage, see the Terms of Service.
-
1
Still need order or account notifications?
First, change your email address in the original website’s account settings and complete any required verification. Make sure future messages reach the new address, then return to the Tenminbox dashboard to disable the old alias. Don’t disable it while you still rely on it to recover your account.
-
2
No longer need this alias?
Check the full alias, then disable it in your dashboard. New emails sent to a disabled alias will be discarded, not forwarded, and won’t be added to the archive for future checks. If you still need to monitor incoming messages, don’t disable it yet.
-
3
Still not sure where it came from?
Keep the necessary records of the alias and unusual emails, and don’t rush to blame a website. Start using a dedicated alias for each new registration. This can make future checks more useful, but it can’t reveal where an old address went in the past.
Keep a record you can check next time you sign up
One website, one alias, one record
Log in with a real email address to receive a verification code and manage up to 100 forwarding aliases. Keep a secure record of which alias you use for each purpose, instead of using the same address everywhere.
When you register, note the full alias, website or purpose, and registration date. Update the record if you later change the email address on a website. These details are for your own notes; this page won’t save them to your account.
For ongoing order or account emails, use a forwarding alias. For a one-time verification code, try the temporary inbox—but don’t use a short-lived address as the recovery email for a long-term account.
Keep each alias with its purpose
- Dedicated alias
- linmuqing@tenminbox.com
- Website / purpose
- Online store · Order and account notifications
- Registration date
- Oct 2, 2026
- Usage
- Don’t reuse on other websites or display publicly
This is only an example note format; it won’t create an alias. Create new aliases in the dashboard after logging in.
Use a new alias for each new service. Save your personal address for important messages.
Use a dedicated alias the next time you sign up.
Keep track of where future emails are sent; this can’t trace leaks that happened in the past.
Log in with a verification code—no password required. Check real email records in the separate dashboard.
Clues aren’t proof of responsibility. If an email seems suspicious, don’t click its links or open attachments to check where it came from. Verify your account through a website you already know. For more on how to use Tenminbox, read the Blog.