[kevinoconnor7]

Yes, but they would already have your e-mail address anyway. Lookup by hash precludes the case where you're giving them information they didn't already have.

[jdludlow]

True. I was more referring to it being a confirmation that this is an email address that anyone cares about.

If I wanted to be truly malicious I'd have my online checker return a "Nope, you're all good" and then add that email address to the short list of accounts to go after.

[bitJericho]

But you're still feeding into the "this is a good working address" and "this is a security newb" email lists.