I have several doubts about the utility of haveibeenpwned. For example, I know for a fact that a certain email of mine have been exposed, but it never appears on the site.