As someone who subscribes to HIBP, thanks for running these kind of verification instead of just trying logins. I found the "profile" of the email/TLDs/password

As someone who subscribes to HIBP, thanks for running these kind of verification instead of just trying logins. I found the "profile" of the email/TLDs/passwords very interesting, I wonder if some correlation algorithm could be build to statistically determine if a certain sample is indeed representative/coherent with the expected distribution of passwords/emails.