If I were to run this scam, I would only add addresses that were checked and matched a known leak. This would both give me a known good address and also an idea

If I were to run this scam, I would only add addresses that were checked and matched a known leak. This would both give me a known good address and also an idea of what kind of person you are. If you're the type to check your email address against known leaks then I would know exactly how to attack you.