Indeed. Literally all you are providing to the site is an email address. I could check my coworkers' email addresses. They have a list, I'm checking to see if something is on the list.

Any site that requires you to provide an email address and password (or any other "verifiable info") to check is probably a scam.