The site is actually legitimate. A colleague who is ethical hacker uses it very often to check for breaches.
They check if your email adress is found in a database of compromised adresses