Subscriptions are based on the number of breached email addresses on the domain, excluding breaches flagged as spam lists. If a domain has 20 breached addresses on it, for example, a Pwned 1 subscription is sufficient as it covers domains with up to 25 breached addresses. It also covers all your domains up to that size; if you have 10 domains with up to 25 breached addresses on each, the Pwned 1 subscription allows you to query all of them.