Your GET endpoint for email stats

curl --request GET \
  --url https://api.projectdiscovery.io/v1/leaks/stats/email \
  --header 'X-API-Key: <api-key>'

{
  "leak_devices_count": [
    {
      "devices": 123
    }
  ],
  "leak_customers_count": [
    {
      "customers": 123
    }
  ],
  "leak_user_count": [
    {
      "user": 123
    }
  ],
  "leak_employees_count": [
    {
      "employees": 123
    }
  ],
  "combolist_exposure": [
    {
      "combolist_exposure": 123
    }
  ],
  "leak_country_stats": [
    {
      "Country": "<string>",
      "CredentialsCount": 123
    }
  ],
  "top_used_urls_by_customers": [
    {
      "count": 123,
      "url": "<string>"
    }
  ],
  "top_used_urls_by_employees": [
    {
      "count": 123,
      "url": "<string>"
    }
  ],
  "top_used_urls_by_user": [
    {
      "count": 123,
      "url": "<string>"
    }
  ],
  "leak_customers_timeline": [
    {
      "CredentialsCount": 123,
      "Month": 123,
      "Year": 123
    }
  ],
  "leak_user_timeline": [
    {
      "CredentialsCount": 123,
      "Month": 123,
      "Year": 123
    }
  ],
  "leak_employees_timeline": [
    {
      "CredentialsCount": 123,
      "Month": 123,
      "Year": 123
    }
  ],
  "customers_sample_data": [
    {
      "password": "<string>",
      "username": "<string>",
      "url": "<string>",
      "country": "<string>",
      "log_date": "<string>"
    }
  ],
  "employees_sample_data": [
    {
      "password": "<string>",
      "username": "<string>",
      "url": "<string>",
      "country": "<string>",
      "log_date": "<string>"
    }
  ],
  "user_sample_data": [
    {
      "password": "<string>",
      "username": "<string>",
      "url": "<string>",
      "country": "<string>",
      "log_date": "<string>"
    }
  ]
}

GET

leaks

stats

Your GET endpoint for email stats

curl --request GET \
  --url https://api.projectdiscovery.io/v1/leaks/stats/email \
  --header 'X-API-Key: <api-key>'

{
  "leak_devices_count": [
    {
      "devices": 123
    }
  ],
  "leak_customers_count": [
    {
      "customers": 123
    }
  ],
  "leak_user_count": [
    {
      "user": 123
    }
  ],
  "leak_employees_count": [
    {
      "employees": 123
    }
  ],
  "combolist_exposure": [
    {
      "combolist_exposure": 123
    }
  ],
  "leak_country_stats": [
    {
      "Country": "<string>",
      "CredentialsCount": 123
    }
  ],
  "top_used_urls_by_customers": [
    {
      "count": 123,
      "url": "<string>"
    }
  ],
  "top_used_urls_by_employees": [
    {
      "count": 123,
      "url": "<string>"
    }
  ],
  "top_used_urls_by_user": [
    {
      "count": 123,
      "url": "<string>"
    }
  ],
  "leak_customers_timeline": [
    {
      "CredentialsCount": 123,
      "Month": 123,
      "Year": 123
    }
  ],
  "leak_user_timeline": [
    {
      "CredentialsCount": 123,
      "Month": 123,
      "Year": 123
    }
  ],
  "leak_employees_timeline": [
    {
      "CredentialsCount": 123,
      "Month": 123,
      "Year": 123
    }
  ],
  "customers_sample_data": [
    {
      "password": "<string>",
      "username": "<string>",
      "url": "<string>",
      "country": "<string>",
      "log_date": "<string>"
    }
  ],
  "employees_sample_data": [
    {
      "password": "<string>",
      "username": "<string>",
      "url": "<string>",
      "country": "<string>",
      "log_date": "<string>"
    }
  ],
  "user_sample_data": [
    {
      "password": "<string>",
      "username": "<string>",
      "url": "<string>",
      "country": "<string>",
      "log_date": "<string>"
    }
  ]
}

Overview

Get statistical information about leaks associated with a specific email address. This endpoint provides aggregate data for personal leak monitoring and analysis.

This endpoint is primarily used for personal email leak statistics. For organizational monitoring, consider using the domain stats endpoint instead.

Query Parameters

Parameter	Type	Description
`email`	string	Required. The email address to get leak statistics for
`unmask_email`	boolean	Whether to unmask email addresses in the response

Response Structure

The response provides comprehensive statistics about leaks for the specified email:

{
  "email": "[email protected]",
  "total_leaks": 25,
  "open_leaks": 18,
  "fixed_leaks": 7,
  "leak_classification": {
    "personal_leaks": 15,
    "employee_leaks": 8,
    "customer_leaks": 2
  },
  "recent_activity": {
    "last_30_days": 3,
    "last_7_days": 1
  },
  "compromised_services": [
    {
      "service": "facebook.com",
      "count": 8,
      "last_seen": "2023-03-15T10:30:00Z"
    },
    {
      "service": "linkedin.com",
      "count": 5,
      "last_seen": "2023-02-28T14:20:00Z"
    }
  ],
  "risk_timeline": [
    {
      "date": "2023-03",
      "new_leaks": 3,
      "fixed_leaks": 1
    },
    {
      "date": "2023-02", 
      "new_leaks": 5,
      "fixed_leaks": 2
    }
  ]
}

Data Fields Explained

Field	Description
`email`	The email address these statistics apply to
`total_leaks`	Total number of leaks found for this email
`open_leaks`	Number of leaks that haven’t been marked as fixed
`fixed_leaks`	Number of leaks marked as remediated
`leak_classification`	Breakdown by leak type (personal, employee, customer)
`recent_activity`	New leak discovery in recent time periods
`compromised_services`	Services where this email was found in leaks
`risk_timeline`	Historical trend of leak discovery and remediation

Usage Examples

Get basic email stats

curl -X GET "https://api.projectdiscovery.io/v1/leaks/stats/[email protected]" \
  -H "Authorization: Bearer YOUR_API_KEY"

Get stats with unmasked emails

curl -X GET "https://api.projectdiscovery.io/v1/leaks/stats/[email protected]&unmask_email=true" \
  -H "Authorization: Bearer YOUR_API_KEY"

Privacy Considerations

Access Control

You can only access stats for emails you’re authorized to view
Personal emails: accessible to the account owner
Employee emails: requires domain verification

Data Sensitivity

Email statistics may reveal sensitive information about user behavior
Consider data retention policies for stored statistics
Implement appropriate access controls in your applications

Best Practices

Regular Monitoring

Check email stats periodically for accounts under your management
Set up alerts for new leak discoveries
Track remediation progress to ensure security improvements

Integration Tips

Use this endpoint for summary dashboards and reports
Combine with detailed leak endpoints for comprehensive security monitoring
Cache results appropriately to minimize API usage

Security Recommendations

Encourage users to fix open leaks promptly
Provide guidance on changing passwords for compromised services
Monitor trends to identify systemic security issues

Authorizations

X-API-Key

string

header

required

Query Parameters

string

Email to get stats for

unmask_email

boolean

Response

leak_devices_count

DevicesCount · object[]

Show child attributes

leak_devices_count.devices

number

leak_customers_count

CustomersCount · object[]

Show child attributes

leak_customers_count.customers

number

leak_user_count

UsersCount · object[]

Show child attributes

leak_user_count.user

number

leak_employees_count

EmployeesCount · object[]

Show child attributes

leak_employees_count.employees

number

combolist_exposure

CombolistExposureCount · object[]

Show child attributes

combolist_exposure.combolist_exposure

number

leak_country_stats

LeakCountryStats · object[]

Show child attributes

leak_country_stats.Country

string

leak_country_stats.CredentialsCount

number

top_used_urls_by_customers

UsedUrlsCount · object[]

Show child attributes

top_used_urls_by_customers.count

number

top_used_urls_by_customers.url

string

top_used_urls_by_employees

UsedUrlsCount · object[]

Show child attributes

top_used_urls_by_employees.count

number

top_used_urls_by_employees.url

string

top_used_urls_by_user

UsedUrlsCount · object[]

Show child attributes

top_used_urls_by_user.count

number

top_used_urls_by_user.url

string

leak_customers_timeline

LeaksTimeline · object[]

Show child attributes

leak_customers_timeline.CredentialsCount

number

leak_customers_timeline.Month

number

leak_customers_timeline.Year

number

leak_user_timeline

LeaksTimeline · object[]

Show child attributes

leak_user_timeline.CredentialsCount

number

leak_user_timeline.Month

number

leak_user_timeline.Year

number

leak_employees_timeline

LeaksTimeline · object[]

Show child attributes

leak_employees_timeline.CredentialsCount

number

leak_employees_timeline.Month

number

leak_employees_timeline.Year

number

customers_sample_data

LeaksUsersSampleData · object[]

Show child attributes

customers_sample_data.password

string

customers_sample_data.username

string

customers_sample_data.url

string

customers_sample_data.country

string

customers_sample_data.log_date

string

employees_sample_data

LeaksUsersSampleData · object[]

Show child attributes

employees_sample_data.password

string

employees_sample_data.username

string

employees_sample_data.url

string

employees_sample_data.country

string

employees_sample_data.log_date

string

user_sample_data

LeaksUsersSampleData · object[]

Show child attributes

user_sample_data.password

string

user_sample_data.username

string

user_sample_data.url

string

user_sample_data.country

string

user_sample_data.log_date

string

Your GET endpoint for domain stats Get API Key

⌘I

API Reference

​Overview

​Query Parameters

​Response Structure

​Data Fields Explained

​Usage Examples

​Get basic email stats

​Get stats with unmasked emails

​Privacy Considerations

​Access Control

​Data Sensitivity

​Best Practices

​Regular Monitoring

​Integration Tips

​Security Recommendations

Authorizations

Query Parameters

Response

Overview

Query Parameters

Response Structure

Data Fields Explained

Usage Examples

Get basic email stats

Get stats with unmasked emails

Privacy Considerations

Access Control

Data Sensitivity

Best Practices

Regular Monitoring

Integration Tips

Security Recommendations