Get leak statistics for a domain (Public)

Public endpoint - no authentication required. Returns leak statistics for any domain including employee/customer leak counts, geographic distribution, and top compromised services.

GET /v1/leaks/stats/domain

Get leak statistics for a domain (Public)

cURL

curl --request GET \
  --url https://api.projectdiscovery.io/v1/leaks/stats/domain \
  --header 'X-API-Key: <api-key>'

200

{
  "leak_devices_count": [
    {
      "devices": 123
    }
  ],
  "leak_customers_count": [
    {
      "customers": 123
    }
  ],
  "leak_user_count": [
    {
      "user": 123
    }
  ],
  "leak_employees_count": [
    {
      "employees": 123
    }
  ],
  "combolist_exposure": [
    {
      "combolist_exposure": 123
    }
  ],
  "leak_country_stats": [
    {
      "Country": "<string>",
      "CredentialsCount": 123
    }
  ],
  "top_used_urls_by_customers": [
    {
      "count": 123,
      "url": "<string>"
    }
  ],
  "top_used_urls_by_employees": [
    {
      "count": 123,
      "url": "<string>"
    }
  ],
  "top_used_urls_by_user": [
    {
      "count": 123,
      "url": "<string>"
    }
  ],
  "leak_customers_timeline": [
    {
      "CredentialsCount": 123,
      "Month": 123,
      "Year": 123
    }
  ],
  "leak_user_timeline": [
    {
      "CredentialsCount": 123,
      "Month": 123,
      "Year": 123
    }
  ],
  "leak_employees_timeline": [
    {
      "CredentialsCount": 123,
      "Month": 123,
      "Year": 123
    }
  ],
  "customers_sample_data": [
    {
      "password": "<string>",
      "username": "<string>",
      "url": "<string>",
      "country": "<string>",
      "log_date": "<string>"
    }
  ],
  "employees_sample_data": [
    {
      "password": "<string>",
      "username": "<string>",
      "url": "<string>",
      "country": "<string>",
      "log_date": "<string>"
    }
  ],
  "user_sample_data": [
    {
      "password": "<string>",
      "username": "<string>",
      "url": "<string>",
      "country": "<string>",
      "log_date": "<string>"
    }
  ]
}

Overview

Get statistical information about leaks associated with any domain. This is a public endpoint that doesn’t require authentication, making it ideal for quick breach checks and integrations.

Public Endpoint: No authentication required. You can check leak statistics for any domain.

Query Parameters

Parameter	Type	Description
domain	string	Required. The domain to get leak statistics for

Response Structure

The response provides comprehensive statistics about leaks for the specified domain:

{
  "domain": "example.com",
  "total_leaks": 150,
  "employee_leaks": 100,
  "customer_leaks": 50,
  "recent_activity": {
    "last_30_days": 15,
    "last_7_days": 3
  },
  "top_services": [
    {
      "service": "facebook.com",
      "count": 45
    },
    {
      "service": "linkedin.com", 
      "count": 32
    }
  ],
  "geographic_distribution": [
    {
      "country": "United States",
      "count": 89
    },
    {
      "country": "Canada",
      "count": 23
    }
  ]
}

Usage Examples

Check domain breach status

curl -X GET "https://api.projectdiscovery.io/v1/leaks/stats/domain?domain=example.com"

No API key or authentication header is required for this endpoint.

Use Cases

Quick Breach Check

Use this endpoint to quickly check if a domain has any known credential leaks without requiring authentication.

Security Integrations

Integrate with your security tools to monitor domains for new leaks and alert when breach counts increase.

Due Diligence

Check potential partners or vendors for credential exposure as part of your security assessment process.

Best Practices

• Cache results appropriately to avoid excessive API calls
• Use this for summary data; detailed leak information requires authenticated endpoints
• Consider rate limiting when building automated monitoring systems

Authorizations

X-API-Key · string · header · required

Query Parameters

domain · string

unmask_email · boolean

Response

200

application/json

OK

leak_devices_count · DevicesCount · object[]

Show child attributes

leak_customers_count · CustomersCount · object[]

Show child attributes

leak_user_count · UsersCount · object[]

Show child attributes

leak_employees_count · EmployeesCount · object[]

Show child attributes

combolist_exposure · CombolistExposureCount · object[]

Show child attributes

leak_country_stats · LeakCountryStats · object[]

Show child attributes

top_used_urls_by_customers · UsedUrlsCount · object[]

Show child attributes

top_used_urls_by_employees · UsedUrlsCount · object[]

Show child attributes

top_used_urls_by_user · UsedUrlsCount · object[]

Show child attributes

leak_customers_timeline · LeaksTimeline · object[]

Show child attributes

leak_user_timeline · LeaksTimeline · object[]

Show child attributes

leak_employees_timeline · LeaksTimeline · object[]

Show child attributes

customers_sample_data · LeaksUsersSampleData · object[]

Show child attributes

employees_sample_data · LeaksUsersSampleData · object[]

Show child attributes

user_sample_data · LeaksUsersSampleData · object[]

Show child attributes