Get Exposures for All Email Addresses in a Domain

Retrieve a list of all users for a given email domain who have been exposed in breaches

This call is useful if you are interested in pulling all the users for your domain who have had their email address show up in any breach in the Enzoic database. This differs slightly from the "Get Exposures for Domain" variant of the call in that it returns the specific email addresses and which breaches they were exposed in.

Note that you must have approval to pull exposures for a given domain. Contact support for approval if you receive a message that you do not have permissions to pull exposures for a given domain.

---

Lookup exposures for all email addresses in a domain

Returns all credentials exposures that have been found for users in a given email domain.

get

/exposures-for-domain-users

Authorizations

Query parameters

accountDomainstringrequired

The domain to return exposures for (e.g. “enzoic.com”)

Example: corp.co

startDatestring

(Optional) Specifies a start date/time in ISO8601 format (e.g. 2023-06-01T00:00:00Z). If specified, only exposures which occurred after this date will be included in the response.

Example: 2023-06-01

endDatestring

(Optional) Specifies an end date/time in ISO8601 format (e.g. 2023-06-01T00:00:00Z). If specified, only exposures which occurred before this date will be included in the response.

Example: 2023-07-01

pageSizeinteger · default: 1000

(Optional) The number of results to return in a single call. The default page size is 1000 and the maximum is 1000.

Example: 500

pagingTokenstring

(Optional) For each call to the API, if there are additional pages of results available then a pagingToken will be returned. Pass the pagingToken in via this parameter to retrieve the subsequent page of results. Should be left off for the initial call to the API.

Example: 598e5b844eb6d82ea07c5783

Responses

application/json

cURL

JavaScript

Python

HTTP

cURL

curl -L \
  --url 'https://api.enzoic.com/v1/exposures-for-domain-users?accountDomain=text' \
  --header 'Authorization: Basic username:password'

200

404

200

{
  "count": 1,
  "pagingToken": "598e5b844eb6d82ea07c5783",
  "users": [
    {
      "username": "[e-mail]",
      "exposures": [
        "57dc11964d6db21300991b78"
      ]
    }
  ]
}

Exposed users for the domain were found and the requested page is in the response body