Compromised Employee Credential Search

POSThttps://api.deepinfo.com/v1/cti/compromised-employee-credentials/search

Searches leaked employee credentials and their state.

Example

Request

curl

curl -X POST 'https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page_size=25' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{}'

Python

import requests

url = "https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search"

params = {
    "page_size": "25"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
}

payload = {}

response = requests.post(url, params=params, headers=headers, json=payload)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page_size=25";

const response = await fetch(url, {
  method: "POST",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({}),
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
	"strings"
)

func main() {
	payload := strings.NewReader(`{}`)

	req, err := http.NewRequest("POST", "https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page_size=25", payload)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")
	req.Header.Set("Content-Type", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page_size=25"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .header("Content-Type", "application/json")
            .POST(HttpRequest.BodyPublishers.ofString("{}"))
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;
using System.Text;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Post, "https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page_size=25");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");
request.Content = new StringContent("{}", Encoding.UTF8, "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page_size=25',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => '{}',
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page_size=25')

request = Net::HTTP::Post.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'
request['Content-Type'] = 'application/json'
request.body = '{}'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

200 OK · application/json

Response Body

{
  "page": 1,
  "page_size": 25,
  "result_count": 21,
  "results": [
    {
      "id": "000000000000000e37e30001",
      "url": "https://www.fernhill.example/",
      "state": "unresolved",
      "account": {
        "id": "000000000000000ec9430001",
        "email": "user@acme.example",
        "domain": "acme.example",
        "is_executive": false,
        "first_name": null,
        "last_name": null,
        "title": null,
        "linkedin_url": null,
        "department": null
      },
      "added_at": "2025-06-01T08:00:00Z",
      "password": "********",
      "password_analysis": {
        "strength": {
          "level": 0,
          "score": 25,
          "label": "Very Weak",
          "entropy_bits": 20.5
        },
        "composition": {
          "length": 8,
          "structure": "********",
          "character_classes_used": 3,
          "contains_uppercase": true,
          "contains_lowercase": true,
          "contains_number": true,
          "contains_special": false,
          "starts_with_uppercase": false,
          "ends_with_numbers": false,
          "ends_with_special": false
        },
        "patterns": {
          "has_keyboard_pattern": false,
          "has_date_pattern": false,
          "has_leet_speak": false,
          "has_sequential_chars": false,
          "has_repeated_chars": false
        },
        "dictionary_match": {
          "is_common_password": false,
          "common_password_rank": null,
          "is_dictionary_word": false,
          "dictionary_word_found": null
        }
      },
      "target": {
        "url": "https://www.fernhill.example/",
        "url_raw": "https://www.fernhill.example/",
        "fqdn": "www.fernhill.example",
        "domain": "fernhill.example",
        "service": "Webmail",
        "platform": "Web",
        "main_category": null,
        "sub_category": null,
        "risk_tier": null,
        "is_corporate": false,
        "requires_mfa_by_default": null
      }
    },
    {
      "id": "000000000000000e37e30002",
      "url": "http://app.kestrel.example/",
      "state": "unresolved",
      "account": {
        "id": "000000000000000ec9430002",
        "email": "user@fernhill.example",
        "domain": "fernhill.example",
        "is_executive": false,
        "first_name": null,
        "last_name": null,
        "title": null,
        "linkedin_url": null,
        "department": null
      },
      "added_at": "2025-05-25T08:00:00Z",
      "password": "********",
      "password_analysis": {
        "strength": {
          "level": 1,
          "score": 45,
          "label": "Weak",
          "entropy_bits": 35.5
        },
        "composition": {
          "length": 8,
          "structure": "********",
          "character_classes_used": 3,
          "contains_uppercase": true,
          "contains_lowercase": true,
          "contains_number": true,
          "contains_special": false,
          "starts_with_uppercase": false,
          "ends_with_numbers": false,
          "ends_with_special": false
        },
        "patterns": {
          "has_keyboard_pattern": false,
          "has_date_pattern": false,
          "has_leet_speak": false,
          "has_sequential_chars": false,
          "has_repeated_chars": false
        },
        "dictionary_match": {
          "is_common_password": false,
          "common_password_rank": null,
          "is_dictionary_word": false,
          "dictionary_word_found": null
        }
      },
      "target": {
        "url": "http://app.kestrel.example/",
        "url_raw": "http://app.kestrel.example/",
        "fqdn": "app.kestrel.example",
        "domain": "kestrel.example",
        "service": "VPN",
        "platform": "Android",
        "main_category": "Email",
        "sub_category": "Email",
        "risk_tier": "LOW",
        "is_corporate": false,
        "requires_mfa_by_default": true
      }
    }
  ]
}

Content-Type: application/json
deepinfo-request-id: 00000000-0000-4000-8000-0000356d0001

Request

curl

curl -X POST 'https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page=0' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{}'

Python

import requests

url = "https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search"

params = {
    "page": "0"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
}

payload = {}

response = requests.post(url, params=params, headers=headers, json=payload)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page=0";

const response = await fetch(url, {
  method: "POST",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({}),
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
	"strings"
)

func main() {
	payload := strings.NewReader(`{}`)

	req, err := http.NewRequest("POST", "https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page=0", payload)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")
	req.Header.Set("Content-Type", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page=0"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .header("Content-Type", "application/json")
            .POST(HttpRequest.BodyPublishers.ofString("{}"))
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;
using System.Text;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Post, "https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page=0");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");
request.Content = new StringContent("{}", Encoding.UTF8, "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page=0',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => '{}',
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page=0')

request = Net::HTTP::Post.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'
request['Content-Type'] = 'application/json'
request.body = '{}'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

400 Bad Request · application/json

Response Body

{
  "code": 10400,
  "parameters": [
    {
      "param": "page",
      "details": [
        "Ensure this value is greater than or equal to 1."
      ]
    }
  ],
  "solution": "https://docs.deepinfo.com/reference/"
}

Content-Type: application/json
deepinfo-request-id: 00000000-0000-4000-8000-0000356d0001

Request

curl

curl -X POST 'https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page_size=25' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{
  "filters": {
    "must": [
      {
        "name": "url",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.id",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.email",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.domain",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.first_name",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.last_name",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.department",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.title",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.linkedin_url",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "password",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "password_analysis.strength.label",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "password_analysis.composition.structure",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "password_analysis.dictionary_match.dictionary_word_found",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.url",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.url_raw",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.fqdn",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.domain",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.service",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.platform",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.main_category",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.sub_category",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.risk_tier",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.is_executive",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.contains_uppercase",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.contains_lowercase",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.contains_number",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.contains_special",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.starts_with_uppercase",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.ends_with_numbers",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.ends_with_special",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.patterns.has_keyboard_pattern",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.patterns.has_date_pattern",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.patterns.has_leet_speak",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.patterns.has_sequential_chars",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.patterns.has_repeated_chars",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.dictionary_match.is_common_password",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.dictionary_match.is_dictionary_word",
        "type": "eq",
        "value": true
      },
      {
        "name": "target.is_corporate",
        "type": "eq",
        "value": true
      },
      {
        "name": "target.requires_mfa_by_default",
        "type": "eq",
        "value": true
      },
      {
        "name": "added_at",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "password_analysis.strength.level",
        "type": "eq",
        "value": 0
      },
      {
        "name": "password_analysis.strength.score",
        "type": "eq",
        "value": 0
      },
      {
        "name": "password_analysis.strength.entropy_bits",
        "type": "eq",
        "value": 0
      },
      {
        "name": "password_analysis.composition.length",
        "type": "eq",
        "value": 0
      },
      {
        "name": "password_analysis.composition.character_classes_used",
        "type": "eq",
        "value": 0
      },
      {
        "name": "password_analysis.dictionary_match.common_password_rank",
        "type": "eq",
        "value": 0
      },
      {
        "name": "id",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "state",
        "type": "eq",
        "value": "<value>"
      }
    ]
  },
  "sort": [
    {
      "field": "id",
      "order": "desc"
    }
  ]
}'

Python

import requests

url = "https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search"

params = {
    "page_size": "25"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
}

payload = {
    "filters": {
        "must": [
            {
                "name": "url",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "account.id",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "account.email",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "account.domain",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "account.first_name",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "account.last_name",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "account.department",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "account.title",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "account.linkedin_url",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "password",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "password_analysis.strength.label",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "password_analysis.composition.structure",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "password_analysis.dictionary_match.dictionary_word_found",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "target.url",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "target.url_raw",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "target.fqdn",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "target.domain",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "target.service",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "target.platform",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "target.main_category",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "target.sub_category",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "target.risk_tier",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "account.is_executive",
                "type": "eq",
                "value": True
            },
            {
                "name": "password_analysis.composition.contains_uppercase",
                "type": "eq",
                "value": True
            },
            {
                "name": "password_analysis.composition.contains_lowercase",
                "type": "eq",
                "value": True
            },
            {
                "name": "password_analysis.composition.contains_number",
                "type": "eq",
                "value": True
            },
            {
                "name": "password_analysis.composition.contains_special",
                "type": "eq",
                "value": True
            },
            {
                "name": "password_analysis.composition.starts_with_uppercase",
                "type": "eq",
                "value": True
            },
            {
                "name": "password_analysis.composition.ends_with_numbers",
                "type": "eq",
                "value": True
            },
            {
                "name": "password_analysis.composition.ends_with_special",
                "type": "eq",
                "value": True
            },
            {
                "name": "password_analysis.patterns.has_keyboard_pattern",
                "type": "eq",
                "value": True
            },
            {
                "name": "password_analysis.patterns.has_date_pattern",
                "type": "eq",
                "value": True
            },
            {
                "name": "password_analysis.patterns.has_leet_speak",
                "type": "eq",
                "value": True
            },
            {
                "name": "password_analysis.patterns.has_sequential_chars",
                "type": "eq",
                "value": True
            },
            {
                "name": "password_analysis.patterns.has_repeated_chars",
                "type": "eq",
                "value": True
            },
            {
                "name": "password_analysis.dictionary_match.is_common_password",
                "type": "eq",
                "value": True
            },
            {
                "name": "password_analysis.dictionary_match.is_dictionary_word",
                "type": "eq",
                "value": True
            },
            {
                "name": "target.is_corporate",
                "type": "eq",
                "value": True
            },
            {
                "name": "target.requires_mfa_by_default",
                "type": "eq",
                "value": True
            },
            {
                "name": "added_at",
                "type": "eq",
                "value": "<date-time>"
            },
            {
                "name": "password_analysis.strength.level",
                "type": "eq",
                "value": 0
            },
            {
                "name": "password_analysis.strength.score",
                "type": "eq",
                "value": 0
            },
            {
                "name": "password_analysis.strength.entropy_bits",
                "type": "eq",
                "value": 0
            },
            {
                "name": "password_analysis.composition.length",
                "type": "eq",
                "value": 0
            },
            {
                "name": "password_analysis.composition.character_classes_used",
                "type": "eq",
                "value": 0
            },
            {
                "name": "password_analysis.dictionary_match.common_password_rank",
                "type": "eq",
                "value": 0
            },
            {
                "name": "id",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "state",
                "type": "eq",
                "value": "<value>"
            }
        ]
    },
    "sort": [
        {
            "field": "id",
            "order": "desc"
        }
    ]
}

response = requests.post(url, params=params, headers=headers, json=payload)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page_size=25";

const response = await fetch(url, {
  method: "POST",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    filters: {
      must: [
        {
          name: "url",
          type: "eq",
          value: "<value>"
        },
        {
          name: "account.id",
          type: "eq",
          value: "<value>"
        },
        {
          name: "account.email",
          type: "eq",
          value: "<value>"
        },
        {
          name: "account.domain",
          type: "eq",
          value: "<value>"
        },
        {
          name: "account.first_name",
          type: "eq",
          value: "<value>"
        },
        {
          name: "account.last_name",
          type: "eq",
          value: "<value>"
        },
        {
          name: "account.department",
          type: "eq",
          value: "<value>"
        },
        {
          name: "account.title",
          type: "eq",
          value: "<value>"
        },
        {
          name: "account.linkedin_url",
          type: "eq",
          value: "<value>"
        },
        {
          name: "password",
          type: "eq",
          value: "<value>"
        },
        {
          name: "password_analysis.strength.label",
          type: "eq",
          value: "<value>"
        },
        {
          name: "password_analysis.composition.structure",
          type: "eq",
          value: "<value>"
        },
        {
          name: "password_analysis.dictionary_match.dictionary_word_found",
          type: "eq",
          value: "<value>"
        },
        {
          name: "target.url",
          type: "eq",
          value: "<value>"
        },
        {
          name: "target.url_raw",
          type: "eq",
          value: "<value>"
        },
        {
          name: "target.fqdn",
          type: "eq",
          value: "<value>"
        },
        {
          name: "target.domain",
          type: "eq",
          value: "<value>"
        },
        {
          name: "target.service",
          type: "eq",
          value: "<value>"
        },
        {
          name: "target.platform",
          type: "eq",
          value: "<value>"
        },
        {
          name: "target.main_category",
          type: "eq",
          value: "<value>"
        },
        {
          name: "target.sub_category",
          type: "eq",
          value: "<value>"
        },
        {
          name: "target.risk_tier",
          type: "eq",
          value: "<value>"
        },
        {
          name: "account.is_executive",
          type: "eq",
          value: true
        },
        {
          name: "password_analysis.composition.contains_uppercase",
          type: "eq",
          value: true
        },
        {
          name: "password_analysis.composition.contains_lowercase",
          type: "eq",
          value: true
        },
        {
          name: "password_analysis.composition.contains_number",
          type: "eq",
          value: true
        },
        {
          name: "password_analysis.composition.contains_special",
          type: "eq",
          value: true
        },
        {
          name: "password_analysis.composition.starts_with_uppercase",
          type: "eq",
          value: true
        },
        {
          name: "password_analysis.composition.ends_with_numbers",
          type: "eq",
          value: true
        },
        {
          name: "password_analysis.composition.ends_with_special",
          type: "eq",
          value: true
        },
        {
          name: "password_analysis.patterns.has_keyboard_pattern",
          type: "eq",
          value: true
        },
        {
          name: "password_analysis.patterns.has_date_pattern",
          type: "eq",
          value: true
        },
        {
          name: "password_analysis.patterns.has_leet_speak",
          type: "eq",
          value: true
        },
        {
          name: "password_analysis.patterns.has_sequential_chars",
          type: "eq",
          value: true
        },
        {
          name: "password_analysis.patterns.has_repeated_chars",
          type: "eq",
          value: true
        },
        {
          name: "password_analysis.dictionary_match.is_common_password",
          type: "eq",
          value: true
        },
        {
          name: "password_analysis.dictionary_match.is_dictionary_word",
          type: "eq",
          value: true
        },
        {
          name: "target.is_corporate",
          type: "eq",
          value: true
        },
        {
          name: "target.requires_mfa_by_default",
          type: "eq",
          value: true
        },
        {
          name: "added_at",
          type: "eq",
          value: "<date-time>"
        },
        {
          name: "password_analysis.strength.level",
          type: "eq",
          value: 0
        },
        {
          name: "password_analysis.strength.score",
          type: "eq",
          value: 0
        },
        {
          name: "password_analysis.strength.entropy_bits",
          type: "eq",
          value: 0
        },
        {
          name: "password_analysis.composition.length",
          type: "eq",
          value: 0
        },
        {
          name: "password_analysis.composition.character_classes_used",
          type: "eq",
          value: 0
        },
        {
          name: "password_analysis.dictionary_match.common_password_rank",
          type: "eq",
          value: 0
        },
        {
          name: "id",
          type: "eq",
          value: "<value>"
        },
        {
          name: "state",
          type: "eq",
          value: "<value>"
        }
      ]
    },
    sort: [
      {
        field: "id",
        order: "desc"
      }
    ]
  }),
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
	"strings"
)

func main() {
	payload := strings.NewReader(`{
  "filters": {
    "must": [
      {
        "name": "url",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.id",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.email",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.domain",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.first_name",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.last_name",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.department",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.title",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.linkedin_url",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "password",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "password_analysis.strength.label",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "password_analysis.composition.structure",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "password_analysis.dictionary_match.dictionary_word_found",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.url",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.url_raw",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.fqdn",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.domain",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.service",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.platform",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.main_category",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.sub_category",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.risk_tier",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.is_executive",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.contains_uppercase",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.contains_lowercase",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.contains_number",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.contains_special",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.starts_with_uppercase",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.ends_with_numbers",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.ends_with_special",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.patterns.has_keyboard_pattern",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.patterns.has_date_pattern",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.patterns.has_leet_speak",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.patterns.has_sequential_chars",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.patterns.has_repeated_chars",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.dictionary_match.is_common_password",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.dictionary_match.is_dictionary_word",
        "type": "eq",
        "value": true
      },
      {
        "name": "target.is_corporate",
        "type": "eq",
        "value": true
      },
      {
        "name": "target.requires_mfa_by_default",
        "type": "eq",
        "value": true
      },
      {
        "name": "added_at",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "password_analysis.strength.level",
        "type": "eq",
        "value": 0
      },
      {
        "name": "password_analysis.strength.score",
        "type": "eq",
        "value": 0
      },
      {
        "name": "password_analysis.strength.entropy_bits",
        "type": "eq",
        "value": 0
      },
      {
        "name": "password_analysis.composition.length",
        "type": "eq",
        "value": 0
      },
      {
        "name": "password_analysis.composition.character_classes_used",
        "type": "eq",
        "value": 0
      },
      {
        "name": "password_analysis.dictionary_match.common_password_rank",
        "type": "eq",
        "value": 0
      },
      {
        "name": "id",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "state",
        "type": "eq",
        "value": "<value>"
      }
    ]
  },
  "sort": [
    {
      "field": "id",
      "order": "desc"
    }
  ]
}`)

	req, err := http.NewRequest("POST", "https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page_size=25", payload)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")
	req.Header.Set("Content-Type", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        String body = """
            {
              "filters": {
                "must": [
                  {
                    "name": "url",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "account.id",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "account.email",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "account.domain",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "account.first_name",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "account.last_name",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "account.department",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "account.title",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "account.linkedin_url",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "password",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "password_analysis.strength.label",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "password_analysis.composition.structure",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "password_analysis.dictionary_match.dictionary_word_found",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "target.url",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "target.url_raw",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "target.fqdn",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "target.domain",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "target.service",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "target.platform",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "target.main_category",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "target.sub_category",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "target.risk_tier",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "account.is_executive",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "password_analysis.composition.contains_uppercase",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "password_analysis.composition.contains_lowercase",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "password_analysis.composition.contains_number",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "password_analysis.composition.contains_special",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "password_analysis.composition.starts_with_uppercase",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "password_analysis.composition.ends_with_numbers",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "password_analysis.composition.ends_with_special",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "password_analysis.patterns.has_keyboard_pattern",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "password_analysis.patterns.has_date_pattern",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "password_analysis.patterns.has_leet_speak",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "password_analysis.patterns.has_sequential_chars",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "password_analysis.patterns.has_repeated_chars",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "password_analysis.dictionary_match.is_common_password",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "password_analysis.dictionary_match.is_dictionary_word",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "target.is_corporate",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "target.requires_mfa_by_default",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "added_at",
                    "type": "eq",
                    "value": "<date-time>"
                  },
                  {
                    "name": "password_analysis.strength.level",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "password_analysis.strength.score",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "password_analysis.strength.entropy_bits",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "password_analysis.composition.length",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "password_analysis.composition.character_classes_used",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "password_analysis.dictionary_match.common_password_rank",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "id",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "state",
                    "type": "eq",
                    "value": "<value>"
                  }
                ]
              },
              "sort": [
                {
                  "field": "id",
                  "order": "desc"
                }
              ]
            }""";

        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page_size=25"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .header("Content-Type", "application/json")
            .POST(HttpRequest.BodyPublishers.ofString(body))
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;
using System.Text;

using var client = new HttpClient();

var body = """
    {
      "filters": {
        "must": [
          {
            "name": "url",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "account.id",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "account.email",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "account.domain",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "account.first_name",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "account.last_name",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "account.department",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "account.title",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "account.linkedin_url",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "password",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "password_analysis.strength.label",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "password_analysis.composition.structure",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "password_analysis.dictionary_match.dictionary_word_found",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "target.url",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "target.url_raw",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "target.fqdn",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "target.domain",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "target.service",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "target.platform",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "target.main_category",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "target.sub_category",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "target.risk_tier",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "account.is_executive",
            "type": "eq",
            "value": true
          },
          {
            "name": "password_analysis.composition.contains_uppercase",
            "type": "eq",
            "value": true
          },
          {
            "name": "password_analysis.composition.contains_lowercase",
            "type": "eq",
            "value": true
          },
          {
            "name": "password_analysis.composition.contains_number",
            "type": "eq",
            "value": true
          },
          {
            "name": "password_analysis.composition.contains_special",
            "type": "eq",
            "value": true
          },
          {
            "name": "password_analysis.composition.starts_with_uppercase",
            "type": "eq",
            "value": true
          },
          {
            "name": "password_analysis.composition.ends_with_numbers",
            "type": "eq",
            "value": true
          },
          {
            "name": "password_analysis.composition.ends_with_special",
            "type": "eq",
            "value": true
          },
          {
            "name": "password_analysis.patterns.has_keyboard_pattern",
            "type": "eq",
            "value": true
          },
          {
            "name": "password_analysis.patterns.has_date_pattern",
            "type": "eq",
            "value": true
          },
          {
            "name": "password_analysis.patterns.has_leet_speak",
            "type": "eq",
            "value": true
          },
          {
            "name": "password_analysis.patterns.has_sequential_chars",
            "type": "eq",
            "value": true
          },
          {
            "name": "password_analysis.patterns.has_repeated_chars",
            "type": "eq",
            "value": true
          },
          {
            "name": "password_analysis.dictionary_match.is_common_password",
            "type": "eq",
            "value": true
          },
          {
            "name": "password_analysis.dictionary_match.is_dictionary_word",
            "type": "eq",
            "value": true
          },
          {
            "name": "target.is_corporate",
            "type": "eq",
            "value": true
          },
          {
            "name": "target.requires_mfa_by_default",
            "type": "eq",
            "value": true
          },
          {
            "name": "added_at",
            "type": "eq",
            "value": "<date-time>"
          },
          {
            "name": "password_analysis.strength.level",
            "type": "eq",
            "value": 0
          },
          {
            "name": "password_analysis.strength.score",
            "type": "eq",
            "value": 0
          },
          {
            "name": "password_analysis.strength.entropy_bits",
            "type": "eq",
            "value": 0
          },
          {
            "name": "password_analysis.composition.length",
            "type": "eq",
            "value": 0
          },
          {
            "name": "password_analysis.composition.character_classes_used",
            "type": "eq",
            "value": 0
          },
          {
            "name": "password_analysis.dictionary_match.common_password_rank",
            "type": "eq",
            "value": 0
          },
          {
            "name": "id",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "state",
            "type": "eq",
            "value": "<value>"
          }
        ]
      },
      "sort": [
        {
          "field": "id",
          "order": "desc"
        }
      ]
    }
    """;

var request = new HttpRequestMessage(HttpMethod.Post, "https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page_size=25");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");
request.Content = new StringContent(body, Encoding.UTF8, "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$body = <<<'JSON'
{
  "filters": {
    "must": [
      {
        "name": "url",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.id",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.email",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.domain",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.first_name",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.last_name",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.department",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.title",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.linkedin_url",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "password",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "password_analysis.strength.label",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "password_analysis.composition.structure",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "password_analysis.dictionary_match.dictionary_word_found",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.url",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.url_raw",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.fqdn",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.domain",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.service",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.platform",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.main_category",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.sub_category",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "target.risk_tier",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "account.is_executive",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.contains_uppercase",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.contains_lowercase",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.contains_number",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.contains_special",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.starts_with_uppercase",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.ends_with_numbers",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.composition.ends_with_special",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.patterns.has_keyboard_pattern",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.patterns.has_date_pattern",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.patterns.has_leet_speak",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.patterns.has_sequential_chars",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.patterns.has_repeated_chars",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.dictionary_match.is_common_password",
        "type": "eq",
        "value": true
      },
      {
        "name": "password_analysis.dictionary_match.is_dictionary_word",
        "type": "eq",
        "value": true
      },
      {
        "name": "target.is_corporate",
        "type": "eq",
        "value": true
      },
      {
        "name": "target.requires_mfa_by_default",
        "type": "eq",
        "value": true
      },
      {
        "name": "added_at",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "password_analysis.strength.level",
        "type": "eq",
        "value": 0
      },
      {
        "name": "password_analysis.strength.score",
        "type": "eq",
        "value": 0
      },
      {
        "name": "password_analysis.strength.entropy_bits",
        "type": "eq",
        "value": 0
      },
      {
        "name": "password_analysis.composition.length",
        "type": "eq",
        "value": 0
      },
      {
        "name": "password_analysis.composition.character_classes_used",
        "type": "eq",
        "value": 0
      },
      {
        "name": "password_analysis.dictionary_match.common_password_rank",
        "type": "eq",
        "value": 0
      },
      {
        "name": "id",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "state",
        "type": "eq",
        "value": "<value>"
      }
    ]
  },
  "sort": [
    {
      "field": "id",
      "order": "desc"
    }
  ]
}
JSON;

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page_size=25',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => $body,
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/cti/compromised-employee-credentials/search?page_size=25')

request = Net::HTTP::Post.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'
request['Content-Type'] = 'application/json'
request.body = <<~'JSON'.chomp
  {
    "filters": {
      "must": [
        {
          "name": "url",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "account.id",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "account.email",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "account.domain",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "account.first_name",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "account.last_name",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "account.department",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "account.title",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "account.linkedin_url",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "password",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "password_analysis.strength.label",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "password_analysis.composition.structure",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "password_analysis.dictionary_match.dictionary_word_found",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "target.url",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "target.url_raw",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "target.fqdn",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "target.domain",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "target.service",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "target.platform",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "target.main_category",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "target.sub_category",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "target.risk_tier",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "account.is_executive",
          "type": "eq",
          "value": true
        },
        {
          "name": "password_analysis.composition.contains_uppercase",
          "type": "eq",
          "value": true
        },
        {
          "name": "password_analysis.composition.contains_lowercase",
          "type": "eq",
          "value": true
        },
        {
          "name": "password_analysis.composition.contains_number",
          "type": "eq",
          "value": true
        },
        {
          "name": "password_analysis.composition.contains_special",
          "type": "eq",
          "value": true
        },
        {
          "name": "password_analysis.composition.starts_with_uppercase",
          "type": "eq",
          "value": true
        },
        {
          "name": "password_analysis.composition.ends_with_numbers",
          "type": "eq",
          "value": true
        },
        {
          "name": "password_analysis.composition.ends_with_special",
          "type": "eq",
          "value": true
        },
        {
          "name": "password_analysis.patterns.has_keyboard_pattern",
          "type": "eq",
          "value": true
        },
        {
          "name": "password_analysis.patterns.has_date_pattern",
          "type": "eq",
          "value": true
        },
        {
          "name": "password_analysis.patterns.has_leet_speak",
          "type": "eq",
          "value": true
        },
        {
          "name": "password_analysis.patterns.has_sequential_chars",
          "type": "eq",
          "value": true
        },
        {
          "name": "password_analysis.patterns.has_repeated_chars",
          "type": "eq",
          "value": true
        },
        {
          "name": "password_analysis.dictionary_match.is_common_password",
          "type": "eq",
          "value": true
        },
        {
          "name": "password_analysis.dictionary_match.is_dictionary_word",
          "type": "eq",
          "value": true
        },
        {
          "name": "target.is_corporate",
          "type": "eq",
          "value": true
        },
        {
          "name": "target.requires_mfa_by_default",
          "type": "eq",
          "value": true
        },
        {
          "name": "added_at",
          "type": "eq",
          "value": "<date-time>"
        },
        {
          "name": "password_analysis.strength.level",
          "type": "eq",
          "value": 0
        },
        {
          "name": "password_analysis.strength.score",
          "type": "eq",
          "value": 0
        },
        {
          "name": "password_analysis.strength.entropy_bits",
          "type": "eq",
          "value": 0
        },
        {
          "name": "password_analysis.composition.length",
          "type": "eq",
          "value": 0
        },
        {
          "name": "password_analysis.composition.character_classes_used",
          "type": "eq",
          "value": 0
        },
        {
          "name": "password_analysis.dictionary_match.common_password_rank",
          "type": "eq",
          "value": 0
        },
        {
          "name": "id",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "state",
          "type": "eq",
          "value": "<value>"
        }
      ]
    },
    "sort": [
      {
        "field": "id",
        "order": "desc"
      }
    ]
  }
JSON

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

This request template has no response: keep the filters you need, set their values and send it.

Authentication

Send your API key in the apikey request header.

Query Parameters

Parameter	Required	Description
`page_size`	Optional	Min `25`, max `100`. Default `100`. Example`25`
`page`	Optional	Min `1`, max `800`. Default `1`. Example`1`

Request Body

Parameter	Type	Required	Description
`filters`	object	Optional	See Filtering below
`sort`	array	Optional	List of `{field, order}`

application/json

{}

Filtering

Example body:

JSON

{
  "filters": {
    "must": [
      {
        "name": "state",
        "type": "eq",
        "value": "<value>"
      }
    ]
  },
  "sort": [
    {
      "field": "id",
      "order": "desc"
    }
  ]
}

See Getting Started → Search & Filters for the operators.

The Request Template example holds this body with every filter of this endpoint, one entry per field, each with an operator the field accepts and a placeholder value. Copy it, keep the filters you need and set their values.

Searchable Fields

Grouped by the operators they accept (measured against the API; sending another operator returns 400).

Operators eq in startswith endswith wildcard fuzzy contains_any contains_all exists

Field	Description
`url`	The address of the site or app the leaked login was used on; the SEARCH box of EXPOSED CREDENTIALS matches it. In the samples it is the same as `target.url`.
`account.id`	The ID of the employee account the credential belongs to, the `id` returned by Compromised Employee Account Search.
`account.email`	The e-mail address of the employee account the credential belongs to (ACCOUNT column).
`account.domain`	The domain of the employee's e-mail address, one of your organization's domains.
`account.first_name`	The first name of the employee the credential belongs to, when known.
`account.last_name`	The last name of the employee the credential belongs to, when known.
`account.department`	The department of the employee the credential belongs to, when known.
`account.title`	The job title of the employee the credential belongs to, when known.
`account.linkedin_url`	The address of the LinkedIn profile of the employee the credential belongs to, when known.
`password`	The leaked password in plain text. The platform masks it on screen, but API responses include it, so protect them.
`password_analysis.strength.label`	The password's strength rating: `Very Weak`, `Weak`, `Medium`, `Strong` or `Very Strong`, shown with a bar in the STRENGTH column.
`password_analysis.composition.structure`	The shape of the password, one letter per character: `U` uppercase, `l` lowercase, `n` digit, `s` special character (STRUCTURE). It shows the password's shape while the password is masked, so treat it as sensitive.
`password_analysis.dictionary_match.dictionary_word_found`	The dictionary word found inside the password (DICT WORD), also when the password holds more than that word; empty when none is found. It reveals part of the password.
`target.url`	The address of the site or app the credential belongs to (Target URL). For an Android app (`target.platform` `ANDROID`) it is an `android://` app address instead of a web address.
`target.url_raw`	The raw form of the target URL, shown as URL RAW on the credential's TARGET tab; in the samples it is always the same as `target.url`.
`target.fqdn`	The host name of the target, such as `login.acme.example` (FQDN). For an Android app it is the app's package name in reverse order.
`target.domain`	The registered domain of the target, such as `acme.example` for `login.acme.example` (DOMAIN).
`target.service`	The name of the site or service the credential belongs to (SERVICE), shown first in the SOURCE/SERVICE column of the list.
`target.platform`	Where the credential was used: `WEB` for a website or `ANDROID` for an Android app (values seen), shown as the platform tag next to the host.
`target.main_category`	The category of the target service, such as `Social Media`, `Identity & Access` or `E-Commerce & Retail` (MAIN CATEGORY). Empty for a service without a category.
`target.sub_category`	A narrower category of the target service within `target.main_category`, such as `Email Provider` or `SSO / Identity Provider` (SUB CATEGORY). Empty for a service without a category.
`target.risk_tier`	The risk tier of the target service: `CRITICAL`, `HIGH`, `MEDIUM` or `LOW` (RISK TIER). Empty for a service without a category.

Operators eq exists

Field	Description
`account.is_executive`	Whether the employee the credential belongs to is marked as an executive.
`password_analysis.composition.contains_uppercase`	Whether the password contains an uppercase letter (A–Z).
`password_analysis.composition.contains_lowercase`	Whether the password contains a lowercase letter (a–z).
`password_analysis.composition.contains_number`	Whether the password contains a digit (0–9).
`password_analysis.composition.contains_special`	Whether the password contains a special character, such as `!`, `@` or `#`.
`password_analysis.composition.starts_with_uppercase`	Whether the password starts with an uppercase letter (START WITH UPPERCASE).
`password_analysis.composition.ends_with_numbers`	Whether the password ends with a digit (END WITH NUMBERS).
`password_analysis.composition.ends_with_special`	Whether the password ends with a special character (END WITH SPECIAL CHARACTER).
`password_analysis.patterns.has_keyboard_pattern`	Whether the password contains a keyboard pattern (KEYBOARD PATTERN).
`password_analysis.patterns.has_date_pattern`	Whether the password contains a date pattern (DATE PATTERN).
`password_analysis.patterns.has_leet_speak`	Whether the password uses leet speak, letters written as look-alike digits or symbols (LEET SPEAK).
`password_analysis.patterns.has_sequential_chars`	Whether the password contains sequential characters (SEQUENTIAL CHARACTER).
`password_analysis.patterns.has_repeated_chars`	Whether the password contains repeated characters (REPEATED CHARACTER).
`password_analysis.dictionary_match.is_common_password`	Whether the password is a known common password (COMMON PASSWORD).
`password_analysis.dictionary_match.is_dictionary_word`	Whether the whole password, ignoring letter case, is a dictionary word.
`target.is_corporate`	Whether the target is a corporate service (CORPORATE); such credentials show a corporate-building icon in the list.
`target.requires_mfa_by_default`	Whether the target service enforces multi-factor authentication by default, shown as MFA BY DEFAULT: ENFORCED or NOT ENFORCED. Empty for a service without a category.

Operators eq in gte lte exists

Field	Description
`added_at`	When the credential was added to Deepinfo's data, shown as ADDED DATE (UTC date-time).
`password_analysis.strength.level`	The password's strength level from 0 to 4: `0` Very Weak, `1` Weak, `2` Medium, `3` Strong, `4` Very Strong, matching `password_analysis.strength.label`.
`password_analysis.strength.score`	The password's strength score from 0 to 100; a higher score means a stronger password (STRENGTH).
`password_analysis.strength.entropy_bits`	An estimate of how hard the password is to guess, in bits of entropy (ENTROPY); a higher value means harder to guess.
`password_analysis.composition.length`	The number of characters in the password (LENGTH).
`password_analysis.composition.character_classes_used`	How many of the four character types (uppercase letters, lowercase letters, digits, special characters) the password uses, from 1 to 4 (CHARACTER CLASSES).
`password_analysis.dictionary_match.common_password_rank`	The password's rank in the list of common passwords, where a lower number means a more common password; set only when `is_common_password` is `true`.

Operators eq in

Field	Description
`id`	The exposed credential's unique ID, a 24-character hex string.

Operators eq in exists

Field	Description
`state`	The credential's state: `newly_detected` or `unresolved` while active; once inactive, `not_applicable` or `verified_resolved` (set by the platform) or `ignored`, `risk_accepted`, `marked_as_resolved` or `marked_as_false_positive` (set by you).

Sortable Fields

Field	Description
`id`	The exposed credential's unique ID, a 24-character hex string.
`url`	The address of the site or app the leaked login was used on; the SEARCH box of EXPOSED CREDENTIALS matches it. In the samples it is the same as `target.url`.
`account.id`	The ID of the employee account the credential belongs to, the `id` returned by Compromised Employee Account Search.
`account.email`	The e-mail address of the employee account the credential belongs to (ACCOUNT column).
`account.domain`	The domain of the employee's e-mail address, one of your organization's domains.
`account.is_executive`	Whether the employee the credential belongs to is marked as an executive.
`account.first_name`	The first name of the employee the credential belongs to, when known.
`account.last_name`	The last name of the employee the credential belongs to, when known.
`account.title`	The job title of the employee the credential belongs to, when known.
`account.linkedin_url`	The address of the LinkedIn profile of the employee the credential belongs to, when known.
`account.department`	The department of the employee the credential belongs to, when known.
`added_at`	When the credential was added to Deepinfo's data, shown as ADDED DATE (UTC date-time).
`password`	The leaked password in plain text. The platform masks it on screen, but API responses include it, so protect them.
`password_analysis.strength.level`	The password's strength level from 0 to 4: `0` Very Weak, `1` Weak, `2` Medium, `3` Strong, `4` Very Strong, matching `password_analysis.strength.label`.
`password_analysis.strength.score`	The password's strength score from 0 to 100; a higher score means a stronger password (STRENGTH).
`password_analysis.strength.label`	The password's strength rating: `Very Weak`, `Weak`, `Medium`, `Strong` or `Very Strong`, shown with a bar in the STRENGTH column.
`password_analysis.strength.entropy_bits`	An estimate of how hard the password is to guess, in bits of entropy (ENTROPY); a higher value means harder to guess.
`password_analysis.composition.length`	The number of characters in the password (LENGTH).
`password_analysis.composition.structure`	The shape of the password, one letter per character: `U` uppercase, `l` lowercase, `n` digit, `s` special character (STRUCTURE). It shows the password's shape while the password is masked, so treat it as sensitive.
`password_analysis.composition.character_classes_used`	How many of the four character types (uppercase letters, lowercase letters, digits, special characters) the password uses, from 1 to 4 (CHARACTER CLASSES).
`password_analysis.composition.contains_uppercase`	Whether the password contains an uppercase letter (A–Z).
`password_analysis.composition.contains_lowercase`	Whether the password contains a lowercase letter (a–z).
`password_analysis.composition.contains_number`	Whether the password contains a digit (0–9).
`password_analysis.composition.contains_special`	Whether the password contains a special character, such as `!`, `@` or `#`.
`password_analysis.composition.starts_with_uppercase`	Whether the password starts with an uppercase letter (START WITH UPPERCASE).
`password_analysis.composition.ends_with_numbers`	Whether the password ends with a digit (END WITH NUMBERS).
`password_analysis.composition.ends_with_special`	Whether the password ends with a special character (END WITH SPECIAL CHARACTER).
`password_analysis.patterns.has_keyboard_pattern`	Whether the password contains a keyboard pattern (KEYBOARD PATTERN).
`password_analysis.patterns.has_date_pattern`	Whether the password contains a date pattern (DATE PATTERN).
`password_analysis.patterns.has_leet_speak`	Whether the password uses leet speak, letters written as look-alike digits or symbols (LEET SPEAK).
`password_analysis.patterns.has_sequential_chars`	Whether the password contains sequential characters (SEQUENTIAL CHARACTER).
`password_analysis.patterns.has_repeated_chars`	Whether the password contains repeated characters (REPEATED CHARACTER).
`password_analysis.dictionary_match.is_common_password`	Whether the password is a known common password (COMMON PASSWORD).
`password_analysis.dictionary_match.common_password_rank`	The password's rank in the list of common passwords, where a lower number means a more common password; set only when `is_common_password` is `true`.
`password_analysis.dictionary_match.is_dictionary_word`	Whether the whole password, ignoring letter case, is a dictionary word.
`password_analysis.dictionary_match.dictionary_word_found`	The dictionary word found inside the password (DICT WORD), also when the password holds more than that word; empty when none is found. It reveals part of the password.
`target.url`	The address of the site or app the credential belongs to (Target URL). For an Android app (`target.platform` `ANDROID`) it is an `android://` app address instead of a web address.
`target.url_raw`	The raw form of the target URL, shown as URL RAW on the credential's TARGET tab; in the samples it is always the same as `target.url`.
`target.fqdn`	The host name of the target, such as `login.acme.example` (FQDN). For an Android app it is the app's package name in reverse order.
`target.domain`	The registered domain of the target, such as `acme.example` for `login.acme.example` (DOMAIN).
`target.service`	The name of the site or service the credential belongs to (SERVICE), shown first in the SOURCE/SERVICE column of the list.
`target.platform`	Where the credential was used: `WEB` for a website or `ANDROID` for an Android app (values seen), shown as the platform tag next to the host.
`target.main_category`	The category of the target service, such as `Social Media`, `Identity & Access` or `E-Commerce & Retail` (MAIN CATEGORY). Empty for a service without a category.
`target.sub_category`	A narrower category of the target service within `target.main_category`, such as `Email Provider` or `SSO / Identity Provider` (SUB CATEGORY). Empty for a service without a category.
`target.risk_tier`	The risk tier of the target service: `CRITICAL`, `HIGH`, `MEDIUM` or `LOW` (RISK TIER). Empty for a service without a category.
`target.is_corporate`	Whether the target is a corporate service (CORPORATE); such credentials show a corporate-building icon in the list.
`target.requires_mfa_by_default`	Whether the target service enforces multi-factor authentication by default, shown as MFA BY DEFAULT: ENFORCED or NOT ENFORCED. Empty for a service without a category.
`state`	The credential's state: `newly_detected` or `unresolved` while active; once inactive, `not_applicable` or `verified_resolved` (set by the platform) or `ignored`, `risk_accepted`, `marked_as_resolved` or `marked_as_false_positive` (set by you).

Response Fields

Field	Type	Description
`page`	integer
`page_size`	integer
`result_count`	integer
`results`	array of object
`results[].id`	string
`results[].url`	string
`results[].state`	string	One of `newly_detected`, `unresolved`, `marked_as_resolved`, `risk_accepted`, `ignored`, `marked_as_false_positive`, `not_applicable`, `verified_resolved`
`results[].account`	object
`results[].added_at`	string	date-time
`results[].password`	string
`results[].password_analysis`	object
`results[].target`	object

Paginated. See Getting Started → Pagination.

Response Schema

Inferred from examples Built from the saved 2xx example response: the fields it contains, with the types seen there. It is not a contract.

Field	Type	Example
`page`	number	`1`
`page_size`	number	`25`
`result_count`	number	`21`
`results`	array<object>
`results[].id`	string	`"000000000000000e37e30001"`
`results[].url`	string	`"https://www.fernhill.example/"`
`results[].state`	string	`"unresolved"`
`results[].account`	object
`results[].account.id`	string	`"000000000000000ec9430001"`
`results[].account.email`	string
`results[].account.domain`	string	`"acme.example"`
`results[].account.is_executive`	boolean	`false`
`results[].account.first_name`	null
`results[].account.last_name`	null
`results[].account.title`	null
`results[].account.linkedin_url`	null
`results[].account.department`	null
`results[].added_at`	string	`"2025-06-01T08:00:00Z"`
`results[].password`	string
`results[].password_analysis`	object
`results[].password_analysis.strength`	object
`results[].password_analysis.strength.level`	number	`0`
`results[].password_analysis.strength.score`	number	`25`
`results[].password_analysis.strength.label`	string	`"Very Weak"`
`results[].password_analysis.strength.entropy_bits`	number	`20.5`
`results[].password_analysis.composition`	object
`results[].password_analysis.composition.length`	number	`8`
`results[].password_analysis.composition.structure`	string
`results[].password_analysis.composition.character_classes_used`	number	`3`
`results[].password_analysis.composition.contains_uppercase`	boolean	`true`
`results[].password_analysis.composition.contains_lowercase`	boolean	`true`
`results[].password_analysis.composition.contains_number`	boolean	`true`
`results[].password_analysis.composition.contains_special`	boolean	`false`
`results[].password_analysis.composition.starts_with_uppercase`	boolean	`false`
`results[].password_analysis.composition.ends_with_numbers`	boolean	`false`
`results[].password_analysis.composition.ends_with_special`	boolean	`false`
`results[].password_analysis.patterns`	object
`results[].password_analysis.patterns.has_keyboard_pattern`	boolean	`false`
`results[].password_analysis.patterns.has_date_pattern`	boolean	`false`
`results[].password_analysis.patterns.has_leet_speak`	boolean	`false`
`results[].password_analysis.patterns.has_sequential_chars`	boolean	`false`
`results[].password_analysis.patterns.has_repeated_chars`	boolean	`false`
`results[].password_analysis.dictionary_match`	object
`results[].password_analysis.dictionary_match.is_common_password`	boolean	`false`
`results[].password_analysis.dictionary_match.common_password_rank`	null
`results[].password_analysis.dictionary_match.is_dictionary_word`	boolean	`false`
`results[].password_analysis.dictionary_match.dictionary_word_found`	null
`results[].target`	object
`results[].target.url`	string	`"https://www.fernhill.example/"`
`results[].target.url_raw`	string	`"https://www.fernhill.example/"`
`results[].target.fqdn`	string	`"www.fernhill.example"`
`results[].target.domain`	string	`"fernhill.example"`
`results[].target.service`	string	`"Webmail"`
`results[].target.platform`	string	`"Web"`
`results[].target.main_category`	string \| null	`"Email"`
`results[].target.sub_category`	string \| null	`"Email"`
`results[].target.risk_tier`	string \| null	`"LOW"`
`results[].target.is_corporate`	boolean	`false`
`results[].target.requires_mfa_by_default`	boolean \| null	`true`

Examples

Selecting one loads it into the request and response panels.

Reference updated September 27, 2026