---
title: "Leak and infostealer exposure of one e-mail address: infections that saved it (count, first/last seen, corporate vs user services), leak records and sources - aggregates only, never passwords, logins, devices or IPs; the address is echoed only as SHA-256. For addresses you own or are authorised to check"
method: POST
path: "/v1/exposure-check-email"
tags: ["SEO"]
---

# Leak and infostealer exposure of one e-mail address: infections that saved it (count, first/last seen, corporate vs user services), leak records and sources - aggregates only, never passwords, logins, devices or IPs; the address is echoed only as SHA-256. For addresses you own or are authorised to check

`POST /v1/exposure-check-email`

## Request

- Base URL: `https://agent.connskill.com` (the document declares no server; this is the origin it was published from)
- URL: `https://agent.connskill.com/v1/exposure-check-email`
- Auth: none declared

## Request body

- object
  - `email` string, required: E-mail address you own or are authorised to check

## Response `200`

Report delivered

- object
  - `status` string
  - `subject` string
  - `domain` string
  - `infostealer` object
    - `compromised` boolean
    - `infections` integer
    - `corporateServices` integer
    - `userServices` integer
    - `firstCompromised` string
    - `lastCompromised` string
  - `leaks` object
    - `found` integer
    - `sources` object[]
      - `name` string
      - `date` string
    - `fieldTypes` string[]
  - `verdict` object
    - `level` string
    - `reasons` string[]

## Other responses

- `402`: Payment Required

---

[API](https://skmtc.dev/connskill/apis/connskill-growth-services.md) · [All operations](https://skmtc.dev/connskill/apis/connskill-growth-services/llms.txt) · [OpenAPI document](https://skmtc.dev/connskill/apis/connskill-growth-services/revisions/aae873ea0805?raw)