> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Search Botnet Compromised Credentials

Search ZeroFox's CTI feed of credentials stolen by botnets for a specified email address.

> [!NOTE]
>
> External Documentation
>
> To learn more, visit the [ZeroFox documentation](https://api.zerofox.com/cti/docs/).

## Basic Parameters

| Parameter | Description |
| - | - |
| Created After | The date and time to return credentials found from. |
| Email | The email address to search for. |
| Return All Pages | Automatically fetch all resources, page by page. |

## Advanced Parameters

| Parameter | Description |
| - | - |
| Cursor | The cursor of the results page to return. You can get it from the `next` URL of a previous response. |

## Example Output

```json theme={"dark"}
{
	"next": null,
	"results": [
		{
			"domain": "stark.com",
			"email": "email-address",
			"username": "natasha",
			"password": "dummy_password",
			"breach_name": "Raid Forums/XSS/Exploit: Stark Data Breach (7,409,054 Records)",
			"breach_id": "123",
			"impacted_domain": "stark-breach",
			"created_at": "2021-06-26T04:44:37.603656Z"
		}
	]
}
```