While enumerating the subdomains, I have a habit of searching for historical URLs for these subdomains. This time, I found a number of receipent email addresses in query params, like large numbers of it, does this qualify as PII leak that I should report?
