Output Reference

The output includes 4 objects and main:
"file" - includes information on the leaked file, only applies to Leaked PII dumps.
"leak" - includes information on the leak itself, only applies to Leaked PII dumps.
"site" - provides information on the domain or network, only applies to unstructured leaked information.
"records" - one or more items that include the compromised & sanitized data.

Meta Info (bottom part)

Field Name
Description
Type

totalDocs

The total number of documents matching your query

Integer

moreDocsAvailable

How many more documents are available

Integer

next

A URL to get the next batch of documents matching your query

String

recordsLeft

How many more records are available in your current subscription plan

Integer

Main

Main Fields as appear in the CyberDoc Object

Field Name
Description
Searchable?
Type

uuid

A unique ID representing the thread

False

String

text

The text in leak, only applies to unstructured sources

True

String

language

The language of the text

True

String

crawled

The date/time when the post was crawled.

True

Site Object

Field Name
Description
Searchable?
Type

network

Dark Network that contained the page/post
This could be one of the following:

  • TOR
  • ZeroNet
  • I2P
  • Open Bazaar
  • Telegram
  • Discord
  • IRC
  • Open Web

True

String

File Object

Field Name
Description
Searchable?
Type

name

The name of the leak, applies only to DB dumps

True

String

date

the date of the file

True

Leak Object

An Object that provides additional metadata on the visible content.

Field Name
Description
Searchable?
Type

name

The name of the leak, applies only to DB dumps

True

String

breach_date

The leak date (official publication of the leak)

True

fields

The list of compromised fields in the doc
Optional Field Values (additional fields available from the unstructured)
"passport"
"email"
"account name"
"phone"
"ssn"
"credit card"

True

Array[Strings]

Records Object

The Enriched Object contains all analyzed / deducted fields

Field Name
Description
Searchable?
Type

cc.value

credit card value

True

String

ssn.value

social security number value

True

String

passport.value

passport value

True

String

email.value

email value

True

String

phone.value

phone value

True

String

account_name.value

account name value

True

String

account_name.password.value

the password value that is relevant to the account/email

False

String

account_name.password.is_hashed

Boolean value whether the password was originally hashed or not

False

Boolean

An example cyber doc object:

    piiDocs: [
{
uuid: "ffea8c524a9f6924c204d6d8012bdcbd",
file: {
name: "17.media_private_database.sql from 17.media.rar",
date: null
},
leak: {
name: "17",
breach_date: "2016-04-19T03:00:00.000+03:00",
fields: [
"openid",
"password",
"countrycode",
"phonenumber",
"userip",
"email",
"devicetype",
"devicemodel"
]
},
records: [
{
cc: null,
ssn: null,
passport: null,
email: null,
phone: null,
account_name: {
value: "kusibsmcmd62",
other: " "device type": android",
password: {
value: "e9664308e35988edd181b6f1d4e56dd6",
is_hashed: true
}
}
}
],
author: null,
referring_url: null,
language: null,
text: null,
crawled: "2019-01-01T17:27:46.122+02:00"
}
],
totalDocs: 359483,
moreDocsAvailable: 359482,
next: "/piiFilter?token=xxx&format=json&ts=1546356466122&q=account_name.value%3Akubi*",
recordsLeft: 6290
}

Output Reference


Suggested Edits are limited on API Reference Pages

You can only suggest edits to Markdown body content, but not to the API spec.