← Back to darkwebsonar.io
API docs by Redocly

DarkWebSonar API (1.0.0)

DarkWebSonar Support: support@darkwebsonar.com URL: https://darkwebsonar.io License: Proprietary

Advanced threat intelligence platform monitoring dark web activity, data breaches, and DDoS attacks in real-time.

Threat Intelligence

Access to threat intelligence data and recent security incidents

Get Recent Threat Entries

Retrieve recent threat intelligence entries with optional filtering

Authorizations:
ApiKeyAuthBearerAuth
query Parameters
time_range
string
Default: "7d"
Enum: "24h" "7d" "30d" "90d"

Time range for filtering entries

limit
integer [ 1 .. 100 ]
Default: 10

Maximum number of entries to return

category
string
Enum: "Data Breach" "Data Leak" "DDoS Attack" "Defacement" "Ransomware" "Malware"

Filter by threat category

victim_country_code
string^[A-Z]{3}$

Filter by victim country (ISO 3166-1 alpha-3 code)

victim_industry
string

Filter by victim industry

threat_actors
string

Filter by threat actor name

Responses

Response Schema: application/json
Array
entry_hash
required
string

Unique identifier for the threat entry

title
required
string

Title of the threat entry

summary
string

Brief summary of the threat

description
string

Detailed description of the threat

category
required
string
Enum: "Data Breach" "Data Leak" "DDoS Attack" "Defacement" "Ransomware" "Malware"

Category of the threat

severity
string
Enum: "low" "medium" "high" "critical"

Severity level of the threat

network
required
string

Source network where the threat was detected

date
required
string <date-time>

Date and time when the threat was detected

victim_country_code
string^[A-Z]{3}$

ISO 3166-1 alpha-3 country code of the victim

victim_industry
string

Industry sector of the victim organization

victim_organization
string

Name of the victim organization

victim_site
string

Website of the victim organization

threat_actors
string

Known threat actors associated with this threat

screenshots_thumb
string

Comma-separated URLs of thumbnail screenshots

screenshots_full
string

Comma-separated URLs of full-size screenshots

source_url
string

Original source URL of the threat intelligence

Response samples

Content type
application/json
[
  • {
    }
]

Analytics

Aggregated analytics and statistics about threats

Get Threat Count by Field

Get aggregated threat counts grouped by a specific field

Authorizations:
ApiKeyAuthBearerAuth
query Parameters
group_by
required
string
Enum: "category" "industry" "threat_actors"

Field to group results by

time_range
string
Default: "7d"
Enum: "24h" "7d" "30d" "90d"

Time range for filtering

limit
integer [ 1 .. 50 ]
Default: 10

Maximum number of results to return

Responses

Response Schema: application/json
Array
category
string

Category name (when grouping by category)

industry
string

Industry name (when grouping by industry)

threat_actors
string

Threat actor name (when grouping by threat_actors)

count
required
integer

Number of threats in this group

percent_change
number

Percentage change compared to previous period

Response samples

Content type
application/json
[
  • {
    }
]

Get Threat Count by Country

Get aggregated threat counts grouped by victim country

Authorizations:
ApiKeyAuthBearerAuth
query Parameters
time_range
string
Default: "7d"
Enum: "24h" "7d" "30d" "90d"

Time range for filtering

limit
integer [ 1 .. 100 ]
Default: 50

Maximum number of countries to return

Responses

Response Schema: application/json
Array
victim_country_code
required
string^[A-Z]{3}$

ISO 3166-1 alpha-3 country code

country_name
string

Human-readable country name

count
required
integer

Number of threats targeting this country

Response samples

Content type
application/json
[
  • {
    }
]

Threat Actors

Information about known threat actors and their profiles

Get Threat Actor Profiles

Retrieve detailed information about threat actors

Authorizations:
ApiKeyAuthBearerAuth
query Parameters
name
string

Threat actor name to search for

limit
integer [ 1 .. 50 ]
Default: 10

Maximum number of results to return

Responses

Response Schema: application/json
Array
id
required
integer

Unique identifier for the threat actor

name
required
string

Name of the threat actor

first_seen
required
string <date-time>

Date when this threat actor was first observed

last_seen
required
string <date-time>

Date when this threat actor was last observed

network
string

Network or platform where the actor is active

bad_karma
required
integer [ 0 .. 100 ]

Risk score from 0-100, where higher values indicate higher risk

Response samples

Content type
application/json
[
  • {
    }
]