DarkwebResultDto

domainstringrequired

The domain this dark-web exposure check was run against.

Example: acme.example

statusstringrequired

The exposure verdict. 'unavailable' is distinct from 'safe' — a disabled provider or a failed/unprocessable search must never be read as 'no exposure found'.

Possible values: [safe, breached, unavailable]

Example: breached

breachCountnumberrequired

Total number of compromised-credential records found for the domain.

Example: 2

latestBreachstringnullablerequired

Date of the most recent breach affecting this domain, if known.

Example: 2024-03-11

records object[]required

Compromised-credential records for the domain. Passwords stay masked as returned by the upstream provider.

Array [

emailstring

Compromised email address associated with the breach record.

Example: user@example.com

passwordMaskedstring

Password as returned by the upstream provider — always pre-masked, never unmasked or re-derived.

Example: 0ae6**********

compromiseTypestring

Type of data compromised in this record (e.g. password, hash).

Example: password

breachDatestringnullable

Date the underlying breach occurred, if known.

Example: 2024-03-11

hashTypestring

Hash algorithm used for the compromised credential, if applicable.

Example: bcrypt

]

checkedAtstringrequired

ISO timestamp the check was performed.

Example: 2026-07-22T18:04:11.000Z

DarkwebResultDto

{
  "domain": "acme.example",
  "status": "breached",
  "breachCount": 2,
  "latestBreach": "2024-03-11",
  "records": [
    {
      "email": "user@example.com",
      "passwordMasked": "0ae6**********",
      "compromiseType": "password",
      "breachDate": "2024-03-11",
      "hashType": "bcrypt"
    }
  ],
  "checkedAt": "2026-07-22T18:04:11.000Z"
}