Skip to main content

DarkwebResultDto

domainstringrequired

The domain this dark-web exposure check was run against.

Example: acme.example
statusstringrequired

The exposure verdict. 'unavailable' is distinct from 'safe' — a disabled provider or a failed/unprocessable search must never be read as 'no exposure found'.

Possible values: [safe, breached, unavailable]

Example: breached
breachCountnumberrequired

Total number of compromised-credential records found for the domain.

Example: 2
latestBreachstringnullablerequired

Date of the most recent breach affecting this domain, if known.

Example: 2024-03-11
records object[]required

Compromised-credential records for the domain. Passwords stay masked as returned by the upstream provider.

  • Array [
    • emailstring

    Compromised email address associated with the breach record.

    Example: user@example.com
    passwordMaskedstring

    Password as returned by the upstream provider — always pre-masked, never unmasked or re-derived.

    Example: 0ae6**********
    compromiseTypestring

    Type of data compromised in this record (e.g. password, hash).

    Example: password
    breachDatestringnullable

    Date the underlying breach occurred, if known.

    Example: 2024-03-11
    hashTypestring

    Hash algorithm used for the compromised credential, if applicable.

    Example: bcrypt
  • ]
    • checkedAtstringrequired

    ISO timestamp the check was performed.

    Example: 2026-07-22T18:04:11.000Z
    DarkwebResultDto
    {
      "domain": "acme.example",
      "status": "breached",
      "breachCount": 2,
      "latestBreach": "2024-03-11",
      "records": [
        {
          "email": "user@example.com",
          "passwordMasked": "0ae6**********",
          "compromiseType": "password",
          "breachDate": "2024-03-11",
          "hashType": "bcrypt"
        }
      ],
      "checkedAt": "2026-07-22T18:04:11.000Z"
    }