Output

The Cyber API response includes up to 10 CyberDoc and a Meta Info area with reference to API consumption and the request itself, such as the "next" URL to get the next batch of CyberDocs matching your query.

Each CyberDoc is constructed of 5 objects:

The Post Object includes information about the particular post, such as fields.
The Site Object includes information about the site, channel or group the post originated from and also whether it is live or offline.
The Thread Object Includes Information about the thread in which the item appeared, such as the title, publication date and participants count.
The Extended Object includes additional meta info from the webpage, such as links.
The Enriched Object includes analyzed information about the Item, such as extracted entities.

Main section

Main fields that appear in the CyberDoc Object:

Field NameDescriptionSearchable?Type
uuidA unique ID representing the post or commentYesString
parent_uuidThe unique ID of the parent document.
If the post originated from structured data , it represents the thread URL.
If the post is originated from scanned data , it represents the referring URL.
YesString
urlThe link to the pageYesString
titleThe title of the threadYesString
textThe text in the page or postYesString
authorA list of usernames/authors/actors who wrote the postYesArray[String]
publishedThe date/time when the page or post was published (if detected)YesDate
Format:
yyyy-MM-dd'T'HH:mm:ss.SSSXXX
languageThe language of the textYesString
external_linksA list of URLs that are linked from the page or postYesString
external_imagesA list of image URLs that are linked from the page or postYesString
crawledThe date/time when the post was crawled.YesDate
Format:
yyyy-MM-dd'T'HH:mm:ss.SSSXXX
updatedThe date/time when the post was updated.NoDate
Format:
yyyy-MM-dd'T'HH:mm:ss.SSSXXX
cache_linkA link to a cached HTML snapshot of the pageNoString
ratingThe rating parameter provides the star rating for a review. rating is a floating number between 0.0 to 5.0.YesFloat
referring_urlThe URL that referred our crawler to the current document URLYesString
ord_in_threadThe post sequence number in the context of the thread:
0 - means first post
YesInteger

📘

The updated field is effective for documents crawled from June 7th 2020 onwards. Documents crawled before that time contain updated:null values

Author_Extended Object

auhotr_extended object allows to uniquely capture the actor identity in the site/application.

Field NameDescriptionSearchableType
display_nameThe user visual name , displayed in the website or application next to the post.Yes
Partial search is allowed.
String
user_idThe unique identifier of the user in the website or application.Yes.
Partial search is allowed
String
user_linkThe unique hyperlink to the user information in the website or application.Yes.
Partial search is allowed.
URL (String)

Site Object

Field NameDescriptionSearchable?Type
domainThe top level domain of the siteYesString
is_liveObsolete
Left for backward Compatibility.
Value is always TRUE
NoBoolean
typePossible site types:


  • News
  • Blogs
  • Discussions
  • Messaging
  • Marketplaces
  • paste
  • datastore
  • social_media
YesString
categoriesType of Illicit content that appear on the site (e.g. PII, carding, etc.)NoArray[String]

Thread Object

Field NameDescriptionSearchable?Type
urlA link to the top of the threadYesString
site_sectionA link to the section in the site where the thread was createdYesString
section_titleThe title of the section in the site where the thread was createdYesString
titleThe title of the threadYesString
full_titleThe title of the section in the site where the thread was createdFalseString
publishedThe date/time when the thread was published.YesDate
Format:
yyyy-MM-dd'T'HH:mm:ss.SSSXXX
replies_countHow many replies are there to the main postYesInteger
participants_countHow many different people participated in the discussionYesInteger
main_imageA link to the main image presented with the articleNoString

Extended Object

Field NameDescriptionSearchable?Type
external_linksA list of URLs that are linked from the page or postYesArray[String]
external_videosA list of URLs to videos from the pageYesArray[String]
external_imagesA structure. See External Images Object in the next table.
file_linksA list of URLs to files from the pageYesArray[String]
file_typePossible file types:


  • html
  • zip
  • rar
  • tar
  • 7z
  • pdf
  • txt
  • xls
  • xlsx
  • doc
  • docx
  • sql
YesString
networkDark Network that contained the page/post
This could be one of the following:


  • tor
  • discord
  • i2P
  • openbazaar,
  • telegram
  • openweb
  • icq
YesString
required_loginA Boolean value (true/false) stating if the content is protected by a passwordYesBoolean

External Images Object

NameDescriptionSearchable?Type
urlThe link to the actual imageYesString
meta_infoLink to more information about the imageNoString
uuidA unique ID for the image by its content. Multiple posts could link to the same image, even if it is on different locations.YesString
labelA list of labels that describe the visual content of the image.YesArray[String]

Enriched Object

Field NameDescriptionSearchable?Type
categoriesOne or more cyber categeries that the post/page content belong to.
Categories include:


  • drugs
  • pii
  • hacking
  • terror
  • weapons
  • sexual
  • sexual_media
  • financial
YesArray[String]
*personsOne or more individual people entities found in the post/pageYesArray[String]
*organizationsOne or more organization entities found in the post/pageYesArray[String]
*locationsOne or more location entities found in the post/pageYesArray[String]
emailsOne or more email address entities found in the post/pageYesArray[String]
phonesOne or more phone number entities found in the post/pageYesArray[String]
credit_cardsone or more organization entities found in the post/pageYesArray[String]
ssnsOne or more social security number (SSN) entities found in the post/pageYesArray[String]
wallet_idsOne or more wallet_id entities found in the post/pageYesArray[String]
ipsOne or more IP entities found in the post/pageYesArray[String]
domainsOne or more domain entities found in the post/pageYesArray[String]
cveOne or more CVE Ids entities found in the post/pageYesArray[String]

* Currently not supported in chat networks

Meta info

Field NameDescriptionType
totalResultsThe total number of posts matching your queryInteger
moreResultsAvailableHow many more results are availableInteger
nextA URL to get the next batch of posts matching your query. See Pagination and Sorting in this section.String
requestsLeftHow many more requests are available in your current subscription planInteger
JSON Output Example:

{

"url": "http://e2rlc42c2hah6tgj.onion/viewProduct?offer=393694.312665#post-0",

"uuid": "bf416cecda38b308dd02d987a41f6ad7ba11bd70",

"parent_uuid": "6dbcd81bbe1b5afe53ee761e06304700a538ec99",

"title": "Uber.com Logins ✅✴️⚡",

"text": "When you place an order, you will receive the login information which includes username and password. All information is fresh, and are never resold. Only you will have exclusive access to the account. Here is a sample of what you will get: Username: Beevives9 Password: MACritte$3 Last Checked: 02-14-2017 Country: USA / UK / CHINA (Sometimes Provided) These accounts are valid and 100% working...........",

"highlightText": "",

"highlightTitle": "",

"author": [

"Theme_Song"

],

"language": "english",

"referring_url": null,

"referring_file_type": null,

"rating": null,

"published": "2018-07-30T12:03:00.000+03:00",

"site": {

"name": "Dream Market Login - Featured anonymous marketplace",

"is_live": true,

"domain": "e2rlc42c2hah6tgj.onion",

"type": "discussions",

"country": null,

"categories": null

},

"thread": {

"url": "http://e2rlc42c2hah6tgj.onion/viewProduct?offer=393694.312665",

"uuid": "6dbcd81bbe1b5afe53ee761e06304700a538ec99",

"title": "Uber.com Logins ✅✴️⚡",

"full_title": "Uber.com Logins ✅✴️⚡",

"published": "2018-07-30T12:03:00.000+03:00",

"site_section": "http://e2rlc42c2hah6tgj.onion/?ai=1675",

"section_title": "Dream Market",

"replies_count": 5,

"participants_count": 2,

"main_image": ""

},

"ord_in_thread": 0,

"extended": {

"external_links": [],

"external_images": [],

"external_videos": [],

"file_links": [],

"file_type": "html"

"network": "tor"

"required_login": true

},

"enriched": {

"categories": [

"pii",

"financial"

],

"persons": null,

"organizations": {

"value": [

"walmart"

],

"count": 1

},

"locations": {

"value": [

"usa",

"uk"

],

"count": 2

},

"emails": null,

"phones": null,

"credit_cards": null,

"ssns": null,

"wallet_ids": null

},

"crawled": "2018-07-30T04:03:40.018+03:00",

"cache_link": "/dark-cache?token=XXXX-XXXX-XXXX&id=http%3A%2F%2Fe2rlc42c2hah6tgj.onion%2FviewProduct%3Foffer%3D393694.312665"

}],

"totalResults": 2306,

"moreResultsAvailable": 2296,

"next": "/cyberFilter?token=XXXX-XXXX-XXXX&format=json&ts=1532912620018&q=fullz+AND+credit+is_structured%3Atrue+extended.network%3Ator",

"requestsLeft": 8926,

}