Read new findings
Read leaks found for your watched targets; receive an event at your webhook when new findings appear.
List the findings
The key needs the hunter:read scope. Secrets are masked; unmasked content opens only in the dashboard, with a declaration. Narrow to one target with targetId.
curl -G "https://api.darkradar.com/api/public/v1/hunter/findings" \ -H "x-api-key: $DARKRADAR_API_KEY" \ --data-urlencode "targetId=64b1f0c2a9e4d21f8c3b9a60"
{
"success": true,
"data": {
"items": [
{
"id": "64b1f0c2a9e4d21f8c3b9a70",
"targetId": "64b1f0c2a9e4d21f8c3b9a60",
"source": "darkradar",
"breachName": null,
"exposedFields": [
"username",
"password"
],
"secretMasked": "Ya******23",
"severity": "high",
"seenAt": "2026-10-31T00:00:00.000Z",
"createdAt": "2026-11-01T03:00:00.000Z"
}
],
"total": 1,
"page": 1,
"pageSize": 50
}
}Get an event for new findings
Subscribe your webhook to the hunter.finding.created event. The event carries the number of new findings, the highest severity and the target id; read the details from the findings endpoint. Targets are firm-wide, so the event goes to every webhook subscribed to it.
{
"id": "evt_5f0c2a9e4d21f8c3b9a70aa1",
"type": "hunter.finding.created",
"createdAt": "2026-11-01T03:00:05.000Z",
"data": {
"targetId": "64b1f0c2a9e4d21f8c3b9a60",
"targetKind": "domain",
"newFindings": 2,
"severity": "high"
}
}