Search product leaks

Accounts leaked from a product’s login paths (e.g. `fortinet`); narrow to one domain with `product@domain`. `exploited` and `cves` show known exploited vulnerabilities for the product. Spends no credits. Secrets are masked.

GET/v1/hunter/product

GETSearch product leaks

curl -X GET "https://api.darkradar.com/api/public/v1/hunter/product?value=fortinet%40darkradar.com" \
  -H "x-api-key: $DARKRADAR_API_KEY"

Response

Success

{
  "success": true,
  "data": {
    "found": true,
    "product": "fortinet",
    "exploited": true,
    "cves": [
      "CVE-2024-21762"
    ],
    "pathCount": 3,
    "total": 1,
    "matches": [
      {
        "matchRef": "64b1f0c2a9e4d21f8c3b9a41",
        "source": "vpn.darkradar.com",
        "exposedFields": [
          "username",
          "password"
        ],
        "secretMasked": "Ya******23",
        "seenAt": "2026-09-02T00:00:00.000Z",
        "firstSeenAt": "2026-09-02T00:00:00.000Z"
      }
    ],
    "rateLimit": {
      "remaining": 17,
      "limit": 20
    }
  }
}

Access

Scopehunter:search

Plan entitlementintel_hunter

Query parameters

Fields	Values
`value` · string · required	Product, or product@domain · Example: `[email protected]`

Responses

200Success

400Invalid request (malformed id, missing or invalid field)

401Key missing, invalid, expired or revoked

403Insufficient scope, no API access in plan, or product not enabled

404Record not found or not owned by this key’s firm

408The request exceeded its maximum response time

429The per-minute request limit for your firm was exceeded; wait the number of seconds in the `Retry-After` header

503Threat Investigation is temporarily unavailable; do not retry automatically, try again later yourself

Response limits

Rate limit500 requests per 15 min · per IP

Threat Investigation20 requests per 1 min · per firm

{ "success": true, "data": { "found": true, "product": "fortinet", "exploited": true, "cves": [ "CVE-2024-21762" ], "pathCount": 3, "total": 1, "matches": [ { "matchRef": "64b1f0c2a9e4d21f8c3b9a41", "source": "vpn.darkradar.com", "exposedFields": [ "username", "password" ], "secretMasked": "Ya******23", "seenAt": "2026-09-02T00:00:00.000Z", "firstSeenAt": "2026-09-02T00:00:00.000Z" } ], "rateLimit": { "remaining": 17, "limit": 20 } } }