NordStellar Platform Integrations API

{"openapi":"3.0.4","info":{"title":"Platform Integration API","description":"API for integration with platform data.","contact":{"name":"Vakaris Noreika","email":"vakaris.noreika@nordsec.com"},"version":"3"},"servers":[{"url":"https://platform-integration-api.nordstellar.com"}],"paths":{"/v3/events/attack-surface-dns-vulnerabilities/{event-id}":{"get":{"tags":["Events"],"summary":"Retrieves attack surface DNS vulnerability event details.","parameters":[{"name":"event-id","in":"path","description":"Unique identifier of the event","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"The request has succeeded","content":{"application/json":{"schema":{"$ref":"#/components/schemas/AttackSurfaceVulnerability.AttackSurfaceDnsVulnerability"},"example":{"id":"11111111-1111-1111-1111-111111111111","type":"ATTACK_SURFACE_DNS_VULNERABILITY","project_id":"22222222-2222-2222-2222-222222222222","asset_id":"33333333-3333-3333-3333-333333333333","asset_value":"example.com","title":"DNSSEC Not Configured","description":"The domain does not have DNSSEC configured, which could allow DNS spoofing attacks.","is_verified":true,"source_type":"DNS","vulnerability_type":"MISCONFIGURATION","tags":["dns","dnssec","security"],"impact_description":"Without DNSSEC, attackers could potentially redirect users to malicious sites through DNS cache poisoning.","remediation_instructions":"Enable DNSSEC for your domain by configuring DS records with your domain registrar.","references":["https://www.example.com/dnssec-guide"],"risk_level":"MEDIUM","cve_id":null,"cwe_ids":[],"cvss2_score":0,"cvss3_score":0,"cvss_vector":"","epss_score":0,"evidence_url":null,"evidence_data":null,"evidence_curl_command":null,"evidence_http_request":null,"evidence_http_response":null,"evidence_network_data":"DNS query results showing missing DNSSEC records","evidence_file_path":null,"evidence_target":"example.com","evidence_host":null,"evidence_port":null,"evidence_scheme":null,"evidence_raw_response":null,"evidence_extracted_data":[],"is_resolved":false,"detected_at":"2024-01-01T00:00:00.000Z","updated_at":"2024-01-02T00:00:00.000Z","module":"ATTACK_SURFACE"}}}},"400":{"description":"The server cannot or will not process the request due to an error made by the client.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-400-bad-request","title":"Bad Request","status":400,"instance":"/v1/resource/123","errors":{"FIELD A":["ERROR 1","ERROR 2"],"FIELD B":["ERROR 3"]}}}}},"401":{"description":"The server has received and understood the request but is unable to authenticate it.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-401-unauthorized","title":"Unauthorized","status":401,"detail":"User unauthorized.","instance":"/v1/resource/123"}}}},"403":{"description":"The server has received and understood the request but is unable to authorize it.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-403-forbidden","title":"Forbidden","status":403,"detail":"The user is not allowed to do an action for the specified resource.","instance":"/v1/resource/123"}}}},"500":{"description":"The server has encountered a situation it does not know how to handle.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-500-internal-server-error","title":"Internal Server Error","status":500,"detail":"Something went wrong","instance":"/v1/resource/123"}}}}}}},"/v3/events/attack-surface-network-service-vulnerabilities/{event-id}":{"get":{"tags":["Events"],"summary":"Retrieves attack surface network service vulnerability event details.","parameters":[{"name":"event-id","in":"path","description":"Unique identifier of the event","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"The request has succeeded","content":{"application/json":{"schema":{"$ref":"#/components/schemas/AttackSurfaceVulnerability.AttackSurfaceNetworkServiceVulnerability"},"example":{"id":"11111111-1111-1111-1111-111111111111","type":"ATTACK_SURFACE_NETWORK_SERVICE_VULNERABILITY","project_id":"22222222-2222-2222-2222-222222222222","asset_id":"33333333-3333-3333-3333-333333333333","asset_value":"192.168.1.100","title":"Outdated SSH Service","description":"The SSH service is running an outdated version with known vulnerabilities.","is_verified":true,"source_type":"NETWORK_SERVICE","vulnerability_type":"BACKDOOR","tags":["ssh","outdated","network-service"],"impact_description":"Attackers could exploit known vulnerabilities in the outdated SSH version to gain unauthorized access.","remediation_instructions":"Update SSH to the latest stable version and ensure automatic updates are enabled.","references":["https://www.example.com/security.html"],"risk_level":"HIGH","cve_id":"CVE-2023-12345","cwe_ids":["CWE-327"],"cvss2_score":7.5,"cvss3_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","epss_score":0.85,"evidence_url":null,"evidence_data":null,"evidence_curl_command":null,"evidence_http_request":null,"evidence_http_response":null,"evidence_network_data":"SSH-2.0-OpenSSH_7.4","evidence_file_path":null,"evidence_target":"192.168.1.100:22","evidence_host":"192.168.1.100","evidence_port":"22","evidence_scheme":"ssh","evidence_raw_response":null,"evidence_extracted_data":[],"is_resolved":false,"detected_at":"2024-01-01T00:00:00.000Z","updated_at":"2024-01-02T00:00:00.000Z","port":22,"network_service_name":"SSH","protocol":"TCP","product":"OpenSSH","version":"7.4","is_active":true,"module":"ATTACK_SURFACE"}}}},"400":{"description":"The server cannot or will not process the request due to an error made by the client.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-400-bad-request","title":"Bad Request","status":400,"instance":"/v1/resource/123","errors":{"FIELD A":["ERROR 1","ERROR 2"],"FIELD B":["ERROR 3"]}}}}},"401":{"description":"The server has received and understood the request but is unable to authenticate it.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-401-unauthorized","title":"Unauthorized","status":401,"detail":"User unauthorized.","instance":"/v1/resource/123"}}}},"403":{"description":"The server has received and understood the request but is unable to authorize it.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-403-forbidden","title":"Forbidden","status":403,"detail":"The user is not allowed to do an action for the specified resource.","instance":"/v1/resource/123"}}}},"500":{"description":"The server has encountered a situation it does not know how to handle.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-500-internal-server-error","title":"Internal Server Error","status":500,"detail":"Something went wrong","instance":"/v1/resource/123"}}}}}}},"/v3/events/attack-surface-web-application-vulnerabilities/{event-id}":{"get":{"tags":["Events"],"summary":"Retrieves attack surface web application vulnerability event details.","parameters":[{"name":"event-id","in":"path","description":"Unique identifier of the event","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"The request has succeeded","content":{"application/json":{"schema":{"$ref":"#/components/schemas/AttackSurfaceVulnerability.AttackSurfaceWebApplicationVulnerability"},"example":{"id":"11111111-1111-1111-1111-111111111111","type":"ATTACK_SURFACE_WEB_APPLICATION_VULNERABILITY","project_id":"22222222-2222-2222-2222-222222222222","asset_id":"33333333-3333-3333-3333-333333333333","asset_value":"https://example.com","title":"SQL Injection Vulnerability","description":"The web application is vulnerable to SQL injection attacks in the login form.","is_verified":true,"source_type":"WEB_APPLICATION","vulnerability_type":"BACKDOOR","tags":["sql-injection","web","critical"],"impact_description":"Attackers could gain unauthorized access to the database and extract sensitive information.","remediation_instructions":"Use parameterized queries or prepared statements to prevent SQL injection. Implement input validation and sanitization.","references":["https://example.com/attacks/SQL_Injection"],"risk_level":"CRITICAL","cve_id":null,"cwe_ids":["CWE-89"],"cvss2_score":9,"cvss3_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","epss_score":0.95,"evidence_url":"https://example.com/login","evidence_data":null,"evidence_curl_command":"curl -X POST https://example.com/login -d \"username=' OR '1'='1&password=test\"","evidence_http_request":"POST /login HTTP/1.1\nHost: example.com\nContent-Type: application/x-www-form-urlencoded\n\nusername=' OR '1'='1&password=test","evidence_http_response":"HTTP/1.1 200 OK\nContent-Type: text/html\n\n<html>Welcome Admin</html>","evidence_network_data":null,"evidence_file_path":null,"evidence_target":"https://example.com/login","evidence_host":"example.com","evidence_port":"443","evidence_scheme":"https","evidence_raw_response":null,"evidence_extracted_data":["Admin access granted","Database query: SELECT * FROM users WHERE username='' OR '1'='1'"],"is_resolved":false,"detected_at":"2024-01-01T00:00:00.000Z","updated_at":"2024-01-02T00:00:00.000Z","port":443,"module":"ATTACK_SURFACE"}}}},"400":{"description":"The server cannot or will not process the request due to an error made by the client.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-400-bad-request","title":"Bad Request","status":400,"instance":"/v1/resource/123","errors":{"FIELD A":["ERROR 1","ERROR 2"],"FIELD B":["ERROR 3"]}}}}},"401":{"description":"The server has received and understood the request but is unable to authenticate it.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-401-unauthorized","title":"Unauthorized","status":401,"detail":"User unauthorized.","instance":"/v1/resource/123"}}}},"403":{"description":"The server has received and understood the request but is unable to authorize it.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-403-forbidden","title":"Forbidden","status":403,"detail":"The user is not allowed to do an action for the specified resource.","instance":"/v1/resource/123"}}}},"500":{"description":"The server has encountered a situation it does not know how to handle.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-500-internal-server-error","title":"Internal Server Error","status":500,"detail":"Something went wrong","instance":"/v1/resource/123"}}}}}}},"/v3/events/combo-lists/{event-id}":{"get":{"tags":["Events"],"summary":"Retrieves combo list event details.","parameters":[{"name":"event-id","in":"path","description":"Unique identifier of the event","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"The request has succeeded","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Models.ComboList"},"example":{"id":"52c6fd64-8e91-46f2-ba5a-8761e103f9cf","project_id":"1e4d2e74-1c31-4116-a33d-8806e1b3ef29","type":"COMBO_LIST","module":"LEAKED_DATA","risk_level":"HIGH","is_resolved":false,"date_added":"2020-05-01T08:06:32.000Z","asset":{"type":"EMAIL","value":"test@example.com"},"tags":["CREDENTIALS"],"passwords":["password123","password456","password789"]}}}},"400":{"description":"The server cannot or will not process the request due to an error made by the client.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-400-bad-request","title":"Bad Request","status":400,"instance":"/v1/resource/123","errors":{"FIELD A":["ERROR 1","ERROR 2"],"FIELD B":["ERROR 3"]}}}}},"401":{"description":"The server has received and understood the request but is unable to authenticate it.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-401-unauthorized","title":"Unauthorized","status":401,"detail":"User unauthorized.","instance":"/v1/resource/123"}}}},"403":{"description":"The server has received and understood the request but is unable to authorize it.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-403-forbidden","title":"Forbidden","status":403,"detail":"The user is not allowed to do an action for the specified resource.","instance":"/v1/resource/123"}}}},"500":{"description":"The server has encountered a situation it does not know how to handle.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-500-internal-server-error","title":"Internal Server Error","status":500,"detail":"Something went wrong","instance":"/v1/resource/123"}}}}}}},"/v3/events/consumer-credentials/{event-id}":{"get":{"tags":["Events"],"summary":"Retrieves consumer credential event details.","parameters":[{"name":"event-id","in":"path","description":"Unique identifier of the event","required":true,"schema":{"type":"string","format":"uuid"}},{"name":"reveal-passwords","in":"query","description":"When `true`, includes the consumer credential passwords in the response. Default value `false`.","required":true,"schema":{"type":"boolean"}}],"responses":{"200":{"description":"The request has succeeded","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Models.ConsumerCredential"},"example":{"id":"9bc12d33-7d10-4c1b-9e76-19a89f5e9bb1","project_id":"1e4d2e74-1c31-4116-a33d-8806e1b3ef29","type":"CONSUMER_CREDENTIAL","module":"LEAKED_DATA","risk_level":"INFORMATIONAL","is_resolved":false,"consumer":"alice@example.com","asset_id":"3b6b2d77-1e8c-4a8a-9c64-d2e7c4dafbef","asset_value":"example.com","malware_stealer_name":"lumma-c2","source_name":"malware-log-2025-11-01.txt","source_type":"MALWARE_INFECTION","date_added":"2025-11-01T08:06:32.000Z","infection_date":"2025-10-28T14:23:00.000Z","tags":["CREDENTIALS"],"url":"https://app.example.com/login","email":"alice@example.com","username":null,"passwords":["hunter2","password123"]}}}},"400":{"description":"The server cannot or will not process the request due to an error made by the client.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-400-bad-request","title":"Bad Request","status":400,"instance":"/v1/resource/123","errors":{"FIELD A":["ERROR 1","ERROR 2"],"FIELD B":["ERROR 3"]}}}}},"401":{"description":"The server has received and understood the request but is unable to authenticate it.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-401-unauthorized","title":"Unauthorized","status":401,"detail":"User unauthorized.","instance":"/v1/resource/123"}}}},"403":{"description":"The server has received and understood the request but is unable to authorize it.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-403-forbidden","title":"Forbidden","status":403,"detail":"The user is not allowed to do an action for the specified resource.","instance":"/v1/resource/123"}}}},"500":{"description":"The server has encountered a situation it does not know how to handle.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-500-internal-server-error","title":"Internal Server Error","status":500,"detail":"Something went wrong","instance":"/v1/resource/123"}}}}}}},"/v3/events/dark-web-forum-posts/{event-id}":{"get":{"tags":["Events"],"summary":"Retrieves dark web forum post event details.","parameters":[{"name":"event-id","in":"path","description":"Unique identifier of the event","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"The request has succeeded","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Models.DarkWebForumPost"},"example":{"id":"d7443de3-ad45-4ec5-91d2-d465b0fe2f73","project_id":"1e4d2e74-1c31-4116-a33d-8806e1b3ef29","type":"DARK_WEB_FORUM_POST","module":"DARK_WEB_MONITORING","risk_level":"INFORMATIONAL","is_resolved":false,"date_added":"2024-03-15T10:30:00.000Z","tags":["CREDIT_CARDS","MARKETPLACE","COMBO_LIST"],"dark_web_monitoring_rule_name":"Company Credentials Monitor","forum_name":"DarkMarket","forum_title":"Credential Marketplace","forum_section":"Data Leaks","author":"anonymous_seller","posted_at":"2024-03-14T22:15:00.000Z","scraped_at":"2024-03-15T01:00:00.000Z","url":"https://darkmarket.example/thread/12345","content":"Selling fresh credentials from recent database breach. DM for details.","query":"example AND tags:CREDIT_CARDS"}}}},"400":{"description":"The server cannot or will not process the request due to an error made by the client.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-400-bad-request","title":"Bad Request","status":400,"instance":"/v1/resource/123","errors":{"FIELD A":["ERROR 1","ERROR 2"],"FIELD B":["ERROR 3"]}}}}},"401":{"description":"The server has received and understood the request but is unable to authenticate it.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-401-unauthorized","title":"Unauthorized","status":401,"detail":"User unauthorized.","instance":"/v1/resource/123"}}}},"403":{"description":"The server has received and understood the request but is unable to authorize it.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-403-forbidden","title":"Forbidden","status":403,"detail":"The user is not allowed to do an action for the specified resource.","instance":"/v1/resource/123"}}}},"500":{"description":"The server has encountered a situation it does not know how to handle.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-500-internal-server-error","title":"Internal Server Error","status":500,"detail":"Something went wrong","instance":"/v1/resource/123"}}}}}}},"/v3/events/dark-web-marketplace-posts/{event-id}":{"get":{"tags":["Events"],"summary":"Retrieves dark web marketplace post event details.","parameters":[{"name":"event-id","in":"path","description":"Unique identifier of the event","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"The request has succeeded","content":{"application/json":{"schema":{"$ref":"#/components/schemas/DarkWebMarketplace.DarkWebMarketplacePostV3"},"example":{"id":"d7443de3-ad45-4ec5-91d2-d465b0fe2f73","project_id":"1e4d2e74-1c31-4116-a33d-8806e1b3ef29","type":"DARK_WEB_MARKETPLACE_POST","module":"DARK_WEB_MONITORING","risk_level":"INFORMATIONAL","is_resolved":false,"date_added":"2024-03-15T10:30:00.000Z","tags":["CREDIT_CARDS","MARKETPLACE","COMBO_LIST"],"dark_web_monitoring_rule_name":"Company Credentials Monitor","marketplace_title":"Credential Marketplace","site_domain_name":"example.com ","site_subdomain_url":"https://example.com /malware_logs","price":"10.00$","marketplace_type":"Logs","author":"co####er [platinum]","posted_at":"2024-03-14T22:15:00.000Z","scraped_at":"2024-03-15T01:00:00.000Z","url":"https://darkmarket.example/thread/12345","content":"Stealer: lumma Country: Punjab ISP: Pakistan Telecommunication Company Limited Links: animoto.com.","query":"example AND tags:CREDIT_CARDS"}}}},"400":{"description":"The server cannot or will not process the request due to an error made by the client.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-400-bad-request","title":"Bad Request","status":400,"instance":"/v1/resource/123","errors":{"FIELD A":["ERROR 1","ERROR 2"],"FIELD B":["ERROR 3"]}}}}},"401":{"description":"The server has received and understood the request but is unable to authenticate it.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-401-unauthorized","title":"Unauthorized","status":401,"detail":"User unauthorized.","instance":"/v1/resource/123"}}}},"403":{"description":"The server has received and understood the request but is unable to authorize it.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-403-forbidden","title":"Forbidden","status":403,"detail":"The user is not allowed to do an action for the specified resource.","instance":"/v1/resource/123"}}}},"500":{"description":"The server has encountered a situation it does not know how to handle.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-500-internal-server-error","title":"Internal Server Error","status":500,"detail":"Something went wrong","instance":"/v1/resource/123"}}}}}}},"/v3/events/dark-web-ransomware-posts/{event-id}":{"get":{"tags":["Events"],"summary":"Retrieves dark web Ransomware post event details.","parameters":[{"name":"event-id","in":"path","description":"Unique identifier of the event","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"The request has succeeded","content":{"application/json":{"schema":{"$ref":"#/components/schemas/DarkWebRansomware.DarkWebRansomwarePost"},"example":{"id":"9e4e5325-c399-433d-a803-fdde187681f6","project_id":"1e4d2e74-1c31-4116-a33d-8806e1b3ef29","type":"DARK_WEB_RANSOMWARE_POST","module":"DARK_WEB_MONITORING","risk_level":"INFORMATIONAL","is_resolved":false,"date_added":"2024-03-15T10:30:00.000Z","tags":["RANSOMWARE","MISSING_DOMAIN"],"dark_web_monitoring_rule_name":"Company Credentials Monitor","ransomware_title":"Company targeted in ransomware attack by Akira","author":"Akira","posted_at":"2024-03-14T22:15:00.000Z","scraped_at":"2024-03-15T01:00:00.000Z","url":"https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion/","victim_information":{"company_name":"Company name","website":"https://www.example.com","industry":"Public Safety","country":{"name":"United States","iso2":"US"},"company_type":"Public Company","company_size":"51-200 employees","revenue_range":"$15,000,000.00 - $25,000,000.00","address_location":"Davenport, Iowa 12345, US","socials":[{"type":"Facebook","url":"https://www.facebook.com/examplecompany"}]},"query":"example AND tags:CREDIT_CARDS"}}}},"400":{"description":"The server cannot or will not process the request due to an error made by the client.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-400-bad-request","title":"Bad Request","status":400,"instance":"/v1/resource/123","errors":{"FIELD A":["ERROR 1","ERROR 2"],"FIELD B":["ERROR 3"]}}}}},"401":{"description":"The server has received and understood the request but is unable to authenticate it.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-401-unauthorized","title":"Unauthorized","status":401,"detail":"User unauthorized.","instance":"/v1/resource/123"}}}},"403":{"description":"The server has received and understood the request but is unable to authorize it.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-403-forbidden","title":"Forbidden","status":403,"detail":"The user is not allowed to do an action for the specified resource.","instance":"/v1/resource/123"}}}},"500":{"description":"The server has encountered a situation it does not know how to handle.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-500-internal-server-error","title":"Internal Server Error","status":500,"detail":"Something went wrong","instance":"/v1/resource/123"}}}}}}},"/v3/events/dark-web-telegram-posts/{event-id}":{"get":{"tags":["Events"],"summary":"Retrieves dark web Telegram post event details.","parameters":[{"name":"event-id","in":"path","description":"Unique identifier of the event","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"The request has succeeded","content":{"application/json":{"schema":{"$ref":"#/components/schemas/Models.DarkWebTelegramPost"},"example":{"id":"d7443de3-ad45-4ec5-91d2-d465b0fe2f73","project_id":"1e4d2e74-1c31-4116-a33d-8806e1b3ef29","type":"DARK_WEB_TELEGRAM_POST","module":"DARK_WEB_MONITORING","risk_level":"INFORMATIONAL","is_resolved":false,"date_added":"2024-03-15T10:30:00.000Z","tags":["CREDIT_CARDS","MARKETPLACE","COMBO_LIST"],"dark_web_monitoring_rule_name":"Company Credentials Monitor","channel_name":"DataLeaksChannel","channel_title":"Data Leaks & Breaches","author":"anonymous_seller","posted_at":"2024-03-14T22:15:00.000Z","scraped_at":"2024-03-15T01:00:00.000Z","url":"https://t.me/DataLeaksChannel/12345","content":"Selling fresh credentials from recent database breach. DM for details.","query":"example AND tags:CREDIT_CARDS"}}}},"400":{"description":"The server cannot or will not process the request due to an error made by the client.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-400-bad-request","title":"Bad Request","status":400,"instance":"/v1/resource/123","errors":{"FIELD A":["ERROR 1","ERROR 2"],"FIELD B":["ERROR 3"]}}}}},"401":{"description":"The server has received and understood the request but is unable to authenticate it.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-401-unauthorized","title":"Unauthorized","status":401,"detail":"User unauthorized.","instance":"/v1/resource/123"}}}},"403":{"description":"The server has received and understood the request but is unable to authorize it.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-403-forbidden","title":"Forbidden","status":403,"detail":"The user is not allowed to do an action for the specified resource.","instance":"/v1/resource/123"}}}},"500":{"description":"The server has encountered a situation it does not know how to handle.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-500-internal-server-error","title":"Internal Server Error","status":500,"detail":"Something went wrong","instance":"/v1/resource/123"}}}}}}},"/v3/events/data-breaches/{event-id}":{"get":{"tags":["Events"],"summary":"Retrieves data breach event details.","parameters":[{"name":"event-id","in":"path","description":"Unique identifier of the event","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"The request has succeeded","content":{"application/json":{"schema":{"$ref":"#/components/schemas/DataBreach.DataBreach"},"example":{"id":"52c6fd64-8e91-46f2-ba5a-8761e103f9cf","project_id":"1e4d2e74-1c31-4116-a33d-8806e1b3ef29","type":"DATA_BREACH","module":"LEAKED_DATA","risk_level":"HIGH","is_resolved":false,"date_added":"2020-05-01T08:06:32.000Z","official_breach_date":"2020-01-01T08:00:00.000Z","asset":{"type":"EMAIL","value":"test@example.com"},"tags":["CREDENTIALS","PII"],"data_keys":"country,email,password","description":"Example.com experienced a data breach. Breach happened on the 1st of May 2020","data_breach_type":"IDENTIFIED","data_points":[{"data_key":"email","values":["test@example.com"]},{"data_key":"password","values":["password123"]}]}}}},"400":{"description":"The server cannot or will not process the request due to an error made by the client.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ValidationProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-400-bad-request","title":"Bad Request","status":400,"instance":"/v1/resource/123","errors":{"FIELD A":["ERROR 1","ERROR 2"],"FIELD B":["ERROR 3"]}}}}},"401":{"description":"The server has received and understood the request but is unable to authenticate it.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-401-unauthorized","title":"Unauthorized","status":401,"detail":"User unauthorized.","instance":"/v1/resource/123"}}}},"403":{"description":"The server has received and understood the request but is unable to authorize it.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-403-forbidden","title":"Forbidden","status":403,"detail":"The user is not allowed to do an action for the specified resource.","instance":"/v1/resource/123"}}}},"500":{"description":"The server has encountered a situation it does not know how to handle.","content":{"application/problem+json":{"schema":{"$ref":"#/components/schemas/ProblemDetails"},"example":{"type":"https://datatracker.ietf.org/doc/html/rfc9110#name-500-internal-server-error","title":"Internal Server Error","status":500,"detail":"Something went wrong","instance":"/v1/resource/123"}}}}}}},"/v3/events/domain-permutations/{event-id}":{"get":{"tags":["Events"],"summary":"Retrieves domain permutation event details.","parameters":[{"name":"event-id","in":"path","description":"Unique identifier of the event","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"The request has succeeded","content":{"application/json":{"schema":{"$ref":"#/components/schemas/DomainPermutation.DomainPermutation"},"example":{"id":"1ea1494c-d1e7-4e7d-a87b-e69f4165e646","project_id":"1e4d2e74-1c31-4116-a33d-8806e1b3ef29","type":"DOMAIN_PERMUTATION","module":"DOMAIN_SQUATTING","risk_level":"HIGH","is_resolved":true,"date_added":"2023-02-01T05:18:00.000Z","tags":["dormant_infrastructure","suspicious_infrastructure","tld-swap"],"original_domain":"example.com","domain":"examble.com","permutation_type":"dictionary","detected_at":"2023-02-01T04:18:00.000Z","geo_ips":[{"address":"109.235.74.225","country_name":"The Netherlands","country_code_iso2":"NL"}],"whois":{"name":"REDACTED FOR PRIVACY","organization":"REDACTED FOR PRIVACY","registrar":"Realtime Register B.V.","contacts":"rt

# --- truncated at 32 KB (82 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/nord-security/refs/heads/main/openapi/nord-security-nordstellar-platform-integration-api-v3-openapi.json