Skip to content

API Swagger

Changelog

Recent Updates

2026/2/16 New

API consumers can now hotlink ransomware screenshots directly by appending ?key=your-api-key to any image URL returned in the Ransomware feed/export. This allows embedding threat intel screenshots in dashboards, reports, and external tools without downloading them first.

https://dwi.darkwebinformer.com/dwi/screenshots/insomnia/Copier%20Careers.png?key=your-api-key

NOTE: Screenshot hotlinking is rate-limited to 20 requests per 20 minutes per API key. This is separate from your daily API call quota. All image requests are actively monitored. Scraping or bulk-downloading of screenshots is strictly prohibited and constitutes a violation of the Terms of Service you agreed to upon signing up for the API. If scraping or abuse is detected, your API access may be terminated immediately without refund. If you need higher limits or bulk access, please reach out to me directly.

Image URLs + ?key= Ransomware API

2026/1/22

Added 277 new alerts to the threat feeds under the Cyber Attack category, primarily consisting of news articles covering recent cyber attacks.

Cyber Attack 277 Alerts

2025/12/06

New export endpoint available under IOC → Exports. Provides a full IOC history export in JSON format. Recommended to use scripts to download — the file is very large.

GET /api/ioc/full JSON

2025/11/25

New export endpoint available under News → Exports. Provides cybersecurity news in NDJSON format, aggregated from 9 trusted cybersecurity news sources. Additional sources will be added gradually.

GET /api/export_news_latest.jsonl NDJSON

By using this API, you agree to the Terms of Service and the Privacy Policy.