Recent Updates
API consumers can now hotlink ransomware screenshots directly by appending
?key=your-api-key to any image URL returned in the Ransomware feed/export. This allows embedding threat intel
screenshots in dashboards, reports, and external tools without downloading them first.
https://dwi.darkwebinformer.com/dwi/screenshots/insomnia/Copier%20Careers.png?key=your-api-key
NOTE: Screenshot hotlinking is rate-limited to 20 requests per 20 minutes per API key. This is separate from your daily API call quota. All image requests are actively monitored. Scraping or bulk-downloading of screenshots is strictly prohibited and constitutes a violation of the Terms of Service you agreed to upon signing up for the API. If scraping or abuse is detected, your API access may be terminated immediately without refund. If you need higher limits or bulk access, please reach out to me directly.
Added 277 new alerts to the threat feeds under the Cyber Attack category, primarily consisting of news articles covering recent cyber attacks.
New export endpoint available under IOC → Exports. Provides a full IOC history export in JSON format. Recommended to use scripts to download — the file is very large.
New export endpoint available under News → Exports. Provides cybersecurity news in NDJSON format, aggregated from 9 trusted cybersecurity news sources. Additional sources will be added gradually.
By using this API, you agree to the Terms of Service and the Privacy Policy.