stealthmole-cds-search
Search compromised device leak information using StealthMole Compromised Data Set API.
stealthmole-cds-search [profile=PROFILE] query=QUERY [limit=LIMIT] [order=ORDER] [duration=DURATION] [from=FROM] [to=TO]
- profile=PROFILE
- Optional. StealthMole connect profile code
- query=QUERY
- Required. Search keyword (supports domain:, url:, email:, id:, password:, ip:, country:, after:, before: indicators, AND/OR/NOT operators)
- limit=LIMIT
- Optional. Maximum number of results to retrieve (default: 50)
- order=ORDER
- Optional. Sort direction (asc, desc). Default: desc
- duration=DURATION
- Optional. Search duration (e.g. 30d, 1h)
- from=FROM
- Optional. Start time filter (e.g. 20250101)
- to=TO
- Optional. End time filter (e.g. 20260101)
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| _time | Date | Time | e.g. 2026-02-06 10:22:23+0900 |
| profile | String | Profile | Connect profile code of StealthMole |
| id | String | ID | e.g. t3xpyYHzr2K728+qSdPmDn... |
| url | String | URL | e.g. https://logpresso.store/ |
| user | String | User | e.g. user@example.com |
| password | String | Password | e.g. P@ssw0rd |
| leaked_at | Date | Leaked At | e.g. 2026-01-21 15:55:34+0900 |
| ip | IP | IP | e.g. 103.165.224.226 |
| user_name | String | User Name | e.g. user |
| hostname | String | Hostname | e.g. DESKTOP-S2E4B6I |