stealthmole-dt-node
Get detailed information of a search result using StealthMole Dark Web Tracker API.
stealthmole-dt-node [profile=PROFILE] id=ID [pid=PID] [data-from=t] [include-url=t] [include-contents=f]
- profile=PROFILE
- Optional. StealthMole connect profile code
- id=ID
- Required. Node ID (data.id from search result)
- pid=PID
- Optional. Parent node ID (id from search result)
- data-from=BOOLEAN
- Optional. Include data source list (t/f)
- include-url=BOOLEAN
- Optional. Include URL list (t/f)
- include-contents=BOOLEAN
- Optional. Include HTML source contents (t/f, default: t)
Output Fields
Output fields vary depending on the indicator type. Field names are normalized to snake_case.
adsense
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| adsense_id | String | Adsense ID |
| data_from | Array | List of source URLs including Adsense |
analyticsid
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| analytics_id | String | Google Analytics ID |
| data_from | Array | List of source URLs including Google Analytics ID |
blueprint
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| md5 | String | MD5 hash |
| sha1 | String | SHA1 hash |
| sha256 | String | SHA256 hash |
| file_name | String | File name |
| String | SHA256 hash of the converted PDF |
creditcard
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| credit_card | String | Card number |
| company | Array | Card company |
| name | String | Card name |
| type | String | Card type |
| data_from | Array | List of source URLs |
document
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| file_name | String | File name |
| file_size | Integer | File size |
| file_type | String | File type |
| md5 | String | MD5 hash |
| sha1 | String | SHA1 hash |
| sha256 | String | SHA256 hash |
| file_owner | String | Creator |
| file_ctime | String | Creation date |
| file_mtime | String | Modified date |
| url | String | File link |
| total_count | Integer | Number of files found |
| text | String | String in file |
| data_from | Array | List of source URLs |
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| String | ||
| pgp | Object | PGP details |
| pgp.fingerprint | String | PGP fingerprint |
| pgp.raw_data | String | PGP public key |
| google_drive_url | String | Google Drive URL |
| eml_hash | String | SHA256 hash of leaked mail |
| linkedin_url | String | Linkedin URL |
| data_from | Array | List of source URLs |
exefile
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| file_name | String | Exe file name |
| file_type | String | Exe file type |
| file_size | String | Exe file size |
| cpu_arch | String | CPU information |
| md5 | String | MD5 hash |
| sha1 | String | SHA1 hash |
| sha256 | String | SHA256 hash |
| file_ctime | String | Creation date |
| url | String | File link |
| total_count | Integer | Number of files found |
| data_from | Array | List of source URLs |
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| facebook_url | String | Facebook URL |
| birthday | String | Birthday |
| hometown | String | Hometown |
| gender | String | Gender |
| work | String | Work |
| facebook_username | String | Username |
| first_name | String | First name |
| last_name | String | Last name |
| facebook_uid | String | Facebook UID |
| relationship_status | String | Relationship status |
| phone | String | Phone number |
| location | String | Location |
| String | ||
| data_from | Array | List of source URLs |
filehosting
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| url | String | File hosting URL |
| type | String | File hosting type |
| files | Array | File information |
| files.file_name | String | File name |
| files.file_size | String | File size |
| files.file_ext | String | File extension |
| data_from | Array | List of source URLs |
googledrive
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| url | String | Google drive link |
| google_uid | String | Google UID |
| owner_name | String | Owner name |
| String | Owner email | |
| file_size | String | File size |
| photo_link | String | Profile image link |
| file_ctime | String | File creation date |
| file_mtime | String | File modification date |
| data_from | Array | List of source URLs |
gps
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| latitude | String | Latitude |
| longitude | String | Longitude |
| image_from | Array | Images with same GPS information |
| data_from | Array | List of image links |
hashstring
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| hash | String | Hash string |
| type | String | Hash type |
| data_from | Array | List of source URLs |
id
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| id | String | ID |
| type | Object | ID type details |
| type.type | String | ID type |
| type.category | String | ID category |
| data_from | Array | List of source URLs |
image
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| file_name | String | Image file name |
| md5 | String | MD5 hash |
| sha1 | String | SHA1 hash |
| sha256 | String | SHA256 hash |
| gps | String | GPS information |
| url | String | Image link |
| type | String | Image type |
| file_size | Integer | File size |
| resolution | Object | Image resolution |
| resolution.width | Integer | Image width |
| resolution.height | Integer | Image height |
| text | String | OCR extracted text |
| file_ctime | String | Image creation date |
| total_count | Integer | Number of files found |
| data_from | Array | List of source URLs |
ip
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| ip | String | IP Address |
| country_name | String | Country name |
| country_code | String | Country code |
| location | String | Location details |
| organization | String | Hosting organization |
| data_from | Array | List of source URLs |
leakedaudio
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| sha256 | String | Hash of the audio file |
| file_type | String | Audio file type |
| file_size | Integer | File size |
| length | Integer | Audio length |
| file_ctime | String | Creation date |
| text | String | STT text |
leakedemailfile
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| hash | String | SHA256 hash of the email file |
| mail_cc | Array | CC sent email list |
| date | String | Date of the email |
| mail_subject | String | Subject |
| mail_from | Array | Sender's email |
| mail_to | Array | Receiver's email |
| attachments | Array | Attachment details |
| attachments.file_name | String | Attachment file name |
| attachments.extension | String | Attachment extension |
| attachments.md5 | String | Attachment MD5 hash |
| attachments.sha1 | String | Attachment SHA1 hash |
| attachments.sha256 | String | Attachment SHA256 hash |
| attachments.file_size | String | Attachment file size |
| content | String | Body of email |
malware
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| md5 | String | MD5 hash |
| sha1 | String | SHA1 hash |
| sha256 | String | SHA256 hash |
| file_size | String | File size |
| type | String | Malware type |
| domain | Array | Domains malware connects to |
telegram
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| url | String | Telegram link |
| type | String | Messenger type |
| subtype | String | Telegram type |
| name | String | Name |
| username | String | Username |
| bio | Array | User bio |
| data_from | Array | List of source URLs |
discord
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| url | String | Discord link |
| type | String | Messenger type |
| data_from | Array | List of source URLs |
line
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| url | String | Line link |
| type | String | Messenger type |
| data_from | Array | List of source URLs |
kakaotalk
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| url | String | Kakaotalk link |
| type | String | Messenger type |
| subtype | String | Kakaotalk type |
| data_from | Array | List of source URLs |
session
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| session | String | Session ID |
| type | String | Session type |
| subtype | String | Session subtype |
| data_from | Array | List of source URLs |
otherfile
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| file_name | String | File name |
| md5 | String | MD5 hash |
| sha1 | String | SHA1 hash |
| sha256 | String | SHA256 hash |
| url | String | File link |
| file_type | String | File type |
| file_size | Integer | File size |
| text | String | OCR extracted text |
| total_count | Integer | Number of files found |
| data_from | Array | List of source URLs |
pastebin
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| url | String | Pastebin link |
| data_from | Array | List of source URLs |
pgp
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| register_name | String | PGP username |
| raw_data | String | PGP certificate |
| created | String | Certificate creation time |
| String | Email in certificate | |
| algorithm | String | Certificate algorithm |
| data_from | Array | List of source URLs |
serverstatus
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| url | String | Server-status URL |
| vhost_surface | Array | Surface web information |
| vhost_surface.domain | String | Surface web domain |
| vhost_surface.ip | String | Domain IP address |
| vhost_tor | Array | Dark web domain information |
shorten
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| url | String | Shortened URL |
| type | String | Shortened URL type |
| data_from | Array | List of source URLs |
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| url | String | Instagram URL |
| type | String | SNS type |
| data_from | Array | List of source URLs |
sshkey
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| fingerprint | String | SSH fingerprint |
| servers | Array | Server details |
| servers.domain | String | Server domain |
| servers.banner | String | SSH connection banner |
sslkey
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| fingerprint | String | SSL certificate fingerprint |
| x509_cn | String | Common name |
| x509_serial | String | Serial number |
| x509_location | String | Location |
| x509_org | String | Organization |
| industry_sector | String | Business category |
| country_name | String | Country name |
| jurisdiction_country_name | String | Jurisdiction country |
| data_from | Array | List of domains |
kssn
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| country | String | Nationality |
| fnin | String | Foreign national identification number |
| nin | String | National identification number |
| birthday | String | Birth date |
| data_from | Array | List of source URLs |
tel
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| phone | String | Telephone number |
| data_from | Array | List of source URLs |
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| String | Twitter URL | |
| id | String | Identification ID |
| name | String | Name |
| screen_name | String | Twitter ID |
| location | String | Location |
| description | String | Bio |
| url | String | URL in profile |
| protected | String | Account protection status |
| verified | Boolean | Account verification status |
| default_profile | Boolean | Default profile status |
| profile_image_url_https | String | Profile image URL |
| file_name | String | Profile image file name |
| file_size | Integer | Profile image file size |
| md5 | String | Profile image MD5 hash |
| sha1 | String | Profile image SHA1 hash |
| sha256 | String | Profile image SHA256 hash |
| profile_image | String | Profile image hash |
| followers_count | Integer | Number of followers |
| friends_count | Integer | Number of mutual followers |
| listed_count | Integer | Number of lists |
| created | String | Creation date |
| favorite_count | Integer | Number of hearts |
| statuses_count | Integer | Number of statuses |
| tweets | Array | Tweet context |
| data_from | Array | List of source URLs |
leakedvideo
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| file_name | String | File name |
| file_type | String | Video file type |
| file_size | Integer | Video file size |
| length | String | Video duration |
| file_ctime | String | Video creation time |
| md5 | String | MD5 hash |
| sha1 | String | SHA1 hash |
| sha256 | String | SHA256 hash |
bitcoin
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| wallet | String | Bitcoin wallet address |
| detail | String | Bitcoin wallet detail info link |
| data_from | Array | List of source URLs |
ethereum
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| wallet | String | Ethereum wallet address |
| detail | String | Ethereum wallet detail info link |
| data_from | Array | List of source URLs |
monero
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| wallet | String | Monero wallet address |
| data_from | Array | List of source URLs |
tor, i2p, domain
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| domain | String | Domain |
| server_status | String | Server On/Off status |
| first_seen | String | First scanned date |
| last_seen | String | Last scanned date |
| title | String | Index page title |
| screenshot | String | Index page screenshot |
| webserver_info | String | Web server information |
| ip | String | Domain IP address |
| open_ports | Array | Opened port information |
| open_ports.port | Integer | Port number |
| open_ports.fingerprint | String | Fingerprint |
| open_ports.banner | String | Service banner |
| open_ports.type | String | Service type |
| open_ports.scanned_date | String | Port scanned date |
| data_from | Array | List of source URLs |
torurl, i2purl, url
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| url | String | URL |
| scanned_date | String | Contents collected date |
| content_size | Integer | Contents size |
| content_html | String | Contents HTML source code |
| included_urls | Array | List of links in the contents |
| data_from | Array | List of source URLs |
cve
| Field | Type | Description |
|---|---|---|
| profile | String | Connect profile code of StealthMole |
| cve | String | CVE code |
| data_from | Array | List of source URLs |