Skip to main content
POST
/
v1
/
search
/
advanced
Multi-field AND-logic cross-filter search
curl --request POST \
  --url https://api.vantaprism.me/v1/search/advanced \
  --header 'Content-Type: application/json' \
  --header 'api-key: <api-key>' \
  --data '
{
  "domains": [
    "acme-corp.com"
  ],
  "stealer_family": "RedLine",
  "country": "DE",
  "limit": 25
}
'
{
  "data": [
    {
      "stealer_id": "<string>",
      "victim_id": "<string>",
      "username": "<string>",
      "password": "<string>",
      "domain": "<string>",
      "url": "<string>",
      "infection_date": "2023-11-07T05:31:56Z"
    }
  ],
  "meta": {
    "request_id": "req_01HZXK3Q7N8YV6F3M2P9JABCDE",
    "took_ms": 42.7,
    "tier": "pro",
    "masked_fields": [
      "password",
      "ip"
    ],
    "freshness_at": "2023-11-07T05:31:56Z"
  },
  "nextCursor": "<string>"
}

Authorizations

api-key
string
header
required

Static API key, format vp_<env>_<8-hex-prefix>.<40-hex-secret>. Preferred header for server-to-server integrations.

Body

application/json

At least one of domains, emails, ips, pc_names, stealer_family, or country is required. All provided filters are AND-combined.

domains
string[]
emails
string[]
ips
string[]
pc_names
string[]
stealer_family
string | null

Stealer family name, e.g. "RedLine", "LummaC2".

country
string | null

ISO 3166-1 alpha-2 country code, e.g. "US", "DE".

start_date
string<date-time> | null
end_date
string<date-time> | null
sort_direction
enum<string>
default:desc

Sort order applied to inserted_at. Must stay constant across paginated requests using the same cursor.

Available options:
asc,
desc
cursor
string | null
limit
integer
default:25
Required range: 1 <= x <= 500

Response

Matching records

data
object[]
required
meta
object
required

Metadata attached to every successful response.

nextCursor
string | null