Skip to main content
Get a breakdown of victim counts per country (ISO 3166-1 alpha-2). Use to power a “global exposure” map or to identify which regions are most affected by infostealer activity.

​
Request

GET /v1/stats/countries · Required scope: none — any valid key · Not paginated Response is not tier-masked and is cached for 15 minutes.

​
Example request

curl -X GET https://api.vantaprism.me/v1/stats/countries \
  -H "api-key: $VANTAPRISM_API_KEY"

​
Response

200 OK — array of StatsCountryEntry. 
{
  "data": [
    { "country": "US", "victims": 41204982 },
    { "country": "BR", "victims": 18204771 },
    { "country": "IN", "victims": 15893012 },
    { "country": "DE", "victims": 8104223 }
  ],
  "meta": {
    "request_id": "req_01HZXK3Q7N8YV6F3M2P9JABCDE",
    "took_ms": 5.1,
    "tier": "free",
    "masked_fields": []
  }
}
FieldDescription
countryISO 3166-1 alpha-2 country code
victimsNumber of distinct victims in this country

​
Not paginated

This endpoint returns the full breakdown in a single response — cursor/limit/sort_direction do not apply.

​
Errors

See Errors for the full catalog. Only the standard auth and rate-limit errors apply — there is no endpoint-specific validation.

​
Tier notes

This endpoint is not tier-masked — all tiers receive identical values. Responses are cached for 15 minutes.