Initial response returned when a DarkRecon scan is created.
POST /scan.
scan_id: store this UUID and use it with GET /scan/{scan_id}.status: success, no_results, or no_queries.total_breaches: number of matched breach sources, not raw rows.discovered_emails: optional, only for domain-driven scans that enumerate breached addresses.message: optional context when the request resolves without usable search terms.scan_id to fetch the full result payload.Initial acknowledgement returned by POST /scan. Use scan_id with GET /scan/{scan_id} to retrieve full records.
Unique identifier for retrieving scan results via GET /scan/{scan_id}
Scan result status
success, no_results, no_queries Number of breach databases found
x >= 0Emails discovered from domain enumeration (only present when domain was provided)
Additional context (e.g. when no keywords were provided)