Paginated FortiBleed (Fortinet) compromise feed. Returns Fortinet domain records in the original (v1) schema (url, login, password, FortiGuardID, country). For the v2 schema with the FortiBleed v2 fields, use the FortiBleed v2 Feed (/fortinet/v2).
Requires the fortibleed api permission. A missing or invalid api-key returns 401; a valid key that lacks fortibleed returns 403.
Censoring follows the API key's permissions, exactly as in the FortiBleed v2 Feed. Masked characters are *.
| Field | Gate | Partial | Hidden |
|---|---|---|---|
login, FortiGuardID | usernames | first 2 chars of the part before @, rest *; the @domain stays visible | whole part before @ is *; the @domain stays visible |
password | passwords | first 2 chars, rest * | all * |
url, country and the domain-level fields are never censored. Missing values are null.
Results are returned in a stable, deterministic order (most compromised users first, then domain ascending) identical to the public website feed, so pagination is consistent across pages.
Example request:
curl -X POST 'https://api.hudsonrock.com/json/v3/fortinet?page=1&limit=20' \
-H 'api-key: YOUR_API_KEY'Example response (API key with the usernames and passwords permissions):
{
"data": [
{
"domain": "example.com",
"industry": "Financial Services",
"size": "1001-5000 Employees",
"revenue": "$500 Million",
"credentials": [
{
"url": "https://vpn.example.com:443/login",
"login": "david",
"password": "david",
"FortiGuardID": "FGT60F-XXXXXXXX",
"country": "US"
}
]
}
],
"total": 21632,
"page": 1,
"limit": 20,
"totalPages": 1082
}| Time | Status | User Agent | |
|---|---|---|---|
Retrieving recent requests… | |||
Paginated FortiBleed (Fortinet) compromise feed. Returns Fortinet domain records in the original (v1) schema (url, login, password, FortiGuardID, country).
For the v2 schema with the FortiBleed v2 fields, use the FortiBleed v2 Feed (/fortinet/v2).
Requires the fortibleed api permission.
A missing or invalid api-key returns 401; a valid key that lacks fortibleed returns 403.
Censoring follows the API key's permissions, exactly as in the FortiBleed v2 Feed.
Returns Fortinet domain records, each with fully UNCENSORED credential data (url, login, password, FortiGuardID, country) - no masking, no truncation.
Because it exposes uncensored credentials, this endpoint requires the fortibleed permission.
Results are returned in a stable, deterministic order (most compromised users first, then domain ascending) identical to the public website feed, so pagination is consistent across pages.
Example request:
curl --location --request POST 'https://api.hudsonrock.com/json/v3/fortinet?page=10' \
--header 'api-key: YOUR_API_KEY'Example response:
{
"data": [
{
"domain": "example.com",
"industry": "Financial Services",
"size": "1001-5000 Employees",
"revenue": "$500 Million",
"credentials": [
{
"url": "https://vpn.example.com:443/login",
"login": "david",
"password": "david",
"FortiGuardID": "FGT60F-XXXXXXXX",
"country": "US"
}
]
}
],
"total": 21387,
"page": 1,
"limit": 20,
"totalPages": 1070
}Response Limits
- Rate limit: 50 requests per 10 seconds
- Maximum response per page: 500 domains
- Maximum response time: 90 seconds