REST API v1

Build with ScamLens API

Add real-time website, wallet, and message risk checks to your product through a simple REST API.

30+

Intel Sources

Languages

99.95%+

Uptime

Get API Key Full API Docs

Quick Start

Create Account

Generate API Key

Create keys in your dashboard with one click

Start Building

Make your first API call

# Free tier: heuristic-only check (no API key, no provider pipeline)
curl "https://api.scamlens.org/v1/public/check?domain=suspicious-site.xyz"

# Paid tier: real-time multi-provider check (Pro+, requires API key)
curl -X POST "https://api.scamlens.org/v1/api/check/domain" \
  -H "Authorization: Bearer your-key" \
  -H "Content-Type: application/json" \
  -d '{"domain": "example.com"}'

# Batch check (Pro+)
curl -X POST "https://api.scamlens.org/v1/public/check/batch" \
  -H "X-API-Key: your-key" \
  -H "Content-Type: application/json" \
  -d '{"domains": ["example.com", "suspicious.xyz"]}'

import requests

# Quick check
resp = requests.get(
    "https://api.scamlens.org/v1/public/check",
    params={"domain": "suspicious-site.xyz"},
    headers={"X-API-Key": "your-key"}
)
print(resp.json())

# Full intelligence (Starter+)
resp = requests.post(
    "https://api.scamlens.org/v1/public/domain/intelligence",
    json={"domain": "example.com"},
    headers={"X-API-Key": "your-key"}
)

// Quick check
const res = await fetch(
  "https://api.scamlens.org/v1/public/check?domain=suspicious-site.xyz",
  { headers: { "X-API-Key": "your-key" } }
);
const data = await res.json();

// Full intelligence (Starter+)
const intel = await fetch(
  "https://api.scamlens.org/v1/public/domain/intelligence",
  {
    method: "POST",
    headers: {
      "X-API-Key": "your-key",
      "Content-Type": "application/json"
    },
    body: JSON.stringify({ domain: "example.com" })
  }
);

// Quick check
req, _ := http.NewRequest("GET",
  "https://api.scamlens.org/v1/public/check?domain=suspicious-site.xyz", nil)
req.Header.Set("X-API-Key", "your-key")
resp, _ := http.DefaultClient.Do(req)
defer resp.Body.Close()

body, _ := io.ReadAll(resp.Body)
fmt.Println(string(body))

Free tier endpoints work without authentication. Add your API key for higher rate limits and premium features.

API Endpoints

GET /v1/public/check Free

Try it →

Quick Heuristic Check (free)

Free-tier heuristic score (TLD risk, brand-impersonation patterns, cached threat intel). No API key required. For real-time multi-provider analysis use POST /v1/api/check/domain (paid).

{ "score": 85, "risk_level": "safe", "heuristic": true, "signals": [...] }

POST /v1/api/check/domain Pro

Try it →

Real-time Multi-provider Check (paid)

Run all 30+ threat intel providers in parallel (Google Safe Browsing, VirusTotal, PhishTank, URLhaus, ThreatFox, etc.). Per-provider verdicts in response. Requires API key.

{ "providers_checked": 22, "threats_found": 0, "results": [...] }

POST /v1/public/domain/intelligence Starter

Try it →

Full Intelligence

Comprehensive domain analysis: WHOIS, DNS, SSL, threats, registration data.

{ "domain": "...", "threatSources": [...], "sslInfo": {...} }

GET /v1/public/domain/risk-summary Starter

Try it →

AI Risk Summary

AI-generated risk assessment in 12 languages.

{ "risk_level": "high", "summary": "This domain shows signs of..." }

POST /v1/public/crypto/intelligence Starter

Try it →

Crypto Address Check

Analyze crypto addresses across 6 EVM chains + Bitcoin/Solana.

{ "address": "0x...", "risk": "medium", "labels": ["mixer"] }

POST /v1/public/check/batch Pro

Try it →

Batch Check

Check up to 50 domains in a single request.

{ "results": [{ "domain": "...", "score": 85 }, ...] }

POST /v1/public/analyze Pro

Try it →

Content Analysis

Analyze suspicious messages, emails, or chat logs and turn them into clearer risk signals.

{ "verdict": "scam", "confidence": 0.94, "indicators": [...] }

GET /v1/public/threats Free

Try it →

Threat Feed

Consume a paginated feed of newly flagged websites and blockchain risk records.

{ "threats": [...], "total": 1234, "page": 1 }

Enterprise B2B API

Enterprise

Unified threat detection endpoints for enterprise integrations. Check domains, phones, wallets, and IPs through a single authenticated API.

POST /v1/api/check/domain

Domain Threat Check

Comprehensive domain analysis: trust score, threat sources, WHOIS, DNS, SSL, AI risk summary. 30+ intelligence sources.

POST /v1/api/check/phone

Phone Intelligence Lookup

Phone number risk assessment: carrier info, spam reports, fraud likelihood, geographic data.

POST /v1/api/check/wallet

Crypto Wallet Risk Check

Wallet address analysis across 8 chains: risk labels, transaction patterns, behavioral risk scoring (sanctions screening on Roadmap v2).

POST /v1/api/check/ip

IP Risk Check

IP reputation check: geolocation, proxy/VPN detection, abuse reports, threat score.

Authentication

All B2B endpoints require an Enterprise API key passed via the X-API-Key header.

X-API-Key: sk_enterprise_xxxxxxxxxxxxxxxx

Code Examples

# Domain threat check
curl -X POST "https://api.scamlens.org/v1/api/check/domain" \
  -H "X-API-Key: sk_enterprise_xxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{"domain": "suspicious-site.xyz"}'

# Phone intelligence lookup
curl -X POST "https://api.scamlens.org/v1/api/check/phone" \
  -H "X-API-Key: sk_enterprise_xxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{"phone": "+1-555-0123", "country": "US"}'

# Crypto wallet risk check
curl -X POST "https://api.scamlens.org/v1/api/check/wallet" \
  -H "X-API-Key: sk_enterprise_xxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{"address": "0x742d35Cc6634C0532925a3b844Bc9e7595f2bD18", "chain": "ethereum"}'

# IP risk check
curl -X POST "https://api.scamlens.org/v1/api/check/ip" \
  -H "X-API-Key: sk_enterprise_xxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{"ip": "203.0.113.42"}'

import requests

API_KEY = "sk_enterprise_xxxxxxxx"
BASE = "https://api.scamlens.org/v1/api/check"
headers = {"X-API-Key": API_KEY, "Content-Type": "application/json"}

# Domain check
resp = requests.post(f"{BASE}/domain", json={"domain": "suspicious-site.xyz"}, headers=headers)
print(resp.json())

# Phone check
resp = requests.post(f"{BASE}/phone", json={"phone": "+1-555-0123", "country": "US"}, headers=headers)

# Wallet check
resp = requests.post(f"{BASE}/wallet", json={
    "address": "0x742d35Cc6634C0532925a3b844Bc9e7595f2bD18",
    "chain": "ethereum"
}, headers=headers)

# IP check
resp = requests.post(f"{BASE}/ip", json={"ip": "203.0.113.42"}, headers=headers)

const API_KEY = "sk_enterprise_xxxxxxxx";
const BASE = "https://api.scamlens.org/v1/api/check";

async function checkDomain(domain) {
  const res = await fetch(`${BASE}/domain`, {
    method: "POST",
    headers: {
      "X-API-Key": API_KEY,
      "Content-Type": "application/json"
    },
    body: JSON.stringify({ domain })
  });
  return res.json();
}

// Check all entity types
const [domainResult, phoneResult, walletResult, ipResult] = await Promise.all([
  checkDomain("suspicious-site.xyz"),
  fetch(`${BASE}/phone`, {
    method: "POST",
    headers: { "X-API-Key": API_KEY, "Content-Type": "application/json" },
    body: JSON.stringify({ phone: "+1-555-0123", country: "US" })
  }).then(r => r.json()),
  fetch(`${BASE}/wallet`, {
    method: "POST",
    headers: { "X-API-Key": API_KEY, "Content-Type": "application/json" },
    body: JSON.stringify({ address: "0x742d...", chain: "ethereum" })
  }).then(r => r.json()),
  fetch(`${BASE}/ip`, {
    method: "POST",
    headers: { "X-API-Key": API_KEY, "Content-Type": "application/json" },
    body: JSON.stringify({ ip: "203.0.113.42" })
  }).then(r => r.json()),
]);

Response Format

POST /v1/api/check/domain

{
  "success": true,
  "data": {
    "domain": "suspicious-site.xyz",
    "trust_score": 23,
    "risk_level": "high",
    "threats": [
      { "source": "Google Safe Browsing", "type": "phishing", "confidence": 0.95 },
      { "source": "VirusTotal", "type": "malware", "confidence": 0.87 }
    ],
    "whois": { "registrar": "...", "created": "2024-01-15", "expires": "2025-01-15" },
    "ai_summary": "This domain shows strong indicators of phishing...",
    "sources_checked": 90,
    "checked_at": "2026-03-29T10:30:00Z"
  }
}

Get Enterprise API Key

Contact our sales team for enterprise pricing and dedicated support.

Contact Sales Get API Key

Rate Limits & Quotas

Choose the plan that fits your integration needs.

Feature	Free	Starter	Pro	Enterprise
Monthly requests	500	3,000	10,000	Unlimited
Rate limit	10/min	30/min	60/min	300/min
Daily lookups	10	50	200	Unlimited
Batch check	—	—	50 domains	100 domains
Full intelligence	—
AI summaries	—
Webhooks	—	—
SLA	—	—	—	99.99%

Simple, Transparent Pricing

Start free. Scale as you grow. No hidden fees.

mo Annual billing Save 20%

Free

For exploration and testing

500 monthly requests

Basic domain check (score + risk level)
Threat feed access
Community data
10 requests/min rate limit

Start Free

Custom

Enterprise

For large-scale operations

$199 + /mo

Custom volume, SLA & integration

Everything in Pro
Deep investigations API
Custom integrations
Dedicated support
SLA guarantee (99.99%)
Custom webhook events

Contact Sales

Ready to Integrate?

Everything you need to get started building with the ScamLens API.

API Documentation

Complete endpoint reference with interactive examples.

Explore Docs

SDKs & Libraries

Official client libraries for popular languages.

View on GitHub

Start Here

Safety Check

Intelligence

Tools & Reports

Premium Services

Extension & API

Build with ScamLens API

Quick Start

Create Account

Generate API Key

Start Building

API Endpoints

Enterprise B2B API

Domain Threat Check

Phone Intelligence Lookup

Crypto Wallet Risk Check

IP Risk Check

Authentication

Code Examples

Response Format

Get Enterprise API Key

Rate Limits & Quotas

Simple, Transparent Pricing

Free

Enterprise

Ready to Integrate?

API Documentation

SDKs & Libraries