{"uid":"cap_A0jReHthNtPxZUPWtdxCs","slug":"relayshield-scamkit-fingerprint-api-afe01a23","name":"RelayShield Scamkit Fingerprint API","description":"Identity security, threat monitoring and intelligence for the agentic AI era. TAP verifier for agentic commerce, MCP Proxy Firewall for AI agents, and threat intelligence APIs backed by 725K indicators across 129 monitored marketplaces.","url":"https://api.relayshield.net/v1/payg/scamkit-fingerprint?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"url":{"type":"string","description":"Live URL to fingerprint (static HTML fetch only in v1 — no JS rendering)"},"html":{"type":"string","description":"Caller-supplied kit HTML (alternative to url; submit rendered HTML for JS-heavy kits)"},"source":{"type":"string","description":"Optional caller tag for the sighting"}}},"responseSchema":{"type":"json","example":{"ok":true,"data":{"verdict":"known_kit","confidence":0.92,"kit_family":"parcel-smish-eu-04","family_status":"suggested","fingerprint_id":"kit_9f2c4a1b3d5e6f708192a3b4c5d6e7f8091a2b3c4d5e6f708192a3b4c5d6e7f8","sightings_count":7}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.5","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.5/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.5","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.5","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_slgyBffcECSc9pY3g8Mtn","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.5","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Fingerprints a phishing or scam kit by URL or HTML, returning a verdict, confidence score, kit family, and sighting count against a threat intelligence database of 725K+ indicators.","exampleAgentPrompt":"Can you fingerprint this suspicious URL — https://track-parcel-update.eu/verify — to check if it's a known phishing or smishing kit, and tell me what kit family it belongs to and how many times it's been spotted?","exampleUseCases":[{"title":"Smishing URL triage for SOC analyst","prompt":"We just got a report of a smishing link targeting our customers: https://parcel-redelivery-uk.com/login — can you fingerprint it to see if it's a known scam kit, what family it belongs to, and how confident the match is?"},{"title":"Phishing HTML analysis from rendered page","prompt":"I've got the rendered HTML from a suspicious JS-heavy phishing page pretending to be a bank login — can you run it through scam kit fingerprinting and tell me if it matches any known kit family and how many previous sightings exist?"},{"title":"Automated threat intel enrichment pipeline","prompt":"For each suspicious URL flagged in our brand-abuse feed, can you fingerprint it against known scam kits and tag each one with its kit family, confidence score, and sighting count so we can prioritize takedowns?"}],"resultDescription":"Returns a JSON object with: ok (boolean), verdict (e.g. 'known_kit', 'unknown'), confidence score (0–1), kit_family name, family_status (e.g. 'suggested'), a unique fingerprint_id, and sightings_count indicating how many times the kit has been observed across monitored marketplaces.","failureModes":["URL is unreachable or returns non-HTML content — static fetch only, no JS rendering in v1","JS-heavy kits may not be fully analyzed via URL fetch; caller should submit rendered HTML instead","Unknown or novel kits return low confidence scores with no kit_family match","Invalid or malformed URL/HTML input returns a 400 error","Rate limits or payment failures via x402 protocol return 402 errors"],"whenToPreferThis":"Use this endpoint when you need to classify a specific URL or HTML blob as a known phishing or scam kit with a confidence score and family attribution. It is purpose-built for scam kit fingerprinting backed by 725K+ threat indicators across 129 marketplaces, making it more specialized than generic URL reputation or safe-browsing APIs. Prefer this over domain reputation lookups when you need kit-level attribution (family name, sighting count, fingerprint ID) rather than just a malicious/benign verdict.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-31T12:32:08.544Z","isFirstParty":false,"canonicalSlug":"relayshield-scamkit-fingerprint-api-afe01a23"}