{"uid":"cap_lLoNdyw86rrI2I1SLdiam","slug":"relayshield-infostealer-email-lookup-da46e0f3","name":"RelayShield Infostealer Email Lookup","description":"RelayShield Landing Site","url":"https://api.relayshield.net/v1/payg/infostealer","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"email":{"type":"string","description":"Email address to check for infostealer compromise"}}},"responseSchema":{"type":"json","example":{"ok":true,"data":{"email":"user@example.com","found":false,"stealers":[],"stealer_count":0}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.15","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.15/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.15","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.15","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_i4mOU2gNB8TsYh6zCe1kW","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.15","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks whether a given email address appears in infostealer malware logs, returning matched stealer records and a count","exampleAgentPrompt":"Can you check if the email address john.doe@example.com has shown up in any infostealer malware logs or credential theft databases?","exampleUseCases":[{"title":"Personal account compromise check","prompt":"I want to know if my email address sarah.jones@gmail.com has been picked up by any infostealer malware — can you check the RelayShield database for me?"},{"title":"Security audit for employee emails","prompt":"We had a potential malware incident at work — can you check whether the email m.torres@mycompany.com appears in any infostealer logs so I can assess the exposure?"},{"title":"Pre-onboarding credential risk check","prompt":"Before we give this contractor access to our systems, can you verify if their email alex.nguyen@freelancer.io has been harvested by any infostealer malware?"}],"resultDescription":"Returns a JSON object with an 'ok' flag, the queried email, a boolean 'found' field indicating presence in infostealer logs, an array of matched stealer records ('stealers'), and a 'stealer_count' integer showing how many stealer logs matched.","failureModes":["Invalid or malformed email address returns an error or empty result","Email not found returns found:false with an empty stealers array — not an error","Service unavailable or timeout if the stealer database is unreachable","Missing or invalid payment header results in 402 payment required","Rate limiting may occur for high-volume queries"],"whenToPreferThis":"Use this endpoint when you need to check whether a specific email address appears in infostealer malware logs — particularly for threat intelligence, account security audits, or credential exposure monitoring. Prefer this over general data breach lookup services (like HaveIBeenPwned) when you specifically need infostealer-sourced compromise data rather than breach dump data.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T00:33:29.401Z","isFirstParty":false}