API Documentation

Overview

The ScamFraud.info API provides programmatic access to scam asset data. All endpoints return only assets that have been identified as scams by the community (scam_votes > ok_votes).

To ensure fair usage and system stability, all API endpoints are rate-limited:

• Limit: 10 requests per IP address
• Window: 2 hours (7,200 seconds)
• Headers: Rate limit information is included in response headers

Response Format

All successful responses return JSON with the following structure:

{
  "type": "domain",
  "total": 1234,
  "count": 100,
  "offset": 0,
  "limit": 100,
  "data": [
    {
      "id": "uuid",
      "type": "domain",
      "value": "example.com",
      "display_value": "example.com",
      "ok_votes": 2,
      "scam_votes": 15,
      "created_at": "2024-01-01T00:00:00Z"
    }
  ]
}

Response Headers

All responses include rate limit information in headers:

• X-RateLimit-Limit: Maximum number of requests allowed (10)
• X-RateLimit-Remaining: Number of requests remaining in the current window
• X-RateLimit-Reset: Unix timestamp when the rate limit resets

Error Responses

{
  "error": "Invalid asset type. Valid types are: domain, url, email, iban, crypto, phone"
}

{
  "error": "Rate limit exceeded",
  "message": "Maximum 10 requests per 2 hours. Please try again after...",
  "resetAt": "2024-01-01T02:00:00Z"
}

{
  "error": "Internal server error"
}

Authentication

All API endpoints are public and do not require authentication. Rate limiting is enforced per IP address to ensure fair usage.