The Snyfer API
Bring our scam-detection engine into your own product: trust scores, regulator warnings and scam-network intelligence, through one simple API.
What you can build with
The same intelligence that powers snyfer.com, exposed for your systems.
Scan and scoring
Trust score, verdict and category for any URL or domain in seconds.
Blacklists and reputation
Google Safe Browsing, Cloudflare and community blocklist verdicts. (VirusTotal not included.)
Regulator warnings
Financial-watchdog alerts worldwide, matched to a domain.
Threat graph and clusters
Connected domains, shared infrastructure and named scam networks.
Screenshots and assets
Rendered page screenshots, favicons, logos and brand assets.
Infrastructure
WHOIS, SSL, DNS, hosting, geolocation, security headers and tech stack.
Uptime monitoring
Daily availability history and status transitions per domain.
Reports API
Read community scam reports, or submit your own via POST.
Everything in a scan
A single scan returns dozens of signals, the same ones you see on a report page, structured for machines.
Scoring and classification
- Trust score (0 to 100)
- Verdict: safe to dangerous
- Category and sub-categories
- Confidence
Blacklists and reputation
- Google Safe Browsing (direct)
- Cloudflare phishing protection
- Community crypto and phishing feeds
- Phishing and malware flags
Regulatory
- Financial-regulator warnings
- Regulator, country, date and source URL
- Warning type
Threat graph
- Connected scam domains
- Named clusters and networks
- Shared IP, ASN, registrar, nameserver
- Template signatures
Infrastructure
- WHOIS: registrar, created, updated, expires, DNSSEC
- SSL: issuer, validity, protocol, SAN
- Hosting, ASN and IP geolocation
- Security headers
- Detected technologies
- DNS and redirect chain
Visual and brand
- Rendered page screenshot
- Favicons and icons
- Logo, OG and brand assets
- Brand or company name
Indicators (IOC)
- Emails, phones and addresses
- Telegram handles
- Crypto wallet addresses
Performance and network
- Page timing: DNS, TLS, TTFB, load
- Network stats: requests, bytes, HTTPS percentage
- HTTP transactions
- Cookies
Monitoring and reports
- Uptime history and status
- Community reports (read)
- Submit a report (POST)
- Exports: STIX 2.1, CSV, JSON
VirusTotal data is not included. Under VirusTotal's licensing terms we do not redistribute their antivirus-engine results through our API. If you need VirusTotal verdicts, use your own VirusTotal API key alongside ours.
A single request
GET https://api.snyfer.com/v1/scan?url=example-broker.com Authorization: Bearer <your-api-key>
{
"domain": "example-broker.com",
"trust_score": 12,
"verdict": "dangerous",
"category": "cryptocurrency",
"flags": {
"regulators": 2,
"blacklists": 3
},
"network": { "connected_domains": 41 },
"last_scanned": "2026-07-14"
}Illustrative. The full field reference is shared with your API key.
How to get started
Request access
Tell us about your use case. We grant API keys on a per-project basis.
Get your key
Receive a scoped API key and the endpoint reference for your project.
Start querying
Call the API from your backend and act on the trust score in your product.
Who it is for
Fintech and brokers
Block fraudulent counterparties before onboarding a user or partner.
Marketplaces
Vet seller and merchant links to keep scams off your platform.
Wallets and exchanges
Warn users in-app before they interact with a flagged crypto site.
Compliance and KYB
Enrich due-diligence workflows with live threat intelligence.
Access is granted on request
We provision API keys per project so we can tailor rate limits and data scope to your use case. Tell us what you are building and we will get you set up.
Request access