Threat check API

Lightweight lookup for wallets, dapps, and backends: given an EVM address, returns whether SpotBlock currently lists it as a known threat entry. There is no API key; use your production site origin as the base URL.

Endpoints

GET /api/threat-check?address=0x…

POST /api/threat-check with JSON body { "address": "0x…" }

Addresses must be valid EIP-55 checksummed or correctly formatted hex; invalid input returns 400.

Response

outcome is either threat (listed) or safe (not listed). address is echoed in normalized checksummed form. source is always spotblock_db and identifies the intelligence backing the answer without exposing internal storage details.

{
  "address": "0x0000000000000000000000000000000000000000",
  "outcome": "safe",
  "source": "spotblock_db"
}

Semantics

safe means the address does not appear in SpotBlock's published threat listings at query time. It is not a guarantee that an address is benign on-chain.
threat means the address matches a record in the same dataset that powers the public Explorer.
GET responses may include a short private cache header; treat results as near-real-time, not a legal verdict.