# PhantomOperator Threat Scan

> PhantomOperator Threat Scan is a paid API for AI agents from freysaai.freysa.dev, paid per call via x402, $0.1/call, status unknown (last checked 2026-10-29).

Scans the public web for PII exposure, credential breaches, data-broker listings, and privacy threats associated with a given full name

## Facts

- Endpoint: POST https://freysaai.freysa.dev/skills/threat-scan?utm_source=zero.xyz
- Price: $0.1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-29
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/phantomoperator-threat-scan-2635991e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_8WFwqw2RAWFMqTqF3VTT2

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability phantomoperator-threat-scan-2635991e -d '<json body>'
```

Example prompt: Can you run a PhantomOperator threat scan for 'Jane Doe' and tell me where my personal information is publicly exposed online, including any high-risk data broker listings or credential leaks?

## When to prefer this

Choose this endpoint when you need a quick, structured public-web privacy threat assessment for a specific individual by name, especially when you want categorized threat levels and source links. Prefer it over generic search engines when you need machine-readable threat intelligence rather than raw search results, or when auditing OPSEC exposure for privacy-conscious individuals.

## Known failure modes

- Name not found in any public sources — returns empty threats array
- Ambiguous or very common name produces noisy or irrelevant results
- Rate limiting or payment failure via x402 USDC on Base prevents call completion
- Partial scan if some data sources are temporarily unavailable

## How this service works

Sovereign Cypherpunk Privacy, OPSEC & $XMR (Monero) Intelligence Agent. Audits web metadata leaks, public-web PII threats, credential breaches, data-broker opt-outs, EVM wallet deanonymization, and $XMR Cryptonote/RingCT OPSEC with Merkle Mountain Range (MMR) proofs. Pay per call in USDC on Base via x402.

## Output

Returns a JSON object containing the scanned full name, a count of threats found, and an array of threat objects each with a URL link, page title, list of reasons the content is threatening (e.g. phone number, address), and a threat level rating (e.g. high, medium, low).

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "fullName": {
   "type": "string",
   "description": "Full name to scan (self or authorized target)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "skill": "threat-scan",
  "threats": [
   {
    "link": "https://example.com",
    "title": "Result",
    "reasons": [
     "Phone number"
    ],
    "threatLevel": "high"
   }
  ],
  "fullName": "Jane Doe",
  "threatsFound": 1
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/phantomoperator-threat-scan-2635991e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from freysaai.freysa.dev](https://www.zero.xyz/host/freysaai.freysa.dev/llms.txt)