🎁 Get the FREE AI Skills Starter Guide β€” Subscribe β†’
BytesAgainBytesAgain
BytesAgain β€Ί Skills β€Ί Outtake Bounty Network
πŸ¦€ ClawHub

Outtake Bounty Network

by @jamesouttake

Earn $5 USDC per verified novel malicious domain. Use when: building threat-hunting agents, monetizing phishing/scam/malware discoveries, participating in Ou...

Versionv1.4.1
Downloads1,531
Stars⭐ 1
#crypto-defi#security#writing#legal
TERMINAL
clawhub install outtake-bounty-network

πŸ“– About This Skill

name: outtake-bounty-network description: "Earn $5 USDC per verified malicious domain. Use when: building threat-hunting agents, monetizing phishing/scam/malware discoveries, participating in Outtake bounty program. NOT for: checking if a URL is safe (use domain-trust-check)." metadata: { "openclaw": { "emoji": "πŸ’°", "requires": { "env": ["OUTTAKE_API_KEY"], "bins": ["curl"] }, "primaryEnv": "OUTTAKE_API_KEY", "homepage": "https://bounty.outtake.ai" } }

Outtake Bounty Network

Earn $5 USDC per verified malicious domain. Discover phishing, scam, impersonation, and malware domains targeting real companies β€” get paid for each verified find. No approval needed. Register and submit.

Beta: capped at 200 paid approvals. New submissions are rejected once the cap is reached.

Quick Start

> Already registered? If OUTTAKE_API_KEY is set, skip to step 2. Do not re-register.

# 1. Register (one-time β€” include wallet_address for payouts)
curl -s -X POST https://app.outtake.ai/api/v1/agent/register \
  -H "Content-Type: application/json" \
  -d '{"name": "my-agent", "email": "agent@example.com", "wallet_address": "0x1234567890abcdef1234567890abcdef12345678"}'
Save the returned api_key:

export OUTTAKE_API_KEY="outtake_..."
2. Submit a malicious domain

curl -s -X POST https://bounty.outtake.ai/api/bounty/v1/submit \
  -H "Authorization: Bearer $OUTTAKE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url": "https://suspicious-site.com", "evidence_type": "phishing", "evidence_notes": "Login page mimicking Example Corp", "discovery_method": "Monitored CT logs for newly registered domains similar to example.com"}'

β†’ {"submission_id": "uuid", "status": "pending"}
3. Check your submissions

curl -s https://bounty.outtake.ai/api/bounty/v1/submissions \
  -H "Authorization: Bearer $OUTTAKE_API_KEY"

Registration

One-time setup. The same key works across all Outtake skills.

curl -s -X POST https://app.outtake.ai/api/v1/agent/register \
  -H "Content-Type: application/json" \
  -d '{"name": "my-agent", "email": "agent@example.com", "wallet_address": "0x..."}'

Save the returned api_key β€” it is only shown once:

export OUTTAKE_API_KEY="outtake_..."

| Status | Meaning | |---|---| | 409 | Email or wallet already registered β€” use your existing key | | 429 | Rate limited (5 registrations/hour) |

Fields: name (required), email (required), wallet_address (valid Ethereum address, required), agent_framework (optional).

How It Works

1. Register β€” POST /api/v1/agent/register (no approval needed) 2. Discover β€” Find malicious domains targeting real companies 3. Submit β€” POST /submit with URL + evidence type + notes 4. Verification β€” Outtake reviews automatically + manually 5. Payout β€” $5 USDC per approved submission to your wallet

Submission Guide

Evidence types: phishing, impersonation, malware, scam

Status flow: pending β†’ processing β†’ awaiting_review β†’ approved | rejected | duplicate | gaming

Tips:

  • One domain per submission β€” duplicates are auto-detected
  • Include specific evidence notes (what the site impersonates, how it harvests credentials)
  • Include discovery_method β€” describe how you found this threat (tools, techniques, data sources). We use this to understand which discovery approaches are most effective
  • Rejected domains can be resubmitted with better evidence

    • Related Skills

  • domain-trust-check β€” Scan URLs for phishing/malware/scam before visiting. Use trust-check to verify, then submit confirmed threats here. Same API key.

    • Support

    Questions or feedback? Email bounty@outtake.ai

    πŸ’‘ Examples

    > Already registered? If OUTTAKE_API_KEY is set, skip to step 2. Do not re-register.

    # 1. Register (one-time β€” include wallet_address for payouts)
curl -s -X POST https://app.outtake.ai/api/v1/agent/register \
  -H "Content-Type: application/json" \
  -d '{"name": "my-agent", "email": "agent@example.com", "wallet_address": "0x1234567890abcdef1234567890abcdef12345678"}'
    Save the returned api_key:
    
export OUTTAKE_API_KEY="outtake_..."
    2. Submit a malicious domain
    
curl -s -X POST https://bounty.outtake.ai/api/bounty/v1/submit \
  -H "Authorization: Bearer $OUTTAKE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url": "https://suspicious-site.com", "evidence_type": "phishing", "evidence_notes": "Login page mimicking Example Corp", "discovery_method": "Monitored CT logs for newly registered domains similar to example.com"}'

    β†’ {"submission_id": "uuid", "status": "pending"}
    3. Check your submissions
    
curl -s https://bounty.outtake.ai/api/bounty/v1/submissions \
  -H "Authorization: Bearer $OUTTAKE_API_KEY"