Name: phishing-domain-triage
Price: 0.02 USDC
Availability: InStock

$ man phishing-domain-triage

agentutility / web-probe / phishing-domain-triage

PRICE / CALL

$0.02

USDC · base mainnet · scheme: exact

METHOD

POST

CLUSTER

webprobe

CATEGORY

uncategorized

STATUS

● live

NAME

phishing-domain-triage — phishing domain triage api / suspicious domain age and registrar risk check

synonym alias of whois-lookup — reuses the canonical handler.

SYNOPSIS

POST https://x402.agentutility.ai/phishing-domain-triage
     Content-Type: application/json
     X-PAYMENT:    <signed-transferWithAuthorization>

     { ... }

↳ first call → 402 Payment Required. Sign USDCtransferWithAuthorization, retry with theX-PAYMENT header.

DESCRIPTION

Phishing domain triage API / suspicious domain age and registrar risk check. Same RDAP backend as whois-lookup, surfaced for security agents screening newly registered lookalike domains, DNSSEC status, expiration, registrar, and EPP lock flags.

INPUT — request schema

property	type	description	req?
domain	string	Apex domain to look up (e.g. 'example.com'). Subdomains are stripped to the registrable domain before query.	required
include_certificates	boolean	If true, fetch a crt.sh certificate-transparency summary (issuer counts, first/last seen, total certs). Default false.	optional

OUTPUT — response shape

field	type	description
domain	string	—
age_days	string	—
flags	string	—
cert_summary	string	—

EXAMPLES — two ways to call

EXAMPLE 1 · curl

curl -X POST https://x402.agentutility.ai/phishing-domain-triage \
  -H 'Content-Type: application/json' \
  -d '{ }'

first response = 402 Payment Required with payment requirements; sign + retry with X-PAYMENT.

EXAMPLE 2 · mcp

# Install the MCP package for this endpoint's cluster
npx -y @agentutility/mcp-<cluster>

# Required: EVM private key with USDC on Base
export X402_PRIVATE_KEY=0x...

# Then call the phishing-domain-triage tool from your MCP-aware agent.

MCP server handles payment automatically — your coding agent just calls the tool by name.

METADATA

tags: web-probephishingdomaintriagephishing-domain-triage
methods: POST
cluster: webprobe
price: $0.02 USDC per call

ADJACENT — other endpoints in webprobe

endpoint	description	price
archive-snapshot	Finds the closest archived snapshot of a public URL, like a Wayback Machine API.	$0.02
archive-snapshot-api	Finds archived snapshots of public web pages, returning the closest Wayback Machine captures with timestamps, status codes, and replay URLs.	$0.02
archive-url	Looks up the archived copy of a public URL closest to a given timestamp and can fetch cleaned archived page text.	$0.02
brand-domain-check	Checks whether a brand or company domain is established, expiring, registrar-locked, or newly registered, on the same RDAP backend as who…	$0.02
brand-watch-domain-risk	Checks new or suspicious brand-adjacent domains for age, registrar, expiry, DNSSEC, and transfer/lock statuses.	$0.02
creator-domain-check	Checks creator, newsletter, podcast, and community domains for age, expiry, registrar, DNSSEC, and suspicious new-registration flags.	$0.02
dmarc-check	Audits a domain's email authentication posture: DMARC, SPF, and DKIM in one check.	$0.02
dns-lookup	Full DNS lookup over Cloudflare 1.1.1.1 DNS-over-HTTPS.	$0.02