ToolVet
81trust / 100

Domain Check

by APEX Phishing domain check in Security & trust

x402 APIPassing, checked 2 h ago

Phishing domain check: domain age, registrar, DNS, TLS certificate and brand lookalikes. Is this link safe to send a user to? Pass ?domain= (or a URL). From public records: when it was registered and by which registrar (RDAP, the registry's own record), its DNS, who issued its TLS certificate and until when, and whether the name imitates one of 40 brands phishing kits copy (coinbase, metamask, uniswap...). A record we could not read is reported as unread, never as clean. Paid in USDC on Base.

GET https://apexfaucet.xyz/api/x402/domain-check

Last 30 days

All checks passedSome failedAll failedNot checked
Uptime
100%
Response time
73 ms typical, 73 ms slowest 5%
Last check
2 h ago
Next check
any minute now

How to call it

# See the payment challenge (nothing is charged)
curl -i -X GET "https://apexfaucet.xyz/api/x402/domain-check?domain=coinbase-support-wallet.com"
import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client().register(
  "eip155:8453",
  new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fapexfaucet.xyz%2Fapi%2Fx402%2Fdomain-check
const res = await pay("https://apexfaucet.xyz/api/x402/domain-check?domain=coinbase-support-wallet.com");
console.log(await res.json());

Example input

{
  "domain": "coinbase-support-wallet.com"
}

Example output

{
  "data": {
    "certificate": {},
    "dns": {},
    "host": "coinbase-support-wallet.…",
    "how": "registration from RDAP (…",
    "lookalike": [],
    "ok": true,
    "registrableDomain": "coinbase-support-wallet.…",
    "registration": {},
    "signals": [],
    "verdict": "CAUTION: the name imitat…"
  },
  "ok": true,
  "paid": 0.002
}

Security scan

  • No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTimePrice
2 h agoPassed40269 ms$0.002
5 h agoPassed40273 ms$0.002
10 h agoPassed40276 ms$0.002