Tw Fraud Check

{
  "disclaimer": "Informational only, not an official determination -- NPA's 165 anti-fraud system is the authoritative source for reporting and verifying fraud. A domain not appearing in any of the three datasets here is NOT confirmed safe; it may simply not have been reported or blocked yet. A rumor with no match i...",
  "domain_check": {
    "blocklist": {
      "category": "金融保險",
      "listed": true,
      "listed_period": "2025-12",
      "roc_yearmonth": "11412"
    },
    "input": "saxotader.top",
    "matched_sources": [
      "npa_dns_blocklist",
      "npa_report_volume"
    ],
    "moda": {
      "description": null,
      "fake_url": null,
      "listed": false,
      "reported_at": null,
      "resolution_stopped_at": null,
      "site_created_at": null
    },
    "normalized_domain": "saxotader.top",
    "reports": {
      "period_end": "2025/12/24",
      "period_start": "2025/12/18",
      "report_count": 3,
      "reported": true,
      "site_name": "SAXO"
    }
  },
  "rumor_check": {
    "coverage_note": "This archive's most recent entry is dated April 2025, despite the source page listing a weekly update frequency. A claim from after that date will not be found here even if it is a known scam -- absence of a match is not confirmation of truth.",
    "matches": [
      {
        "content": "該假冒的客服人員會先透露曾經購買的衣服等交易個資取得信任後\n\n再誆稱因客服人員操作錯誤，誤『升級高級會員』、『分期付款』或『訂單錯誤』等理由需多次扣款，或是要求先匯款驗證等等....\n\n而要求操作『ATM』、『網路銀行APP』、『購買遊戲點數』或『提供個人帳戶資料、信用卡資料、簡訊驗證碼』\n\n來『解除』相關錯誤\n\n請勿聽信，因為這一定是詐騙。",
        "published_at": "2022/06/17 10:40",
        "similarity": 0.48,
        "title": "請注意近期詐騙集團假冒CACO客服解除分期付款詐騙"
      },
      {
        "content": "近日詐騙集團開始假冒『各民宿、旅館、露營區』訂房客服\n\n稱您之前訂購的『某某民宿、旅店、露營』因為工作人員操作錯誤\n要求您操作『ATM』、『網路轉帳』及『購買遊戲點數』等方式來「協助您」解除分期付款設定\n接到此來電，請不要相信，掛斷電話，並立即聯繫訂房業者或撥打165反詐騙諮詢專線查證。",
        "published_at": "2022/05/09 11:03",
        "similarity": 0.48,
        "title": "請注意近期詐騙集團假冒「民宿、旅店、露營區」客服解除分期付款詐騙"
      },
      {
        "content": "近日如有接獲詐騙集團假冒「博客來書局」客服人員來電\n\n該假冒的客服人員會先透露曾經所購買書籍等交易個資取得信任後再誆稱因客服人員操作錯誤\n\n誤『升級高級會員、經銷商』、『分期付款』、『訂單錯誤』等理由需多次扣款而要求操作『ATM』、『網路銀行APP』或『購買遊戲點數』來『解除』相關錯誤\n\n請勿聽信，這一定是詐騙\n\n如有接獲『+886』來電並電話中透露上述內容\n\n謹記1聽、2掛、3查證\n\n請聯繫博客來書局客服人員或撥打165反詐騙諮詢專線查證",
        "published_at": "2022/04/11 11:27",
        "similarity": 0.48,
        "title": "請注意近期詐騙集團假冒博客來書局客服解除分期付款詐騙"
      }
    ],
    "query": "接到客服電話說訂單錯誤，要我去ATM操作解除分期付款"
  },
  "sources": [
    "Domain blocklist: 165 anti-fraud hotline, domains suspended from DNS resolution for fraud (National Police Agency, data.gov.tw dataset 176455). 83,323 rows, verified current through ROC 115/08 (August 2026).",
    "Report-volume dataset: sites reported to 165 with report counts and date windows (data.gov.tw). 45,258 rows, 31,365 unique domains. Verified only ~1.3% overlap with the blocklist above -- checked as a separate, complementary signal, not a duplicate.",
    "E-commerce counterfeit-site dataset: Ministry of Digital Affairs / Digital Industry Administration, TWNIC trusted-notifier program (data.gov.tw dataset 165027). 1,612 rows. Verified only 163 (10.1%) overlap with the two datasets above combined; 1,449 (89.9%) are coverage neither of them has. Differe...",
    "Rumor archive: 165 anti-fraud hotline debunked scam-story archive (data.moi.gov.tw dataset, oid 4F4DF9A5-DF4C-4EE8-A50D-869347D38D9E). 89 rows. Coverage stops April 2025 despite the source page claiming weekly updates -- disclosed gap, not hidden.",
    "First two domain sources and the rumor archive ingested from opdadm.moi.gov.tw on 2026-09-06; the e-commerce counterfeit-site dataset ingested the same day from www-api.moda.gov.tw."
  ],
  "verified_on": "2026-09-06"
}

# bash or zsh: see the payment challenge. Nothing is charged.
curl -sS -g -i -X POST 'https://tariffmonkee.com/paid/tw-fraud-check' \
  -H 'content-type: application/json' \
  --data-raw '{"claim":"\u63a5\u5230\u5ba2\u670d\u96fb\u8a71\u8aaa\u8a02\u55ae\u932f\u8aa4\uff0c\u8981\u6211\u53bbATM\u64cd\u4f5c\u89e3\u9664\u5206\u671f\u4ed8\u6b3e","domain":"saxotader.top"}'

# x402 v2 sends the challenge base64-encoded in the PAYMENT-REQUIRED header (v1 sends it in the body).
# To read the header:
curl -sS -g -o /dev/null -D - -X POST 'https://tariffmonkee.com/paid/tw-fraud-check' \
  -H 'content-type: application/json' \
  --data-raw '{"claim":"\u63a5\u5230\u5ba2\u670d\u96fb\u8a71\u8aaa\u8a02\u55ae\u932f\u8aa4\uff0c\u8981\u6211\u53bbATM\u64cd\u4f5c\u89e3\u9664\u5206\u671f\u4ed8\u6b3e","domain":"saxotader.top"}' \
  | grep -i '^payment-required:' | cut -d' ' -f2 | tr -d '\r' | base64 --decode

// npm i @x402/fetch @x402/evm viem
import { wrapFetchWithPayment, x402Client } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

// Pays at most $0.05 per call.
const client = new x402Client().setSpendControls({ maxAmountPerPayment: "$0.05" });
registerExactEvmScheme(client, { signer: privateKeyToAccount(process.env.EVM_PRIVATE_KEY) });
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? ToolVet checks it first for $0.005. Pay for that from a separate
// client: this one is capped at $0.05 per payment. GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Ftariffmonkee.com%2Fpaid%2Ftw-fraud-check&method=POST
const res = await pay("https://tariffmonkee.com/paid/tw-fraud-check", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify({
    "claim": "\u63a5\u5230\u5ba2\u670d\u96fb\u8a71\u8aaa\u8a02\u55ae\u932f\u8aa4\uff0c\u8981\u6211\u53bbATM\u64cd\u4f5c\u89e3\u9664\u5206\u671f\u4ed8\u6b3e",
    "domain": "saxotader.top"
  }),
});
console.log(res.status, await res.text());

# pip install "x402[requests,evm]"
import os
from eth_account import Account
from x402 import x402ClientSync
from x402.http.clients import x402_requests
from x402.mechanisms.evm import EthAccountSigner
from x402.mechanisms.evm.exact.register import register_exact_evm_client

# Pays at most $0.05 per call.
client = x402ClientSync().set_spend_controls({"max_amount_per_payment": "$0.05"})
register_exact_evm_client(client, EthAccountSigner(Account.from_key(os.environ["EVM_PRIVATE_KEY"])))

with x402_requests(client) as session:
    res = session.post(
        "https://tariffmonkee.com/paid/tw-fraud-check",
        json={
            "claim": "\u63a5\u5230\u5ba2\u670d\u96fb\u8a71\u8aaa\u8a02\u55ae\u932f\u8aa4\uff0c\u8981\u6211\u53bbATM\u64cd\u4f5c\u89e3\u9664\u5206\u671f\u4ed8\u6b3e",
            "domain": "saxotader.top",
        },
    )
    print(res.status_code, res.text)