{"uid":"cap_5Hp-qR2LtB1qG2C3-nqlo","slug":"how-is-domain-trust-check-13e11216","name":"how.is Domain Trust Check","description":"Should an agent click, sign in to, or pay this domain? A risk score and verdict (likely_safe / caution / high_risk, or inconclusive when a check could not run) with plain-English reasons, from domain age, spam/abuse blocklists and the HTTPS certificate.","url":"https://how.is/v1/domain/trust?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"domain":{"type":"string","maxLength":253,"description":"A bare domain name, e.g. example.com"}}},"responseSchema":{"type":"json","example":{"data":{"_shape":"data: verdict, risk_score (0-100), reasons[{risk, why}], age_days, blocklist_listings, blocklists_unanswered[], https_valid, not_checked[]."},"result":"Trust check for the requested subject","receipt":{"rail":"x402","tool":"trust","charge_usd":0.02,"settlement_tx":"0x…"}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_R0bBcf8bx9aZ_G4oAVT-2","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns a risk score, verdict (likely_safe/caution/high_risk/inconclusive), and plain-English reasons for a domain based on age, spam/abuse blocklists, and HTTPS certificate validity.","exampleAgentPrompt":"Before I click that link, can you check whether crypto-rewards-bonus.io is safe — give me a risk score and tell me if it's on any abuse blocklists or has a dodgy certificate?","exampleUseCases":[{"title":"Vetting a payment site before checkout","prompt":"I just got an invoice from quickpay-invoices.net — can you check if that domain is safe to pay on? I want a risk verdict and any blocklist flags before I enter my card details."},{"title":"Screening a link in a phishing investigation","prompt":"Someone forwarded me a suspicious email with a link to secure-banklogin-update.com — can you run a trust check on that domain and tell me if it's high risk?"},{"title":"Validating a vendor domain before onboarding","prompt":"We're about to onboard a new supplier at partnerhub-global.com — can you check their domain's trust score, how old it is, and whether it's flagged on any spam or abuse lists?"}],"resultDescription":"A JSON object containing: a verdict string (likely_safe, caution, high_risk, or inconclusive), a numeric risk_score from 0–100, an array of reasons each with a risk level and plain-English explanation, the domain's age in days, a list of blocklist listings found, any blocklists that did not respond, whether the HTTPS certificate is valid, and any checks that could not be run. Also includes a payment receipt with charge and settlement transaction hash.","failureModes":["Invalid or malformed domain name returns a validation error","Blocklist services unresponsive results in inconclusive verdict with unanswered blocklists listed","Very new domain with no data may return inconclusive or limited reasons","Payment failure over x402 prevents the check from running","Domain with no HTTPS certificate returns https_valid: false"],"whenToPreferThis":"Use this endpoint when an agent needs a quick, structured safety verdict on a bare domain before fetching, authenticating, or paying — especially when you want a combined signal from domain age, abuse blocklists, and HTTPS validity in a single call rather than querying each source separately.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-31T18:36:54.907Z","isFirstParty":false,"canonicalSlug":"how-is-domain-trust-check-13e11216"}