{"uid":"cap_6mLkCqY4l26x4NUz4jFRH","slug":"formwerk-iframe-submission-target-domain-checker-ade72b96","name":"Formwerk iFrame Submission Target Domain Checker","description":"Prüft am Objekt iframe den Befund Zieldomain der Übermittlung.","url":"https://formwerk.halowerk.com/v1/pruef/formwerk/ziel/iframe","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"ziel":{"oneOf":[{"type":"string","maxLength":2048,"minLength":1,"description":"Öffentliche HTTP(S)-Adresse; bei DNS-Befunden Domain oder öffentliche IP."},{"type":"object","required":["adresse"],"properties":{"adresse":{"type":"string","maxLength":2048,"minLength":1},"selektor":{"type":"string","maxLength":240,"minLength":1,"description":"CSS-Selektor: genau ein Objekt, sonst erster Treffer des Objektfilters."},"vergleich":{"type":"string","maxLength":2048,"description":"Öffentliche Vergleichsadresse für Link-, Sitemap- oder Sprachbefunde."},"user_agent":{"type":"string","pattern":"^[A-Za-z0-9_-]{1,80}$"},"dkim_selektor":{"type":"string","pattern":"^[A-Za-z0-9_-]{1,63}$"}},"additionalProperties":false}]}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.001","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.001/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.001","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_PRuCmiDrorkEXHF205pgl","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.001","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks an iframe element on a web page to determine the target domain to which form data is being submitted.","exampleAgentPrompt":"Can you check the iframe on https://example.com/contact to see what domain its embedded form is submitting data to?","exampleUseCases":[{"title":"Third-party iframe data leak audit","prompt":"I need to know if the iframe on our checkout page at https://shop.mystore.com/checkout is sending form data to a domain we don't control — can you check what domain it's targeting?"},{"title":"Security review of embedded payment form","prompt":"We're doing a security audit — can you inspect the iframe at https://partner.example.com/pay using the CSS selector '#payment-frame' and tell me which domain it submits form data to?"},{"title":"Compliance check for embedded signup form","prompt":"Can you verify which domain the signup iframe at https://landing.acmecorp.com/register is actually submitting user data to? We need to confirm it's going to our own domain and not a third party."}],"resultDescription":"Returns a finding that identifies the target domain to which the iframe element's form data is submitted, including the destination URL or domain extracted from the iframe's form action or submission logic on the inspected page.","failureModes":["URL is not publicly accessible or returns a non-200 status","No iframe found on the page or CSS selector matches no element","The iframe contains no form or submission target is indeterminate","Input URL is malformed or exceeds the 2048-character limit","Target page blocks headless browser or automated access","Network timeout while loading the page or iframe content"],"whenToPreferThis":"Use this endpoint when you need to specifically inspect iframe elements on a webpage to determine where embedded forms submit their data — particularly useful for security audits, privacy compliance checks, or verifying that embedded third-party iframes are not exfiltrating form data to unexpected domains. Prefer this over the sibling 'skript' or 'eingabefeld' endpoints when the form submission occurs inside an iframe rather than directly on the page or via a script.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T06:40:02.826Z","isFirstParty":false}