{"uid":"cap_b0eFP6LdEceFTzhehQY60","slug":"apex-phishing-domain-check-6bcb483c","name":"APEX Phishing Domain Check","description":"Phishing domain check: domain age, registrar, DNS, TLS certificate and brand lookalikes. Is this link safe to send a user to? Pass ?domain= (or a URL). From public records: when it was registered and by which registrar (RDAP, the registry's own record), its DNS, who issued its TLS certificate and until when, and whether the name imitates one of 40 brands phishing kits copy (coinbase, metamask, uniswap...). A record we could not read is reported as unread, never as clean. Paid in USDC on Base.","url":"https://apexfaucet.xyz/api/x402/domain-check?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","queryParams"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"A domain name or a full URL."}}}}},"output":{"type":"object"}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_aMedFMGtFygOQxfL2IgeC","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks whether a domain is a phishing risk by analyzing its age, registrar, DNS records, TLS certificate, and brand lookalike similarity against 40 known targets.","exampleAgentPrompt":"Before I send this link to my users, can you check whether 'coinbase-airdrop-claim.xyz' is a phishing domain — look at how old it is, who registered it, its DNS and TLS cert, and whether it's imitating any known crypto brands?","exampleUseCases":[{"title":"Crypto wallet link safety check","prompt":"Someone just sent me a link to 'metamask-wallet-restore.net' — can you check if it's a phishing site? I want to know who registered it, how old it is, and if it's imitating MetaMask."},{"title":"Pre-send user link validation","prompt":"I'm about to send users a link to 'uniswap-v4-airdrop.io' in our newsletter — can you verify it's not a phishing or lookalike domain before I blast it out?"},{"title":"Suspicious email link investigation","prompt":"I got an email with a link to 'coinbase-secure-login.com' — can you run a phishing check on it and tell me the domain age, registrar, TLS certificate issuer, and whether it looks like a brand impersonation?"}],"resultDescription":"Returns domain registration age and registrar (from RDAP), DNS records, TLS certificate issuer and expiry, and a brand lookalike assessment against 40 known crypto/web3 brands (e.g. Coinbase, MetaMask, Uniswap). Unreadable records are explicitly flagged as unread rather than assumed clean.","failureModes":["Domain or URL parameter missing — returns error requiring ?domain= query param","RDAP or DNS lookup times out — reported as unread, not clean","TLS certificate unreachable — flagged as unread","Domain not yet indexed or too new to have records — partial results with unread fields","Invalid URL format passed — may fail to parse domain correctly"],"whenToPreferThis":"Choose this endpoint when you need a multi-signal phishing risk assessment specifically for crypto and web3 brand impersonation — it combines domain age, registrar, DNS, TLS, and a targeted 40-brand lookalike check in a single call. Prefer it over generic URL scanners when your concern is crypto phishing kits (Coinbase, MetaMask, Uniswap clones). It explicitly reports unreadable records rather than assuming clean, making it more conservative and suitable for safety-critical user-facing flows.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-02T03:50:03.571Z","isFirstParty":false,"canonicalSlug":"apex-phishing-domain-check-6bcb483c"}