{"uid":"cap_qNKBHt2U25OCvho6viyGJ","slug":"chainverdict-typosquat-domain-analysis-c93edd30","name":"ChainVerdict Typosquat Domain Analysis","description":"Analyse a domain for brand impersonation: homoglyph substitution, character insertion and omission, TLD swaps and known-brand proximity. Returns a suspicion verdict with the specific patterns matched. Heuristic — a match is a reason to check, not proof of intent.","url":"https://chainverdict.xyz/v1/security/typosquat/:domain","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"pathParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Domain to analyse for brand impersonation"}}},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","additionalProperties":true}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.005","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.005/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.005","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_ZXQS_Epue63NWyXqCxmw8","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.005","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Analyzes a domain name for brand impersonation patterns including homoglyph substitution, character insertion/omission, TLD swaps, and proximity to known brands, returning a suspicion verdict with matched patterns.","exampleAgentPrompt":"Before I click this link, can you check whether the domain paypa1-secure.com is typosquatting a known brand — look for homoglyphs, character swaps, or TLD tricks?","exampleUseCases":[{"title":"Pre-payment domain safety check","prompt":"I'm about to send USDC to an address from a site called coinbaise.io — can you analyze that domain for typosquatting or brand impersonation before I proceed?"},{"title":"Phishing email domain screening","prompt":"I got an email from support@arnazon-help.net — can you run that domain through a typosquatting check to see if it's impersonating Amazon?"},{"title":"Competitive brand monitoring alert","prompt":"Someone registered micr0soft-support.org — can you check if that domain is flagged as a homoglyph or brand impersonation attempt against Microsoft?"}],"resultDescription":"A suspicion verdict indicating whether the domain matches known brand impersonation patterns, along with the specific patterns detected (e.g. homoglyph substitution, character insertion/omission, TLD swap, known-brand proximity). Marked as heuristic — a match signals a reason to investigate, not confirmed malicious intent.","failureModes":["Invalid or malformed domain string returns an error response","Unknown or very obscure brands may not be in the known-brand proximity database, reducing detection","Homoglyphs from non-Latin scripts may not all be covered","False positives possible for legitimate domains that happen to resemble brand names","Network timeout if the service is temporarily unavailable"],"whenToPreferThis":"Use this endpoint when an AI agent needs to quickly screen a domain name for brand impersonation risk before taking a high-stakes action such as sending a payment, clicking a link, or trusting a counterparty. It is especially valuable as a pre-flight check before USDC transfers or interacting with an unknown web entity. Prefer it over generic WHOIS or DNS lookups when the specific concern is typosquatting and phishing patterns rather than ownership or resolution data.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T00:34:28.751Z","isFirstParty":false}