Skip to content
clusters: prooflayer · edgemarket · edgefinance · synthforge · mediakit · wordmint · webprobe · locale · comppoint
$ man phishing-domain-triage

/phishing-domain-triage

agentutility / web-probe / phishing-domain-triage
PRICE / CALL
$0.02
USDC · base mainnet · scheme: exact
METHOD
POST
CLUSTER
webprobe
CATEGORY
uncategorized
STATUS
live
NAME
phishing-domain-triage phishing domain triage api / suspicious domain age and registrar risk check
synonym alias of whois-lookup — reuses the canonical handler.
SYNOPSIS
POST https://x402.agentutility.ai/phishing-domain-triage
     Content-Type: application/json
     X-PAYMENT:    <signed-transferWithAuthorization>

     { ... }
↳ first call → 402 Payment Required. Sign USDCtransferWithAuthorization, retry with theX-PAYMENT header.
DESCRIPTION

Phishing domain triage API / suspicious domain age and registrar risk check. Same RDAP backend as whois-lookup, surfaced for security agents screening newly registered lookalike domains, DNSSEC status, expiration, registrar, and EPP lock flags.

INPUTrequest schema
propertytypedescriptionreq?
domainstringApex domain to look up (e.g. 'example.com'). Subdomains are stripped to the registrable domain before query.required
include_certificatesbooleanIf true, fetch a crt.sh certificate-transparency summary (issuer counts, first/last seen, total certs). Default false.optional
OUTPUTresponse shape
fieldtypedescription
domainstring
age_daysstring
flagsstring
cert_summarystring
EXAMPLEStwo ways to call
EXAMPLE 1 · curl
curl -X POST https://x402.agentutility.ai/phishing-domain-triage \
  -H 'Content-Type: application/json' \
  -d '{ }'
first response = 402 Payment Required with payment requirements; sign + retry with X-PAYMENT.
EXAMPLE 2 · mcp
# Install the MCP package for this endpoint's cluster
npx -y @agentutility/mcp-<cluster>

# Required: EVM private key with USDC on Base
export X402_PRIVATE_KEY=0x...

# Then call the phishing-domain-triage tool from your MCP-aware agent.
MCP server handles payment automatically — your coding agent just calls the tool by name.
METADATA
tags
web-probephishingdomaintriagephishing-domain-triage
methods
POST
cluster
webprobe
price
$0.02 USDC per call
ADJACENTother endpoints in webprobe
endpointdescriptionprice
archive-snapshotArchive snapshot lookup / Wayback Machine API / web archive URL lookup / historical webpage snapshot.$0.02
archive-urlArchive URL lookup / web archive URL builder / Wayback Machine snapshot finder.$0.02
brand-domain-checkBrand domain check API / startup domain diligence / company-name domain screen.$0.02
brand-watch-domain-riskBrand watch domain risk API / lookalike-domain RDAP triage / trademark monitoring support.$0.02
creator-domain-checkCreator domain check API / newsletter domain age / personal brand domain diligence.$0.02
dmarc-checkDMARC + SPF + DKIM email-authentication checker / mail-auth posture audit / spoofing-resistance grader / phishing-readiness scanner / dom…$0.02
dns-lookupDNS lookup / DNS resolver / dig replacement / nslookup API / DoH proxy / authoritative-record fetch / MX checker / SPF + DMARC TXT inspec…$0.02
domain-age-checkDomain age check API / newly registered domain detector / registration date lookup.$0.02
SEE ALSO
agentutility · webprobe · x402 · mcp · llms.txt · registry.json · bazaar.x402.org