Skip to content
clusters: prooflayer · edgemarket · edgefinance · synthforge · mediakit · wordmint · webprobe · locale · comppoint · rollforge · bestiary · statline · matchpoint · retail · agentops · browserworkflow · modelrouter · compose
$ man phishing-domain-triage

/phishing-domain-triage

agentutility / web-probe / phishing-domain-triage
PRICE / CALL
$0.005
USDC · base mainnet · scheme: exact
METHOD
POST
CLUSTER
webprobe
CATEGORY
uncategorized
STATUS
live
NAME
phishing-domain-triage phishing domain triage api and suspicious-domain age and registrar risk check
synonym alias of whois-lookup — reuses the canonical handler.
SYNOPSIS
POST https://x402.agentutility.ai/phishing-domain-triage
     Content-Type: application/json
     X-PAYMENT:    <signed-transferWithAuthorization>

     { ... }
↳ first call → 402 Payment Required. Sign USDCtransferWithAuthorization, retry with theX-PAYMENT header.
DESCRIPTION

Phishing domain triage API and suspicious-domain age and registrar risk check. Same RDAP backend as whois-lookup, surfaced for security agents screening newly registered lookalike domains, DNSSEC status, expiration, registrar, and EPP lock flags. Use it for phishing triage, brand protection, or vendor-domain screening.

INPUTrequest schema
propertytypedescriptionreq?
domainstringApex domain to look up (e.g. 'example.com'). Subdomains are stripped to the registrable domain before query.required
include_certificatesbooleanIf true, fetch a crt.sh certificate-transparency summary (issuer counts, first/last seen, total certs). Default false.optional
OUTPUTresponse shape
fieldtypedescription
domainstring
age_daysstring
flagsstring
cert_summarystring
EXAMPLEStwo ways to call
EXAMPLE 1 · curl
curl -X POST https://x402.agentutility.ai/phishing-domain-triage \
  -H 'Content-Type: application/json' \
  -d '{ }'
first response = 402 Payment Required with payment requirements; sign + retry with X-PAYMENT.
EXAMPLE 2 · mcp
# Install the MCP package for this endpoint's cluster
npx -y @agentutility/mcp-<cluster>

# Required: EVM private key with USDC on Base
export X402_PRIVATE_KEY=0x...

# Then call the phishing-domain-triage tool from your MCP-aware agent.
MCP server handles payment automatically — your coding agent just calls the tool by name.
METADATA
tags
web-probephishingdomaintriagephishing-domain-triage
methods
POST
cluster
webprobe
price
$0.005 USDC per call
ADJACENTother endpoints in webprobe
endpointdescriptionprice
arxiv-bibtexTurns an arXiv paper into a BibTeX entry: pulls title, authors, year, abstract, and DOI from the arXiv API and generates a properly-forma…$0.005
brand-domain-checkChecks whether a brand or company domain is established, expiring, registrar-locked, or newly registered, on the same RDAP backend as who…$0.005
brand-name-scoreScores a candidate brand or startup name on quality and risk.$0.005
brand-watch-domain-riskChecks new or suspicious brand-adjacent domains for age, registrar, expiry, DNSSEC, and transfer/lock statuses.$0.005
company-name-scoreScores the quality of a company name before you commit to domain, handle, trademark, and launch work.$0.005
creator-domain-checkChecks creator, newsletter, podcast, and community domains for age, expiry, registrar, DNSSEC, and suspicious new-registration flags.$0.005
crypto-headlinesCrypto headlines API for agents that need breaking cryptocurrency news by topic or query.$0.005
crypto-newsCrypto news API that searches recent cryptocurrency headlines for a topic, token, protocol, or market event.$0.005
SEE ALSO
agentutility · webprobe · x402 · mcp · llms.txt · registry.json · bazaar.x402.org