URL Safety · Check

import { wrapFetchWithPayment } from "@x402/fetch";
import { privateKeyToAccount } from "viem/accounts";

const account = privateKeyToAccount(process.env.PRIVATE_KEY);
const fetchWithPay = wrapFetchWithPayment(fetch, account);

const res = await fetchWithPay("https://safe.cyberwarex.com/check", {
  method: "GET",
});
const data = await res.json();

curl -X GET \
  "https://safe.cyberwarex.com/check?url=https%3A%2F%2Fcoinbase.com.secure-login.xyz%2Fverify" \
  -H "X-PAYMENT: <signed x402 payment>"

{
  "domain_age_days": 4,
  "host": "coinbase.com.secure-login.xyz",
  "labels": [
    "brand_impersonation",
    "suspicious_tld"
  ],
  "reasons": [
    "'coinbase' appears in the host but the domain is secure-login.xyz, not coinbase.com"
  ],
  "registrable_domain": "secure-login.xyz",
  "risk_score": 80,
  "source": "heuristics + RDAP",
  "url": "https://coinbase.com.secure-login.xyz/verify",
  "verdict": "DANGEROUS"
}