21 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Verdix quick ($0.02): call before an agent pays or sends funds to an EVM address on Base, e.g. an x402 payTo, a withdrawal or a pasted address. Checks OFAC sanctions, scam/phishing lists, live address poisoning, contract...
The address-poisoning attack: a scammer sends dust from an address whose first/last characters match one you really use, hoping you copy-paste the poisoned one. An auto-paying agent is the perfect victim. This compares t...
Score a URL for phishing risk before an agent opens or trusts it. Keyless, deterministic heuristics - typosquat / homoglyph of a known brand, punycode / mixed-script hosts, credentials-in-URL, raw-IP hosts, suspicious TL...
Check a counterparty before paying: OFAC SDN, phishing and drainer feeds, a live watch of drainer infrastructure, transaction simulation and injected-instruction analysis. Returns a score and a signed ES256 attestation.
Give your domains. Generates common look-alike/typosquat permutations and resolves them over keyless DNS to find which are REGISTERED - flagging the ones with a live site and mail (phishing-ready) + a risk signal. Passiv...
Real-money implied probabilities for macro and sports events from Hyperliquid HIP-4 outcome markets. Answers "what odds does the market put on a Fed rate cut this month", "who is favored to win the World Cup", "what is t...
CUDA, driver and Ollama compatibility - GPU support, model memory fit and proof inference uses the GPU
Domain lookup, trust verdict. A trust verdict for any domain in one call: high/medium/low trust with named flags for very new registrations, expiry, missing or weak SPF and DMARC, too few nameservers, no web host and non...
Health and payment-path check. Returns server time and confirms the x402 payment settled. The cheapest endpoint in the catalog at $0.001, intended for testing a client's payment flow.
Analyze raw email headers: sender, recipient, subject, server hops (Received) with delays, SPF/DKIM/DMARC results, Return-Path and Reply-To mismatches and spoofing signals, with a verdict. Investigate phishing or deliver...
Checks whether a URL/domain is safe to fetch, cite, or follow: flags phantom-squatted or typosquatted brand domains, unregistered or brand-new domains, and known malicious infrastructure (URLhaus). Returns an ALLOW/WARN/...
Check a URL for phishing/scam signals: MetaMask eth-phishing-detect + Phishing.Database blocklists, RDAP domain age, punycode and brand-lookalike detection, HTTPS reachability. Heuristic; not security advice.
Is this website a crypto phishing or wallet-drainer site? Checks the URL against the GoPlus phishing database and returns a plain answer plus any malicious contracts tied to it. Check before an agent connects a wallet. $...
Expand short links and show the full redirect chain — Genesis402 / UnyKorn Operator Network
Breached password check: is this password in known data breaches, and how often? Send only the SHA-1 hash (never the password); just the first 5 characters reach Have I Been Pwned (k-anonymity). Up to 50 hashes per call.
Read one email the way an agent that triages mail should before acting on it: observations with evidence and offsets, no score and no verdict. Send the raw RFC 5322 message (multipart, base64 and quoted-printable decoded...
Email security check for a domain: SPF record present and its content, DMARC record and policy (none / quarantine / reject), MX records and mail provider. Tells you whether a domain is protected against spoofing and phis...
Can this domain be spoofed? Checks whether SPF and DMARC together actually block forged mail: missing DMARC, p=none, pct below 100, SPF +all or ?all, or no SPF at all mean attackers can send email as the domain. Returns...
Typosquat finder: generates the most likely typo, transposition, omission, doubled-letter, homoglyph and TLD-swap variants of a domain (up to 40) and checks which ones currently resolve. Brand protection and phishing-dom...
Phishing/trust verdict for a website domain before an agent transacts with an unfamiliar merchant. Fuses registration age (RDAP), DNS/mail posture (SPF, DMARC, DNSSEC), TLS validity, Certificate Transparency history and...
Pure-compute typosquat and homoglyph check on a hostname: edit-distance to a curated brand list, look-alike character normalization, brand-in-subdomain lures, punycode/IDN, abused free-hosting suffixes and throwaway TLDs...