# ChainVerdict Typosquat Domain Analysis

> ChainVerdict Typosquat Domain Analysis is a paid API for AI agents from chainverdict.xyz, paid per call via x402, $0.005/call, status unknown (last checked 2026-09-15).

Analyzes a domain name for brand impersonation patterns including homoglyph substitution, character insertion/omission, TLD swaps, and proximity to known brands, returning a suspicion verdict with matched patterns.

## Facts

- Endpoint: GET https://chainverdict.xyz/v1/security/typosquat/:domain
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/chainverdict-typosquat-domain-analysis-c93edd30
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_qNKBHt2U25OCvho6viyGJ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability chainverdict-typosquat-domain-analysis-c93edd30
```

Example prompt: Before I click this link, can you check whether the domain paypa1-secure.com is typosquatting a known brand — look for homoglyphs, character swaps, or TLD tricks?

## When to prefer this

Use this endpoint when an AI agent needs to quickly screen a domain name for brand impersonation risk before taking a high-stakes action such as sending a payment, clicking a link, or trusting a counterparty. It is especially valuable as a pre-flight check before USDC transfers or interacting with an unknown web entity. Prefer it over generic WHOIS or DNS lookups when the specific concern is typosquatting and phishing patterns rather than ownership or resolution data.

## Known failure modes

- Invalid or malformed domain string returns an error response
- Unknown or very obscure brands may not be in the known-brand proximity database, reducing detection
- Homoglyphs from non-Latin scripts may not all be covered
- False positives possible for legitimate domains that happen to resemble brand names
- Network timeout if the service is temporarily unavailable

## How this service works

Analyse a domain for brand impersonation: homoglyph substitution, character insertion and omission, TLD swaps and known-brand proximity. Returns a suspicion verdict with the specific patterns matched. Heuristic — a match is a reason to check, not proof of intent.

## Output

A suspicion verdict indicating whether the domain matches known brand impersonation patterns, along with the specific patterns detected (e.g. homoglyph substitution, character insertion/omission, TLD swap, known-brand proximity). Marked as heuristic — a match signals a reason to investigate, not confirmed malicious intent.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "pathParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "description": "Domain to analyse for brand impersonation"
      }
     }
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object",
     "additionalProperties": true
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/chainverdict-typosquat-domain-analysis-c93edd30/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from chainverdict.xyz](https://www.zero.xyz/host/chainverdict.xyz/llms.txt)