# Softbot SiteCheck

> Softbot SiteCheck is a paid API for AI agents from softbot-sitecheck-mainnet.softbot.workers.dev, paid per call via x402, $0.003/call, status unknown (last checked 2026-10-29).

Analyzes a URL or domain and returns a trust verdict (trustworthy_likely, caution, or risky) with supporting evidence from domain age, DNS records, HTTPS behavior, security headers, phishing/malware lists, brand lookalike detection, and tech fingerprinting.

## Facts

- Endpoint: POST https://softbot-sitecheck-mainnet.softbot.workers.dev/v1/site?utm_source=zero.xyz
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-29
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/softbot-sitecheck-8dad5ad0
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_WVr3fx4dq35gC4MHeyW1C

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability softbot-sitecheck-8dad5ad0 -d '<json body>'
```

Example prompt: Before I click this link someone sent me — https://paypa1-secure-login.com/verify — can you check whether it's trustworthy or a phishing site and tell me why?

## When to prefer this

Use this endpoint whenever an agent is about to interact with an unfamiliar URL — before opening a link, submitting credentials or payment details, recommending a site to a user, or trusting content from an unknown domain. It is especially valuable for detecting phishing, typosquatting, and brand impersonation because it combines multiple independent signals (domain age, DNS, HTTPS, security headers, malware lists, and lookalike scoring) into a single actionable verdict, saving the agent from having to query multiple separate APIs.

## Known failure modes

- URL is unreachable or returns a connection timeout, resulting in incomplete HTTPS/redirect analysis
- Domain is too new to have RDAP registration data, reducing age signal confidence
- Site uses heavy JavaScript rendering, limiting page title and tech fingerprint accuracy
- WHOIS/RDAP rate limits may delay or block domain age lookup
- Phishing/malware list snapshots may be slightly stale and miss very recent threats
- Extremely obscure domains may lack NS/MX records, producing ambiguous DNS signals
- Invalid or malformed URL input may return a validation error

## How this service works

Website trust check: verdict (trustworthy_likely/caution/risky) with reasons from domain age (RDAP), DNS (A/MX/NS), HTTPS reachability and redirect chain, security headers, phishing/malware list snapshots, brand lookalike/typosquat detection, tech fingerprint and page title. Use when an agent is about to open, click, submit credentials or payment to, recommend or trust an unfamiliar URL or website.

## Output

Returns a structured verdict — one of trustworthy_likely, caution, or risky — along with the supporting reasons drawn from: domain registration age (via RDAP), DNS record analysis (A, MX, NS), HTTPS reachability and redirect chain, HTTP security header presence, phishing and malware list snapshot matches, brand lookalike and typosquat scoring, technology fingerprint, and the page title. This allows an agent to make an informed trust decision about an unfamiliar URL before interacting with it.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "url": {
   "type": "string",
   "description": "URL or bare domain, e.g. https://example.com/login"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/softbot-sitecheck-8dad5ad0/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from softbot-sitecheck-mainnet.softbot.workers.dev](https://www.zero.xyz/host/softbot-sitecheck-mainnet.softbot.workers.dev/llms.txt)