# Website Trust & Scam Check

> Website Trust & Scam Check is a paid API for AI agents from agent-data.centorprat.workers.dev, paid per call via x402, $0.02/call, status unknown (last checked 2026-10-28).

Returns an allow/caution/block verdict with reasons for up to 3 websites, checking phishing blocklists, domain age, TLS, DNS, brand impersonation, and storefront red flags in one synchronous call.

## Facts

- Endpoint: POST https://agent-data.centorprat.workers.dev/tools/website-trust-scam-check?utm_source=zero.xyz
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-28
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/website-trust-scam-check-5f84106e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_rNrezZJW_KY86g2Eftb_D

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability website-trust-scam-check-5f84106e -d '<json body>'
```

Example prompt: Before I checkout on shop-liquidgadgets.com, can you run a trust and scam check on it — give me an allow, caution, or block verdict with the reasons?

## When to prefer this

Choose this endpoint when an AI agent needs a fast, pre-action trust decision on one to three websites — especially before executing a payment, clicking a link, or onboarding a new vendor. It consolidates phishing blocklists, domain age, TLS, DNS, and storefront heuristics into a single synchronous verdict, making it ideal for fraud prevention workflows, e-commerce checkout guards, and email link triage without needing to stitch together multiple individual checks.

## Known failure modes

- Domain unreachable or DNS resolution failure — lookup fails, call not charged
- Invalid URL format — may return an error or skip the item
- All 3 slots consumed by failed lookups — no results returned but no charge
- Rate limiting or service unavailability — HTTP error response
- Brand impersonation detection may produce false positives for legitimate lookalike domains

## How this service works

Pay-per-call data and tools for AI agents, $0.002-0.01 per call in USDC via x402 (Base, Polygon or Solana), no account or API key; MAX tiers ($0.05-0.25) run deeper jobs. Agent toolkit: web search, search + read top pages, any page as clean markdown with a prompt-injection check, which-x402-API-to-call recommender, seller check. Data: Google Maps places with contacts, YouTube video data and transcripts, job listings (Indeed, LinkedIn, 13 boards), Google Ads Transparency, TikTok comments, Pinterest, Airbnb, Redfin, AliExpress, app stores, live sports, website and SEO checks, Shopify store tech stacks, and onchain token / address risk checks.

## Output

A verdict of allow, caution, or block for each submitted URL or domain, accompanied by reasons citing specific signals checked: phishing and malware blocklist hits, domain age, Tranco popularity rank, TLS certificate validity, email/DNS health, brand impersonation indicators, and storefront red flags. Failed lookups are not charged.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "urls": {
   "type": "array",
   "items": {
    "type": "string"
   },
   "maxItems": 3,
   "description": "URLs or domains (e.g. \"shop-example.com\", \"https://www.etsy.com\"). One verdict per site."
  },
  "maxSites": {
   "type": "integer",
   "description": "Cap how many sites to check this run."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "items": [
   {
    "host": "etsy.com",
    "input": "etsy.com",
    "checks": {
     "tls": {
      "https": true,
      "valid": true,
      "issuer": "GlobalSign nv-sa",
      "certAgeDays": 2,
      "orgValidated": false
     },
     "site": {
      "error": null,
      "reachable": true,
      "httpStatus": 403
     },
     "domain": {
      "found": true,
      "status": [
       "client delete prohibited",
       "client transfer prohibited",
       "client update prohibited",
       "server delete prohibited",
       "server transfer prohibited",
       "server update prohibited"
      ],
      "ageDays": 8296,
      "created": "2004-02-05",
      "expires": "2027-02-05",
      "registrar": "MarkMonitor Inc.",
      "suspended": false,
      "registrationTermDays": 8401
     },
     "dnsEmail": {
      "mx": true,
      "spf": true,
      "parked": false,
      "resolves": true,
      "dmarcPolicy": "reject",
      "nameservers": [
       "ns-1264.awsdns-30.org",
       "ns-162.awsdns-20.com",
       "dns1.p03.nsone.net",
       "dns3.p03.nsone.net"
      ]
     },
     "reputation": {
      "blocklists": [],
      "trancoRank": 324
     },
     "impersonation": null
    },
    "domain": "etsy.com",
    "summary": "etsy.com -> ALLOW (trust 100/100): Popular site: Tranco rank #324; Domain registered 23 years ago; Receives email (MX records)",
    "decision": "allow",
    "redFlags": [],
    "checkedAt": "2026-10-24T13:50:37+00:00",
    "disclaimer": "Passive public signals for risk triage - not a guarantee that a site is safe or a finding that it is fraudulent.",
    "greenFlags": [
     "Popular site: Tranco rank #324",
     "Domain registered 23 years ago",
     "Receives email (MX records)",
     "DMARC enforcement (reject) protects the domain from spoofed email"
    ],
    "trustScore": 100,
    "finalDomain": null,
    "agentGuidance": "No significant risk signals. Normal caution applies."
   }
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/website-trust-scam-check-5f84106e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agent-data.centorprat.workers.dev](https://www.zero.xyz/host/agent-data.centorprat.workers.dev/llms.txt)