All projects on Base matching “dns”

Service: DNS Record & Whois Lookup (https://dns-lookup.x402.paysponge.com/)

About the .download top-level domain: registry operator, type (generic, country-code, sponsored), IANA/RDAP details, WHOIS server, creation date, DNSSEC signing status and the registry's nameservers. Registration research and TLD-policy checks for .download. $0.01 per call.

Return one current Coinbase spot-product snapshot for an exact BASE-QUOTE product id, including venue price, 24-hour price change and provider-reported 24-hour product volume. Forest reads only Coinbase Advanced Trade public market data; it does not infer tickers, infer the provider volume denomination, aggregate venues, read an account or wallet, place orders, provide an executable quote, forecas

All links on a page, absolute and deduplicated, split into internal and external.

Datakoot Economy Intel: Get a snapshot of a country's key macro indicators (latest available values): GDP, GDP per capita, GDP growth, inflation, unemployment, and population. $0.01 USDC per call, charged only on success.

Unfold a domain's SPF policy (RFC 7208) into merged IPv4 and IPv6 blocks: include and redirect followed as a receiver counts them (10 lookups, 2 void lookups, PermError stops), a and mx resolved with /cidr, sources per block, exists, ptr and macros listed apart, and very broad blocks flagged. Use when an agent must know which servers may send. Input: ?domain=example.com.

Search plus page-to-markdown in one $0.01 call: ranked results from Wikipedia, Hacker News, GitHub and a web engine, with clean readable article text. Pass q= to search, or url= to extract any single page. Free /demo and /quickstart.

Website HTTP and metadata inspection report

Queries target URL headers to score security configurations (HSTS, CSP, X-Frame-Options).

Score a URL for phishing risk before an agent opens or trusts it. Keyless, deterministic heuristics - typosquat / homoglyph of a known brand, punycode / mixed-script hosts, credentials-in-URL, raw-IP hosts, suspicious TLDs, over-deep subdomains - plus a best-effort domain-age check (young domains are a top phishing signal). Returns a 0-100 risk score, a SAFE / SUSPICIOUS / DANGEROUS verdict, and l

Is this domain malicious or named by ransomware? Domain threat check. $0.02 USDC on Base per call. Matches the hostname, parent domains and resolved IPv4 against ThreatCluster's high-confidence 30-day IOC feed and looks up ransomware leak-site claims. Returns one verdict: listed, claimed, listed_and_claimed or no_known_threat. Don't use this for many domains; use /v1/bulk-threat-check.

WHOIS registration data for a domain: registrar, creation/expiry/updated dates, nameservers, status, DNSSEC, and organisation.

Is a claim independently corroborated across multiple unrelated sources, or does it trace back to a single origin? Groups matches by SOURCE (not category) so a caller sees exactly how many independent outlets/agencies back a claim -- a trust signal no single-source competitor can offer, since it requires already owning many independent sources.

Validate email syntax, domain, and MX records for basic automated checks without SMTP mailbox verification; cannot prove a mailbox exists or can receive mail. USE WHEN: agent needs inexpensive structural and mail-domain validation before using an email address. DO NOT USE WHEN: agent requires proof that a mailbox exists or can receive mail.

3ilm vulnerability pattern search — 1032 exact-reconciled findings from 10 Sherlock contests

Recent transaction history for an address, normalized across Ethereum, Base, Arbitrum, Optimism, Polygon, Bitcoin, and Solana -- direction, counterparty, and value where the chain's data model makes that derivable.

Domain and email security check: SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT, DNSSEC (validated by Cloudflare and Google), CAA, BIMI with its mark certificate, mail IPs on the UCEPROTECT Level 1 blocklist, TLS certificate, registrar and domain age, and Microsoft 365 tenant, each graded with the exact record to fix it, plus a 0-100 score

Live foreign-exchange spot rate between any two supported currencies via CoinGecko exchange_rates (e.g. USD/EUR, BTC/JPY). Returns cross rate computed from CoinGecko's BTC-denominated rates. x402 pay-per-call on Base USDC — no API key, no subscription. Not historical rates; single spot snapshot per call. Returns 400 on unsupported pair.

Current USD market snapshot for a supported cryptocurrency symbol or CoinGecko asset name

OrionCMD Checks: Certificate status from CT logs + live HTTPS probe. Issuer, validity, days left, % of lifetime used, renewal cadence and a renewal-stall heuristic from Certificate Transparency logs (NOT the live served cert), plus a live HTTPS pass/fail probe from Cloudflare's edge.

Detect whether an email address uses a disposable / throwaway domain (Mailinator, TempMail, etc.). Classifies the INPUT address. Static list match, no external call.

Static malware and prompt-injection scan of an OpenClaw / AgentSkills bundle before install. Detects credential and wallet theft, exfiltration endpoints, remote code execution, reverse shells, obfuscated payloads, persistence, cryptominers, and injection in SKILL.md. Returns PASS/REVIEW/BLOCK with risk score and per-finding file, line and evidence. bundle = {files:[{path,content}]} or {github:'own

Return RDAP registration, subdomains, and HTTP headers for a domain.

Domain & Network Lookup: Domain registration data (registrar, created/expires, status, nameservers) via RDAP.

Bounty legitimacy check for a GitHub repo or issue: merge speed, payout signals, trap and pile-up red flags, and a verdict (likely_pays / unproven / avoid). Deterministic, public-data evidence.

Check 1-100 email addresses ($0.001 each): RFC syntax, normalization and canonical form, MX lookup (A fallback), disposable domain (CC0 list), role account, free provider, typo suggestion (gmial.com -> gmail.com), verdict and 0-100 score. No SMTP probing.

Web content extraction: fetch any public URL and get clean readable text, title, meta description, OpenGraph data, headings, links and word count as JSON. Built for AI agents that need web page content without HTML noise.

Typosquat and quality signals for an npm package before installing it: weekly downloads, latest version, license, deprecation notice, repository link, and computed risk flags (low_downloads, deprecated, no_repository, no_license, not_found). A package with 12 weekly downloads pretending to be a popular library is the classic supply-chain attack on coding agents. Pairs with the package-vulns endpoi

Deterministic technical and on-page SEO audit for one public HTTPS URL. Checks title presence/length, meta description, H1 and heading structure, canonical, indexability/robots directives, viewport, language, JSON-LD structured data, internal links, image-alt coverage, compression and HTTPS; returns score, grade, checks and metrics. Machine-accessibility signals are separate and unscored.

Domain-level contact preflight with MX provider, SPF, DMARC and structured risk signals. Does not claim mailbox existence.