Domain trust check API: phishing and new-domain flags
A trust verdict for any domain in one call: high/medium/low trust with named flags for very new registrations, expiry, missing or weak SPF and DMARC, too few nameservers, no web host and non-resolving domains, plus the key facts (registrar, age, nameservers, DNSSEC). Use for lead qualification, phishing and vendor checks, and before an agent sends mail to or trusts a domain. Signals only, not a guarantee. Raw DNS records: domain.
When to use it
- Get a high, medium or low trust verdict for a domain in one call
- Catch very new registrations, weak SPF/DMARC and non-resolving domains
- Check a domain before an agent emails or trusts it
Guide: Domain WHOIS and DNS lookup API
Inputs
| Name | Type | Description |
|---|---|---|
name (required) | string | Domain name, e.g. cloudflare.com |
Request
Over HTTP, with a card key from /credits:
curl -H "Authorization: Bearer adt_…" "https://tools.funwords.eu/domain-report?name=cloudflare.com"
Or one of your 25 free calls, no key:
curl "https://tools.funwords.eu/domain-report?name=cloudflare.com&trial=1"
Without a key, the same URL answers 402 Payment Required with x402 and MPP terms, so an agent with a wallet pays per call in USDC (Base, Polygon, Arbitrum or Solana over x402; Base or Tempo over MPP) and retries.
Example result
{
"domain": "cloudflare.com",
"trust": "high",
"summary": "high trust: 0 high and 0 medium flag(s). Based on DNS, registration and email-authentication signals only.",
"flags": [],
"facts": {
"exists": true,
"registrar": "Cloudflare, Inc.",
"registeredAt": "2009-02-17T22:07:54Z",
"expiresAt": "2033-02-17T22:07:54Z",
"ageDays": 6447,
"nameservers": [
"ns3.cloudflare.com",
"ns4.cloudflare.com"
],
"acceptsMail": true,
"spfPolicy": "-all",
"dmarcPolicy": "reject",
"dnssecValidated": true
},
"checkedAt": "2026-10-14T19:25:28.425Z"
}
From an AI agent (MCP)
Add the MCP server to Claude, Cursor or any MCP client. This tool is domain_report, and the first 25 successful calls are free:
https://tools.funwords.eu/mcp
Questions
Is the verdict a guarantee?
No. It lists named signals such as new registration or missing DMARC; it is not a guarantee.
How do I pay?
Each successful call costs $0.01; failed calls are not charged. The first 25 calls are free. Then pay with card credits (from $1; the key goes in an Authorization header or, for clients that can only fetch a URL, as api_key= in the URL) or per call in USDC over x402 or MPP. No account is needed.