AI chat endpoint (currently taken over / non-functional).
What it does
NanoBrain Alpha was listed as an x402-payable AI chat endpoint at nanobrain-alpha.vercel.app/api/chat. However, the domain has been subject to a subdomain takeover. The root page now displays a "Subdomain Takeover PoC" notice by a security researcher (gh0stfqce), indicating the original deployment is no longer present. The /api/chat endpoint returns 404 on both POST and GET, and no x402 payment challenge is returned.
All other paths (/docs, /api, /pricing, /README) also return Vercel 404 errors, confirming the original application has been removed or was never properly deployed at this subdomain. The takeover notice explicitly states the domain appears in a payments-mcp discovery registry and is "served to all wallet installations," which raises significant security concerns for any agent or wallet that might attempt to interact with it.
No documentation, OpenAPI schema, pricing information, or working functionality could be found. This listing should be treated as non-functional and potentially dangerous until the subdomain is reclaimed by its legitimate owner.
Capabilities
Use cases
- —AI chat via paid API call (not currently functional)
Fit
Best for
- —Nothing — endpoint is not live
Not for
- —Any production use — domain has been taken over
- —Automated agent interactions — security risk from subdomain takeover
- —Any use requiring reliable uptime
Quick start
# Endpoint is NOT live. Do not send payments to this domain.
# The subdomain has been taken over by a third party.
curl -X POST https://nanobrain-alpha.vercel.app/api/chat
# Returns 404Endpoint
Quality
The endpoint is completely non-functional (404 on all methods, no x402 challenge). The domain has been subject to a confirmed subdomain takeover, making it a security risk. No schema, docs, or pricing exist.
Warnings
- —CRITICAL: Subdomain takeover detected — root page shows a PoC by 'gh0stfqce' claiming the domain was taken over
- —Endpoint returns 404 on both POST and GET; no x402 payment challenge is present
- —All documentation and API paths return 404
- —The takeover notice states this domain is in a payments-mcp discovery registry served to wallet installations — agents should NOT interact with this endpoint
- —Original application appears to be completely removed from this Vercel deployment
Citations
- —The root page displays a subdomain takeover proof-of-concept by gh0stfqce, timestamped 2026-04-22https://nanobrain-alpha.vercel.app
- —The /api/chat endpoint returns 404 on both POST and GET requestshttps://nanobrain-alpha.vercel.app/api/chat
- —The takeover notice states the domain is in the payments-mcp discovery registry and served to all wallet installationshttps://nanobrain-alpha.vercel.app