{"uid":"cap_R7eA_RQd2VrI2gXt1pecH","slug":"shieldapi-url-safety-phishing-detection-08c5bcb7","name":"ShieldAPI – URL Safety & Phishing Detection","description":"URL safety & phishing detection","url":"https://shield.vainplex.dev/api/check-url","method":"GET","headers":{},"bodySchema":{"properties":{"input":{"required":["method"],"properties":{"method":{"enum":["GET"],"type":"string"}}}}},"responseSchema":null,"example":{"request":{"demo":true,"hash":"356a192b7913b04c54574d18c28d46e6395428ab"},"response":{"url":"https://paypal-secure-login.tk/verify/account","mode":"demo","note":"This is demo data. Real checks query URLhaus + PhishTank + heuristic analysis.","path":"/verify/account","checks":{"http":{"error":"ENOTFOUND","reachable":false},"urlhaus":{"found":false},"heuristics":{"warnings":["Suspicious TLD: tk","Possible brand impersonation: paypal","Path contains login/verification keywords"],"has_https":true,"url_length":52,"risk_points":35,"subdomain_count":0}},"domain":"paypal-secure-login.tk","threats":[{"type":"suspicious","detail":"Suspicious TLD: tk; Possible brand impersonation: paypal; Path contains login/verification keywords","source":"Heuristic Analysis"}],"risk_level":"dangerous","risk_score":45}},"exampleRequest":{"demo":true,"hash":"356a192b7913b04c54574d18c28d46e6395428ab"},"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_85pJRr8IPwM7FO1w9jciE","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks a URL for safety, phishing risk, and malicious content using real-time security intelligence","exampleAgentPrompt":"Before I open this link someone sent me — https://suspicious-promo.xyz/free-gift — can you run a ShieldAPI phishing and safety check on it to tell me if it's dangerous?","exampleUseCases":[{"title":"Email security screening for finance teams","prompt":"I got this payment confirmation email with a link to update my billing info — can you check if https://verify-account-secure.com/billing-update is legitimate or a phishing attempt before I click it?"},{"title":"User-submitted link validation in chat","prompt":"Someone in our community chat shared this resource link — https://download-tools.net/utility — can you run a safety check on it to make sure it's not malicious before we promote it?"},{"title":"Automated redirect verification in workflows","prompt":"Our system is about to redirect users to a third-party integration at https://partner-checkout.io/payment — can you verify that URL is safe and not a phishing or malware threat before we send traffic there?"}],"resultDescription":"Returns a safety verdict indicating whether the URL is safe, phishing, malicious, or suspicious, along with threat classification details and a risk score based on real-time security intelligence.","failureModes":["Invalid or missing SHA-1 hash format (must be 40 hex chars) returns 400 error","URL not found in threat database returns unknown/unrated result","Rate limiting or payment failure returns 402/429 error","Demo mode returns limited or partial results","Network timeout returns 503 error"],"whenToPreferThis":"Use this endpoint when you need to verify the safety of a URL before an agent or user opens it, follows a redirect, or makes a payment — especially useful as a security preflight check in automated workflows, x402 payment pipelines, or when handling user-submitted or untrusted links.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T18:34:11.697Z","isFirstParty":false}