{
  "x402Version": 2,
  "id": 29520,
  "slug": "29520",
  "resource": "https://netintel.dev/url-safety/check",
  "description": "Check a URL against URLhaus malware database and heuristic phishing pattern analysis — returns threat classification, malware family if known, threat confidence, and risk score so agents can screen links before following them or sharing them in automated workflows.",
  "type": "http",
  "serviceName": "NetIntel",
  "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1784214098/bazaar-icons/7d2bf437631b2e4e.png",
  "resourceType": "Agent Service",
  "accepts": [
    {
      "scheme": "exact",
      "network": "eip155:8453",
      "payTo": "0xdaDc335482AD545296Fd7b28518A251fFCbEb9Df",
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "amount": "10000",
      "amountUsd": 0.01,
      "maxTimeoutSeconds": 300
    },
    {
      "scheme": "exact",
      "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
      "payTo": "8FVeybWnB4dYrxTuPK7WzFZNAiEcFVaDLFnKpRwVGr5s",
      "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
      "amount": "10000",
      "amountUsd": 0.01,
      "maxTimeoutSeconds": 300
    }
  ],
  "outputSchema": {
    "properties": {
      "example": {
        "properties": {
          "blacklisted_gsb": {
            "type": "boolean"
          },
          "blacklisted_surbl": {
            "type": "boolean"
          },
          "confidence": {
            "type": "string"
          },
          "findings": {
            "type": "array"
          },
          "grade": {
            "type": "string"
          },
          "heuristic_flags": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "in_urlhaus": {
            "type": "boolean"
          },
          "malware_families": {
            "items": {
              "type": "string"
            },
            "type": "array"
          },
          "score": {
            "type": "number"
          },
          "threat_classification": {
            "type": "string"
          },
          "threat_type": {
            "type": [
              "string",
              "null"
            ]
          },
          "url": {
            "type": "string"
          },
          "urlhaus_reference": {
            "description": "URLhaus entry link when the URL is listed",
            "type": [
              "string",
              "null"
            ]
          },
          "urlhaus_status": {
            "type": [
              "string",
              "null"
            ]
          }
        },
        "type": "object"
      },
      "type": {
        "type": "string"
      }
    },
    "required": [
      "type"
    ],
    "type": "object"
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "method": "GET",
          "queryParams": {
            "url": "https://example.com/page"
          },
          "type": "http"
        },
        "output": {
          "example": {
            "blacklisted_gsb": false,
            "blacklisted_surbl": false,
            "confidence": "none",
            "findings": [],
            "grade": "A",
            "heuristic_flags": [],
            "in_urlhaus": false,
            "malware_families": [],
            "score": 100,
            "threat_classification": "clean",
            "threat_type": null,
            "url": "https://example.com/page",
            "urlhaus_reference": null,
            "urlhaus_status": null
          },
          "type": "json"
        }
      },
      "schema": {
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "properties": {
          "input": {
            "additionalProperties": false,
            "properties": {
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "properties": {
                  "url": {
                    "description": "URL to check for malware and phishing indicators (e.g. https://example.com/page)",
                    "type": "string"
                  }
                },
                "required": [
                  "url"
                ],
                "type": "object"
              },
              "type": {
                "const": "http",
                "type": "string"
              }
            },
            "required": [
              "type",
              "method"
            ],
            "type": "object"
          },
          "output": {
            "properties": {
              "example": {
                "properties": {
                  "blacklisted_gsb": {
                    "type": "boolean"
                  },
                  "blacklisted_surbl": {
                    "type": "boolean"
                  },
                  "confidence": {
                    "type": "string"
                  },
                  "findings": {
                    "type": "array"
                  },
                  "grade": {
                    "type": "string"
                  },
                  "heuristic_flags": {
                    "items": {
                      "type": "string"
                    },
                    "type": "array"
                  },
                  "in_urlhaus": {
                    "type": "boolean"
                  },
                  "malware_families": {
                    "items": {
                      "type": "string"
                    },
                    "type": "array"
                  },
                  "score": {
                    "type": "number"
                  },
                  "threat_classification": {
                    "type": "string"
                  },
                  "threat_type": {
                    "type": [
                      "string",
                      "null"
                    ]
                  },
                  "url": {
                    "type": "string"
                  },
                  "urlhaus_reference": {
                    "description": "URLhaus entry link when the URL is listed",
                    "type": [
                      "string",
                      "null"
                    ]
                  },
                  "urlhaus_status": {
                    "type": [
                      "string",
                      "null"
                    ]
                  }
                },
                "type": "object"
              },
              "type": {
                "type": "string"
              }
            },
            "required": [
              "type"
            ],
            "type": "object"
          }
        },
        "required": [
          "input"
        ],
        "type": "object"
      }
    }
  },
  "tags": [
    "url safety",
    "phishing detection",
    "malware check",
    "link scanner",
    "security",
    "bazaar"
  ],
  "sourceHost": "netintel.dev",
  "lastUpdated": "2026-10-08T06:08:13.515Z",
  "quality": {
    "calls30d": 4,
    "uniquePayers30d": 3,
    "lastCalledAt": "2026-10-08T06:08:13.301Z"
  },
  "metadata": {
    "serviceName": "NetIntel",
    "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1784214098/bazaar-icons/7d2bf437631b2e4e.png",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "url": "https://example.com/page"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "blacklisted_gsb": false,
              "blacklisted_surbl": false,
              "confidence": "none",
              "findings": [],
              "grade": "A",
              "heuristic_flags": [],
              "in_urlhaus": false,
              "malware_families": [],
              "score": 100,
              "threat_classification": "clean",
              "threat_type": null,
              "url": "https://example.com/page",
              "urlhaus_reference": null,
              "urlhaus_status": null
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "url": {
                      "description": "URL to check for malware and phishing indicators (e.g. https://example.com/page)",
                      "type": "string"
                    }
                  },
                  "required": [
                    "url"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "properties": {
                    "blacklisted_gsb": {
                      "type": "boolean"
                    },
                    "blacklisted_surbl": {
                      "type": "boolean"
                    },
                    "confidence": {
                      "type": "string"
                    },
                    "findings": {
                      "type": "array"
                    },
                    "grade": {
                      "type": "string"
                    },
                    "heuristic_flags": {
                      "items": {
                        "type": "string"
                      },
                      "type": "array"
                    },
                    "in_urlhaus": {
                      "type": "boolean"
                    },
                    "malware_families": {
                      "items": {
                        "type": "string"
                      },
                      "type": "array"
                    },
                    "score": {
                      "type": "number"
                    },
                    "threat_classification": {
                      "type": "string"
                    },
                    "threat_type": {
                      "type": [
                        "string",
                        "null"
                      ]
                    },
                    "url": {
                      "type": "string"
                    },
                    "urlhaus_reference": {
                      "description": "URLhaus entry link when the URL is listed",
                      "type": [
                        "string",
                        "null"
                      ]
                    },
                    "urlhaus_status": {
                      "type": [
                        "string",
                        "null"
                      ]
                    }
                  },
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    }
  },
  "liveness": {
    "reliability": null
  },
  "verified": false,
  "featured": false,
  "provider": {
    "host": "netintel.dev",
    "manifest_name": "netintel.dev",
    "source": "cdp-mirror",
    "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources",
    "submitted_at": "2026-10-14T01:15:01.050Z"
  },
  "exampleResponse": {
    "blacklisted_gsb": false,
    "blacklisted_surbl": false,
    "confidence": "none",
    "findings": [],
    "grade": "A",
    "heuristic_flags": [],
    "in_urlhaus": false,
    "malware_families": [],
    "score": 100,
    "threat_classification": "clean",
    "threat_type": null,
    "url": "https://example.com/page",
    "urlhaus_reference": null,
    "urlhaus_status": null
  }
}