# URL Safety Check: Domain Age, Redirects & HTTPS

> URL Safety Check: Domain Age, Redirects & HTTPS is a paid API for AI agents from agent-data-tools.revmesh2074.workers.dev, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-26).

Analyzes a URL for scam and phishing risk signals by following redirects, checking domain age and registrar, and inspecting HTTPS and security headers

## Facts

- Endpoint: GET https://agent-data-tools.revmesh2074.workers.dev/pack/url-safety?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-26
- Activations on Zero: 0
- Provider: agent-data-tools.revmesh2074.workers.dev
- Website: https://agent-data-tools.revmesh2074.workers.dev
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agent-data-tools-revmesh2074-workers-dev-url-safety-check-domain-age-3364284b
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_L6Su-aJV4b10F7sUfB-bN

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agent-data-tools-revmesh2074-workers-dev-url-safety-check-domain-age-3364284b
```

Example prompt: Before I click this payment link, can you check if https://secure-checkout.paymentverify-now.com is safe — trace any redirects, check how old the domain is, and flag anything suspicious?

## When to prefer this

Choose this endpoint when an AI agent needs to vet an unknown or suspicious URL before the user clicks it, follows a redirect, or makes a payment. It is specifically useful for links found in emails, chat messages, invoices, or scraped web content where trust cannot be assumed. Unlike phishing blocklists, this endpoint uses heuristic signals derived from public facts (domain age, redirect chains, HTTPS, security headers, hostname structure), making it valuable for newly registered domains and obfuscated links that blocklists may not yet cover. Prefer this over a generic WHOIS lookup when you also need redirect tracing and security header grading in a single call.

## Known failure modes

- URL is unreachable or times out — failed object returned, partial data may be present
- Malformed URL input — error response, no analysis performed
- Domain WHOIS data unavailable — ageDays and registrar may be null
- Redirect loop detected — chain may be truncated
- Non-HTTP/HTTPS scheme provided — rejected with error
- Network error resolving DNS — domain trust fields missing

## How this service works

URL safety check, scam signals. Check a link before an agent opens or pays it: where it really leads (each redirect hop, the final URL), the destination domain's age, registrar and trust flags, HTTPS and security headers, and named risk signals (days-old domain, bare IP host, punycode look-alike, user@host trick, chains across many hosts). Heuristic signals from public facts, not a phishing blocklist. Use to vet links in emails, chats and scraped pages, or a payee's website.

## Output

Returns a structured JSON object with: the original URL and resolved final URL, a risk rating string, a redirect trace (each hop with status code, host list, and hop count), domain info (name, age in days, registrar, trust grade), HTTPS status and security headers grade/score, and an array of named risk signal strings (e.g. 'days-old domain', 'bare-IP host', 'punycode lookalike', 'redirect chain across many hosts').

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "url"
     ],
     "properties": {
      "url": {
       "type": "string",
       "examples": [
        "http://github.com"
       ],
       "description": "The link to check (http or https)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object",
     "properties": {
      "url": {
       "type": "string"
      },
      "pack": {
       "type": "string"
      },
      "risk": {
       "type": "string"
      },
      "domain": {
       "type": "object",
       "properties": {
        "trust": {
         "type": "string"
        },
        "domain": {
         "type": "string"
        },
        "ageDays": {
         "type": "number"
        },
        "registrar": {
         "type": "string"
        }
       }
      },
      "failed": {
       "type": "object",
       "properties": {}
      },
      "signals": {
       "type": "array",
       "items": {}
      },
      "finalUrl": {
       "type": "string"
      },
      "security": {
       "type": "object",
       "properties": {
        "grade": {
         "type": "string"
        },
        "https": {
         "type": "boolean"
        },
        "score": {
         "type": "number"
        }
       }
      },
      "redirects": {
       "type": "object",
       "properties": {
        "hops": {
         "type": "array",
         "items": {
          "type": "object",
          "properties": {
           "url": {
            "type": "string"
           },
           "status": {
            "type": "number"
           }
          }
         }
        },
        "count": {
         "type": "number"
        },
        "hosts": {
         "type": "array",
         "items": {
          "type": "string"
         }
        }
       }
      }
     }
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "url": "http://github.com/",
  "pack": "url-safety",
  "risk": "low",
  "domain": {
   "trust": "high",
   "domain": "github.com",
   "ageDays": 6600,
   "registrar": "MarkMonitor Inc."
  },
  "failed": {},
  "signals": [],
  "finalUrl": "https://github.com/",
  "security": {
   "grade": "B",
   "https": true,
   "score": 80
  },
  "redirects": {
   "hops": [
    {
     "url": "http://github.com/",
     "status": 301
    }
   ],
   "count": 1,
   "hosts": [
    "github.com"
   ]
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agent-data-tools-revmesh2074-workers-dev-url-safety-check-domain-age-3364284b/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agent-data-tools.revmesh2074.workers.dev](https://www.zero.xyz/host/agent-data-tools.revmesh2074.workers.dev/llms.txt)