# Lordevo URL Risk Signals

> Lordevo URL Risk Signals is a paid API for AI agents from shop.lordevo.com, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-31).

Checks a URL for trust signals before clicking or paying: TLS validity, redirect chain, domain age, brand lookalike detection, and phishing/scam patterns

## Facts

- Endpoint: GET https://shop.lordevo.com/api/quick/url-trust?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-31
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/lordevo-url-risk-signals-37c6568e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_5PWSwk1yV6gksfYqW7kKR

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability lordevo-url-risk-signals-37c6568e
```

Example prompt: Can you check whether this link is safe before I click it or enter any payment info — https://paypa1-secure.com/checkout? I want to know if it's risky, what the domain age is, and whether it looks like a brand lookalike.

## When to prefer this

Choose this endpoint when you need a fast, pre-click or pre-pay signal on a single URL covering multiple trust dimensions in one call — TLS, redirects, domain age, lookalike detection, and content patterns. Prefer it over a standalone domain-age or redirect-chain endpoint when you need a holistic risk verdict rather than one signal in isolation. Ideal for agentic workflows that screen user-supplied URLs before navigation or payment.

## Known failure modes

- URL is unreachable or times out — reduced coverage with unknown confidence returned
- Domain RDAP lookup fails — domain age signal marked as inferred rather than observed
- TLS check fails for non-HTTPS URLs — TLS field returned as null
- Redirect chain exceeds hop limit — chain truncated
- Malformed or non-HTTP URL input — validation error returned
- Punycode or IDN domains may not resolve — risk flagged as unknown

## How this service works

SEO audits, website security checks, SEO content plans, articles and site fix plans as API endpoints for AI agents. Pay per request in USDC on Base with…

## Output

Returns a JSON object with a risk verdict (low_observed_risk, elevated, high, or unknown), a numeric score 0–100, confidence level, array of human-readable reason strings, TLS certificate details (issuer, validity, days remaining), redirect chain with hop statuses, domain registration facts (age in days, registrar, registrable domain), brand lookalike detection (e.g. 'paypal'), security headers grade, and an array of detailed signal objects each with id, weight, basis, evidence, and direction.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "url"
     ],
     "properties": {
      "url": {
       "type": "string",
       "description": "Public http(s) URL or bare domain, e.g. https://example.com"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object",
     "required": [
      "tool",
      "url",
      "reasons",
      "schema",
      "risk",
      "signals",
      "coverage",
      "not_a_guarantee"
     ],
     "properties": {
      "tls": {
       "type": [
        "object",
        "null"
       ]
      },
      "url": {
       "type": "string"
      },
      "risk": {
       "type": "object",
       "required": [
        "level",
        "score",
        "confidence"
       ],
       "properties": {
        "level": {
         "enum": [
          "low_observed_risk",
          "elevated",
          "high",
          "unknown"
         ],
         "type": "string"
        },
        "score": {
         "type": "integer",
         "maximum": 100,
         "minimum": 0
        },
        "confidence": {
         "enum": [
          "low",
          "medium",
          "high"
         ],
         "type": "string"
        },
        "thresholds": {
         "type": "object"
        },
        "calibration": {},
        "observed_bad_rate": {
         "type": [
          "object",
          "null"
         ]
        }
       }
      },
      "tool": {
       "type": "string"
      },
      "x402": {
       "type": "object",
       "properties": {
        "valid": {
         "type": "boolean"
        },
        "issues": {
         "type": "array"
        },
        "options": {
         "type": "array"
        },
        "detected": {
         "type": "boolean"
        }
       }
      },
      "domain": {
       "type": "object"
      },
      "schema": {
       "type": "string",
       "const": "trust/2"
      },
      "content": {
       "type": "object"
      },
      "reasons": 
… (truncated)
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "tls": {
   "valid": true,
   "issuer": "Let's Encrypt",
   "days_left": 84
  },
  "url": "https://paypa1-secure.example/",
  "tool": "url-trust",
  "x402": {
   "detected": false
  },
  "score": 17,
  "domain": {
   "age_days": 6,
   "punycode": false,
   "registered": "2026-10-21",
   "registrable": "paypa1-secure.example",
   "brand_lookalike": "paypal"
  },
  "reasons": [
   "A password form on a lookalike domain (classic phishing).",
   "paypa1-secure.example looks like \"paypal\" but is not its domain.",
   "Domain registered only 6 days ago (2026-10-21)."
  ],
  "verdict": "risky",
  "final_url": "https://paypa1-secure.example/login",
  "redirects": [
   {
    "url": "https://paypa1-secure.example/",
    "status": 302
   },
   {
    "url": "https://paypa1-secure.example/login",
    "status": 200
   }
  ],
  "threat_list": {
   "checked": false
  },
  "security_headers": {
   "grade": "D",
   "score": 44
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/lordevo-url-risk-signals-37c6568e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from shop.lordevo.com](https://www.zero.xyz/host/shop.lordevo.com/llms.txt)