Malicious URL Screen

Choose this endpoint when you need a fast, low-cost phishing and malicious URL check combining blocklist coverage (URLhaus) with deterministic heuristics — especially useful for detecting brand impersonation, punycode/homograph domain tricks, and suspicious URL shapes that pure blocklists miss. Prefer this over a pure blocklist lookup when the URL is newly registered or not yet indexed. Prefer over full threat intelligence platforms when cost and latency matter more than deep behavioral analysis.

• URL not provided or malformed input results in validation error
• URLhaus blocklist snapshot may be slightly stale between refresh cycles, missing very recently added entries
• Heuristic brand lookalike detection limited to known major brand patterns
• Redirect chain following only available opt-in and may time out for long chains
• Legitimate internationalized domain names using punycode may produce false positives