# SafeBrowz URL Phishing & Wallet Drainer Detection

> SafeBrowz URL Phishing & Wallet Drainer Detection is a paid API for AI agents from api.safebrowz.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-10).

Scans a URL for phishing, wallet drainers, and brand impersonation threats, returning a verdict, trust score, and threat classification

## Facts

- Endpoint: POST https://api.safebrowz.com/v1/detect?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-10
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/safebrowz-url-phishing-wallet-drainer-detection-1b262acf
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_SaqjBHaowHC-v_d1awCoZ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability safebrowz-url-phishing-wallet-drainer-detection-1b262acf -d '<json body>'
```

Example prompt: Can you check whether https://metamask-airdrop-claim.xyz is safe or a phishing/wallet drainer site before I click it?

## When to prefer this

Use this endpoint when you need real-time, pay-per-use phishing and wallet drainer detection with no API key setup, especially for crypto-adjacent URLs, brand impersonation checks across 420+ brands, or multilingual threat detection. Prefer over general safe-browsing APIs when crypto wallet drainers are a specific concern.

## Known failure modes

- URL exceeds 2048 characters — request rejected
- Malformed or non-HTTP/HTTPS URL — validation error
- Payment not completed or insufficient USDC — 402 response blocking access
- Unknown or unrecognized URL with low signal data — low confidence score returned
- Network timeout scanning the target URL — delayed or error response

## How this service works

Phishing and wallet drainer detection API. $0.001 USDC per request via x402 on Solana or Base. No signup, no API keys. 420+ brands tracked, 100+ languages.

## Output

Returns a verdict of 'safe', 'caution', or 'danger'; an integer trust score (0–100); a confidence value (0–1); optionally the impersonated brand name; a human-readable reason; detected threat types; and signal/detail objects explaining the analysis.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "url"
 ],
 "properties": {
  "url": {
   "type": "string",
   "description": "URL to scan. http or https. Max 2048 chars."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "verdict",
  "trust_score",
  "confidence"
 ],
 "properties": {
  "brand": {
   "type": [
    "string",
    "null"
   ]
  },
  "reason": {
   "type": "string"
  },
  "details": {
   "type": "object"
  },
  "signals": {
   "type": "object"
  },
  "verdict": {
   "enum": [
    "safe",
    "caution",
    "danger"
   ],
   "type": "string"
  },
  "confidence": {
   "type": "number",
   "maximum": 1,
   "minimum": 0
  },
  "trust_score": {
   "type": "integer",
   "maximum": 100,
   "minimum": 0
  },
  "threat_types": {
   "type": "array",
   "items": {
    "type": "string"
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/safebrowz-url-phishing-wallet-drainer-detection-1b262acf/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.safebrowz.com](https://www.zero.xyz/host/api.safebrowz.com/llms.txt)