# Tanod Web URL Phishing & Scam Domain Checker

> Tanod Web URL Phishing & Scam Domain Checker is a paid API for AI agents from web.tanod.dev, paid per call via x402, $0.001/call, status unknown (last checked 2026-10-13).

Checks a URL or domain against public phishing and scam domain blocklists to determine if it has been reported as malicious.

## Facts

- Endpoint: POST https://web.tanod.dev/v1/check/url?utm_source=zero.xyz
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/tanod-web-url-phishing-scam-domain-checker-cffeef3e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_F8sq2pHwU9cjjlWcJx6ll

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability tanod-web-url-phishing-scam-domain-checker-cffeef3e -d '<json body>'
```

Example prompt: Can you check if 'login-paypa1.example/verify' is on any phishing or scam domain blocklists? I got a suspicious link and want to know if it's been reported before I click it.

## When to prefer this

Use this endpoint when you need a fast, lightweight check of whether a specific URL or domain has been reported as a phishing or scam site in public blocklists. Prefer it over full web-fetch-based analysis when you only need blocklist reputation data without visiting the page. Ideal for pre-click screening of suspicious links in emails, messages, or forms. Note it only parses the URL and never fetches it, making it safe for checking potentially dangerous URLs.

## Known failure modes

- URL or domain not provided — returns validation error
- URL exceeds 2048 character limit — rejected
- Domain is syntactically invalid — may return error or no match
- Lists may be stale — recently registered phishing domains may not appear
- False positives possible — legitimate domains occasionally appear on blocklists
- Network or upstream list fetch failure — may return service error

## How this service works

Web tools: search, page to Markdown or screenshot, company profile and jobs, sitemaps, RDAP, IP.

## Output

Returns a JSON object indicating whether the host is listed on public phishing/scam domain blocklists, which sources matched, the matched domain if any, whether the domain runs on a known shared phishing platform, and the timestamp the lists were last updated. Includes a disclaimer noting absence from lists does not guarantee safety.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "url": {
   "anyOf": [
    {
     "type": "string",
     "maxLength": 2048,
     "minLength": 1
    },
    {
     "type": "null"
    }
   ],
   "default": null,
   "description": "URL, host or domain to screen (at most 2,048 characters); only parsed, never fetched."
  },
  "domain": {
   "anyOf": [
    {
     "type": "string",
     "maxLength": 2048,
     "minLength": 1
    },
    {
     "type": "null"
    }
   ],
   "default": null,
   "description": "Alternative to url: a domain or host name."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "host": "login-paypa1.example",
  "input": "https://login-paypa1.example/verify",
  "listed": false,
  "sources": [],
  "disclaimer": "Screening aid only: checks the host against public phishing/scam domain lists (see sources). Absence from these lists is not proof that a site is safe: new, targeted or unreported phishing is not on any list yet. Presence means the domain was reported/verified as phishing by the listed source at some point; lists can contain stale or mistaken entries. Combine with other checks; not legal or security advice.",
  "matched_domain": null,
  "list_updated_at": "2026-10-08T03:16:46Z",
  "shared_platform": false
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/tanod-web-url-phishing-scam-domain-checker-cffeef3e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from web.tanod.dev](https://www.zero.xyz/host/web.tanod.dev/llms.txt)