# TrustLink XRPL Phishing Defense

> TrustLink XRPL Phishing Defense is a paid API for AI agents from trust.terramike.com, paid per call via x402, $0.02/call, status unknown (last checked 2026-10-18).

Checks a URL against a verified link registry for the XRP Ledger ecosystem to determine whether it is a known-good link, an unknown URL on a known domain, or entirely unrecognized — providing phishing defense for AI agents and users.

## Facts

- Endpoint: GET https://trust.terramike.com/v1/check?utm_source=zero.xyz
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-18
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/trustlink-xrpl-phishing-defense-9891d959
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_vesweFt8QMixk5tE1NDVv

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability trustlink-xrpl-phishing-defense-9891d959
```

Example prompt: Can you check whether https://xumm.app is a verified, official link in the XRPL ecosystem or if it could be a phishing site?

## When to prefer this

Use TrustLink when operating in the XRP Ledger ecosystem and needing to quickly vet whether a URL is officially associated with a known XRPL entity before presenting it to users, processing a transaction, or following a link. It is purpose-built for the XRPL community, unlike generic phishing databases that lack XRPL-specific registry coverage. Prefer this over general-purpose safe-browsing APIs when the context is specifically XRP, XRPL tokens, wallets, or DEX projects.

## Known failure modes

- URL not in registry returns verdict 'unknown' — does not mean the site is malicious, only unverified
- A URL on a known domain with an unrecognized path returns 'unknown-url-on-known-domain' — partial confidence only
- Registry may lag behind newly registered phishing domains not yet reported
- No guarantee of project quality or safety — only URL authenticity
- Malformed or unparseable URLs may result in errors or unexpected verdicts

## How this service works

The verified link registry for XRPL — phishing defense as a service for AI agents. Phishing defense, not endorsement. A 'verified' link means the URL is genuinely theirs — not that the project is safe.

## Output

Returns a verdict of 'known-good', 'unknown-url-on-known-domain', or 'unknown', plus an optional registry entry containing metadata about the link when it is recognized. The verdict indicates whether the URL is in the verified XRPL link registry, partial matches on the domain, or entirely unrecognized — but does NOT imply the project itself is safe or trustworthy, only that the URL is genuinely theirs.

## Request schema (JSON Schema)

```json
{
 "properties": {
  "input": {
   "required": [
    "method"
   ],
   "properties": {
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "entry": "registry entry when known",
 "verdict": "known-good | unknown-url-on-known-domain | unknown"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/trustlink-xrpl-phishing-defense-9891d959/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from trust.terramike.com](https://www.zero.xyz/host/trust.terramike.com/llms.txt)