---
title: "Phishing / Smishing Link Check"
method: POST
path: "/api/util/phishing"
---

# Phishing / Smishing Link Check

`POST /api/util/phishing`

## Request

- Base URL: `https://dechonet.com`
- URL: `https://dechonet.com/api/util/phishing`
- Auth: one of:
  - none
  - HTTP bearer

Check the links in a suspicious text message (smishing) or e-mail before anyone taps them.

## Query parameters

- `lang` 'en' | 'ko'

## Request body

- object
  - `text` string, required: The link(s) to check — a URL, or the message text with verification codes, passwords and personal details removed (any language). Only the links are used (up to 5); the text is not stored.

## Response `200`

Result

- Envelope
  - `ok` boolean, required
  - `requestId` string, required
  - `cached` boolean, required: True when a recent stored result was returned.
  - `updatedAt` string, date-time, nullable: When the result was produced.
  - `data` unknown, required
  - `error` object, nullable, required
    - `code` 'INVALID_INPUT' | 'NOT_FOUND' | 'RATE_LIMITED' | 'UPSTREAM_ERROR' | 'UPSTREAM_TIMEOUT' | 'INVALID_API_KEY' | 'API_KEY_REQUIRED'
    - `message` string
    - `retryAfter` integer, nullable
    - `reason` string
  - `previousSnapshot` object: The previous stored result for the same target, when there is one.

## Other responses

- `400`: Invalid input
- `401`: Wrong or revoked API key, or a key is required
- `429`: Rate limited — see the Retry-After header
- `503`: An upstream source failed or timed out

---

[API](https://skmtc.dev/dechonet/apis/dechonet-api.md) · [All operations](https://skmtc.dev/dechonet/apis/dechonet-api/llms.txt) · [OpenAPI document](https://skmtc.dev/dechonet/apis/dechonet-api/revisions/87d89f1c4d1b?raw)