Scan a URL for phishing or malware using heuristic signals (Google Safe Browsing, RDAP domain age, known IOC corpus) plus VirusTotal multi-engine analysis

Scan a URL for phishing or malware using heuristic signals (Google Safe Browsing, RDAP domain age, known IOC corpus) plus VirusTotal multi-engine analysis. Returns an async analysis ID to poll. URL -> malware-family attribution: when RelayShield's IOC corpus already knows the URL or its domain as malware infrastructure, the response includes malware_families (corpus labels) with malware_attribution=relayshield_ioc_corpus — independent of the pending VirusTotal verdict. Call before an agent clicks, fetches, or shares a link from an untrusted source.

Billing. $0.05 in USDC per call over x402, on Base or Solana. No API key, no signup and no subscription. Send the request with no payment header, take the 402 challenge that comes back, pay it, and repeat the request. Only successful calls are charged.