Is this link safe?
Paste the link below. Bewary checks its domain, where a short link actually leads, and live scam feeds, then gives you a straight answer.
http://paypal-login-secure.top/verify?account=updateScam
Goes to paypal-login-secure.top
- Domain age
- Not published
- Imitates a brand
- PayPal, with extra words
- Domain ending
- .top, often used for scams
- Bewary scam list
- Not listed
Example answer, recorded Oct 31, 2026.
For developers
Phishing link checker API
GET /v1/url checks where a link lands after shorteners and redirects.
- Method and path
GET /v1/url- Credits
- 1 credit · deep=true 30
- MCP tool
lookup_url
curl "https://api.bewary.app/v1/url?u=http%3A%2F%2Fpaypal-login-secure.top%2Fverify%3Faccount%3Dupdate" \
-H "Authorization: Bearer $BEWARY_API_KEY" import os
import requests
r = requests.get("https://api.bewary.app/v1/url?u=http%3A%2F%2Fpaypal-login-secure.top%2Fverify%3Faccount%3Dupdate", headers={"Authorization": f"Bearer {os.environ['BEWARY_API_KEY']}"}, timeout=10)
result = r.json()
print(result["verdict"], result["p_scam"], result["reason_codes"]) const res = await fetch("https://api.bewary.app/v1/url?u=http%3A%2F%2Fpaypal-login-secure.top%2Fverify%3Faccount%3Dupdate", {
headers: { Authorization: `Bearer ${process.env.BEWARY_API_KEY}` },
})
const result = await res.json()
console.log(result.verdict, result.p_scam, result.reason_codes) Response
{
"verdict": "scam",
"p_scam": 0.9116,
"reason_codes": [
"DOMAIN_BRAND_ON_ABUSED_TLD",
"DOMAIN_LOOKALIKE_BRAND_WORD"
],
"entities": [
{
"type": "url",
"value": "http://paypal-login-secure.top/verify?account=update",
"verdict": "scam"
},
{
"type": "domain",
"value": "paypal-login-secure.top",
"verdict": "scam"
}
]
}