NoPhishy vs Scanii

NoPhishy (listed on RapidAPI as Exerra Phishing Check) queries a maintained database of 299,000+ known phishing domains, refreshed roughly every two hours, to flag whether a submitted URL or domain is a known phishing attempt. A live GET through the real RapidAPI gateway host with an invalid x-rapidapi-key returned a 403 rejection rather than a network-level block, reconfirming API-key auth over HTTPS, and Access-Control-Allow-Origin echoed the request's Origin on that same call. Like other RapidAPI-distributed APIs it offers a free Basic plan alongside paid tiers for higher request volumes.

Scanii is a REST API that scans uploaded files, images, and text for malware, unsafe imagery, and inappropriate language across more than 100 image formats and 20+ languages, returning findings, checksums, and content metadata as JSON. A live GET and OPTIONS preflight against api.scanii.com/v2.2/files both returned Access-Control-Allow-Origin: *, and the GET's 401 carried a WWW-Authenticate: Basic realm="Scanii API" header, correcting the stored auth from API Key to Basic Auth (the API key is used as the Basic-auth username, its secret as the password) over HTTPS. New accounts start with free trial credits before moving to metered Starter/Plus/Enterprise plans billed per file scanned.