Dev.to
7/1/2026

I Built a Free API That Detects Phishing Sites Using AI Vision - And It Catches Prompt Injection Too
Short summary
PhishVision is a free REST API powered by GPT-4o that detects phishing sites and prompt injection attacks missed by traditional URL reputation databases. It captures full-page screenshots and extracts all visible and hidden text (including invisible payloads targeting AI agents) to analyze pages exactly as a human would. The complete source code is open-source on GitHub and the API is available free on RapidAPI—no credit card required.
- •Uses AI vision to detect phishing and prompt injection attacks that URL reputation databases miss
- •Captures full-page content and extracts hidden text invisible to humans but targeting AI agents
- •Open-source tool with free RapidAPI tier and complete setup instructions provided
Generated with AI, which can make mistakes.
Is this a good recommendation for you?



