aussie-shield

# Run instantly with uv
uvx aussie-shield check-message "Your ATO tax refund of $1,200 is pending: bit.ly/myato-secure"

# Or install via pip
pip install aussie-shield

aussie-shield check-url "https://myg0v-verify.com/login"

[HIGH RISK] HIGH RISK — Domain resembles myGov (possible phishing); Domain is 3 day(s) old

  URL:         https://myg0v-verify.com/login
  Domain:      myg0v-verify.com
  Domain age:  3 day(s)
  Flagged by:  Impersonation Rule Engine, RDAP Bootstrap

  Action: Do NOT visit this URL or enter credentials.
  Report: https://portal.scamwatch.gov.au/report-a-scam/

aussie-shield check-message "Final notice: Unpaid tax debt of $3,400 with ATO. Purchase $500 iTunes gift cards immediately or warrant will be issued."

[CRITICAL RISK] Payment demanded via gift cards (iTunes, Google Play, Steam) detected (confidence: 95%)

  Matched indicators:
    - gift card
    - ato
    - debt
    - warrant

  What to do:
    1. No government agency, bank, or legitimate business will EVER ask for payment via gift cards
    2. This is ALWAYS a scam
    3. Report to Scamwatch immediately (https://portal.scamwatch.gov.au/report-a-scam/)

aussie-shield check-abn 51824753556 --name "Amazon Australia"

[ACTIVE] ABN 51 824 753 556 — [Registered Entity] (Australian Private Company) | Name: MISMATCH

  ABN:              51 824 753 556
  Registered Name:  [Entity Name on Register]
  Status:           Active
  GST Registered:   Yes
  Name Match:       MISMATCH

  Risk Flags:
    - Name mismatch: Claimed 'Amazon Australia' but registered to '[Entity Name]'. Possible invoice redirection fraud.

{
  "mcpServers": {
    "aussie-shield": {
      "command": "aussie-shield",
      "args": ["serve"],
      "env": {
        "AUSSIE_SHIELD_GOOGLE_KEY": "your-google-safe-browsing-key",
        "AUSSIE_SHIELD_ABR_GUID": "your-abr-guid",
        "AUSSIE_SHIELD_ABUSEIPDB_KEY": "your-abuseipdb-key"
      }
    }
  }
}

from aussie_shield.checkers.message_checker import check_message
from aussie_shield.checkers.url_checker import check_url
from aussie_shield.checkers.abn_checker import check_abn
from aussie_shield.checkers.phone_checker import check_phone

# Message scan (Zero Network)
msg_res = check_message("AusPost: Parcel held at depot. Pay $3.50 fee at bit.ly/auspost-fee")
print(msg_res.risk_level)       # 'HIGH'
print(msg_res.scam_type)        # 'AusPost / Delivery Fee Scam'
print(msg_res.what_to_do)       # List of remediation steps

# Domain scan
url_res = check_url("https://myg0v-auth.com/login")
print(url_res.risk_level)       # 'HIGH'
print(url_res.impersonation_flags) # ["Domain resembles myGov (possible phishing)"]

# ABN verification
abn_res = check_abn("51824753556", claimed_name="Amazon Australia")
print(abn_res.valid_format)     # True
print(abn_res.claimed_name_match) # False (triggers invoice alert)