Shield url endpoint