{"slug":"safe-cyberwarex-com-check-65eca2","title":"Score a URL for phishing risk before an agent opens or trusts it","host":"safe.cyberwarex.com","method":"GET","resource":"https://safe.cyberwarex.com/check","category":"other","description":"Score a URL for phishing risk before an agent opens or trusts it. Keyless, deterministic heuristics - typosquat / homoglyph of a known brand, punycode / mixed-script hosts, credentials-in-URL, raw-IP hosts, suspicious TLDs, over-deep subdomains - plus a best-effort domain-age check (young domains ar","price_listed":0.003,"price_asked":0.003,"state":"answering","state_label":"Answering","checks_7d":1,"answered_7d":1,"latency_ms_median":1017,"reported_calls_30d":21,"reported_payers_30d":2,"networks":["eip155:8453"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"method":"GET","queryParams":{"url":"https://coinbase.com.secure-login.xyz/verify"},"type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"additionalProperties":false,"properties":{"url":{"description":"The URL to check (a bare domain is accepted too).","type":"string"}},"required":["url"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"properties":{"domain_age_days":{"description":"best-effort via RDAP.","type":["integer","null"]},"host":{"type":"string"},"labels":{"items":{"type":"string"},"type":"array"},"reasons":{"items":{"type":"string"},"type":"array"},"registrable_domain":{"type":"string"},"risk_score":{"description":"0 (clean) to 100.","type":"integer"},"signals":{"type":"object"},"url":{"type":"string"},"verdict":{"description":"SAFE | SUSPICIOUS | DANGEROUS.","type":"string"}},"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"},"history":[{"day":"2026-09-24","reachable":true,"status":402,"valid_402":true,"asked_usdc":0.003,"price_match":true,"latency_ms":1017,"error":null}],"description_full":"Score a URL for phishing risk before an agent opens or trusts it. Keyless, deterministic heuristics - typosquat / homoglyph of a known brand, punycode / mixed-script hosts, credentials-in-URL, raw-IP hosts, suspicious TLDs, over-deep subdomains - plus a best-effort domain-age check (young domains are a top phishing signal). Returns a 0-100 risk score, a SAFE / SUSPICIOUS / DANGEROUS verdict, and labelled reasons. No API keys, no LLM.","last_updated":"2026-09-24T07:36:11.687Z","schemes":["exact"]}