Score a URL for phishing risk before an agent opens or trusts it
Score a URL for phishing risk before an agent opens or trusts it. Keyless, deterministic heuristics - typosquat / homoglyph of a known brand, punycode / mixed-script hosts, credentials-in-URL, raw-IP hosts, suspicious TLDs, over-deep subdomains - plus a best-effort domain-age check (young domains are a top phishing signal). Returns a 0-100 risk score, a SAFE / SUSPICIOUS / DANGEROUS verdict, and labelled reasons. No API keys, no LLM.
Answeringour last check, 2026-09-24
1 of 1checks answered this week
1017 msmedian answer time
$0.003listed price per call
$0.003price it asked us
Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.
Endpoint
GET https://safe.cyberwarex.com/check
| Category | Everything else |
|---|---|
| Provider host | safe.cyberwarex.com |
| Networks | eip155:8453 |
| Payment schemes | exact |
| Self-reported calls, 30 days | 21 from 2 payers (the provider's figure, not ours) |
Our checks, last 30 days
| Day | Result | HTTP | Asked | Time |
|---|---|---|---|---|
| 2026-09-24 | valid payment request | 402 | $0.003 | 1017 ms |
Example input (from the provider)
{
"method": "GET",
"queryParams": {
"url": "https://coinbase.com.secure-login.xyz/verify"
},
"type": "http"
}
Promised output schema (from the provider)
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"method": {
"enum": [
"GET",
"HEAD",
"DELETE"
],
"type": "string"
},
"queryParams": {
"additionalProperties": false,
"properties": {
"url": {
"description": "The URL to check (a bare domain is accepted too).",
"type": "string"
}
},
"required": [
"url"
],
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"properties": {
"domain_age_days": {
"description": "best-effort via RDAP.",
"type": [
"integer",
"null"
]
},
"host": {
"type": "string"
},
"labels": {
"items": {
"type": "string"
},
"type": "array"
},
"reasons": {
"items": {
"type": "string"
},
"type": "array"
},
"registrable_domain": {
"type": "string"
},
"risk_score": {
"description": "0 (clean) to 100.",
"type": "integer"
},
"signals": {
"type": "object"
},
"url": {
"type": "string"
},
"verdict": {
"description": "SAFE | SUSPICIOUS | DANGEROUS.",
"type": "string"
}
},
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}