URL Safety | Apiosk Gateway

Base URL

https://gateway.apiosk.com/cbz-safe-cyberwarex-com

Technical Specs

Auth MethodNone (x402 payment proof only)

Response FormatJSON

Endpoints1

Endpoints

Method	Path	Description	Cost
GET	/check	Score a URL for phishing risk before an agent opens or trusts it. Keyless, deterministic heuristics - typosquat / homoglyph of a known brand, punycode / mixed-script hosts, credentials-in-URL, raw-IP hosts, suspicious TLDs, over-deep subdomains - plus a best-effort domain-age check (young domains are a top phishing signal). Returns a 0-100 risk score, a SAFE / SUSPICIOUS / DANGEROUS verdict, and labelled reasons. No API keys, no LLM.	$0.0034 default	View details

Endpoint documentation

GET/check

$0.0034 default

Description

Score a URL for phishing risk before an agent opens or trusts it. Keyless, deterministic heuristics - typosquat / homoglyph of a known brand, punycode / mixed-script hosts, credentials-in-URL, raw-IP hosts, suspicious TLDs, over-deep subdomains - plus a best-effort domain-age check (young domains are a top phishing signal). Returns a 0-100 risk score, a SAFE / SUSPICIOUS / DANGEROUS verdict, and labelled reasons. No API keys, no LLM.

Pricing

$0.0034 default

Parameters

{
  "additionalProperties": false,
  "properties": {
    "url": {
      "description": "The URL to check (a bare domain is accepted too).",
      "type": "string"
    }
  },
  "required": [
    "url"
  ],
  "type": "object"
}

Example response

{
  "domain_age_days": 4,
  "host": "coinbase.com.secure-login.xyz",
  "labels": [
    "brand_impersonation",
    "suspicious_tld"
  ],
  "reasons": [
    "'coinbase' appears in the host but the domain is secure-login.xyz, not coinbase.com"
  ],
  "registrable_domain": "secure-login.xyz",
  "risk_score": 80,
  "source": "heuristics + RDAP",
  "url": "https://coinbase.com.secure-login.xyz/verify",
  "verdict": "DANGEROUS"
}