{"api":"v1","generated_at":"2026-09-15T19:46:58.461Z","licence":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"TOLL, with a link to the page cited"},"page":"https://tollindex.com/e/safe-cyberwarex-com-check-efe03a","pinned_page":"https://tollindex.com/e/safe-cyberwarex-com-check-efe03a/at/2026-09-15T16-57Z","pinned":false,"method":"https://tollindex.com/ledger/method","snapshot_at":"2026-09-15T16:57:44.360Z","snapshot_stamp":"2026-09-15T16-57Z","endpoint":{"slug":"safe-cyberwarex-com-check-efe03a","canonical_url":"https://safe.cyberwarex.com/check","resource":"https://safe.cyberwarex.com/check","http_method":"GET","type":"http","x402_version":2,"registries":["cdp"],"primary_registry":"cdp","curated_by_coinbase":false,"description":"Score a URL for phishing risk before an agent opens or trusts it. Keyless, deterministic heuristics - typosquat / homoglyph of a known brand, punycode / mixed-script hosts, credentials-in-URL, raw-IP hosts, suspicious TLDs, over-deep subdomains - plus a best-effort domain-age check (young domains are a top phishing signal). Returns a 0-100 risk score, a SAFE / SUSPICIOUS / DANGEROUS verdict, and labelled reasons. No API keys, no LLM.","service_name":"URL Safety","declared_category":null,"declared_tags":["phishing","url","security","typosquat","safety"],"route_template":null,"registry_updated":"2026-09-15T07:36:00.607Z"},"derived":{"note":"fields no registry supplies; TOLL derives them and marks them derived on the page","title":"check","category":"market-data","first_observed_by_toll":"2026-09-10T19:08:24.178Z","last_observed_by_toll":"2026-09-15T16:57:44.360Z","observation_began":"2026-09-10"},"presence":{"listed_now":true,"first_absent_at":null,"delisting_confirmed_at":null,"events":[{"registry":"cdp","at":"2026-09-10T19:08:24.178Z","event":"listed"}]},"accepts":[{"registry":"cdp","ordinal":0,"network":"eip155:8453","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.003 USDC","amount_units":0.003,"decimals_known":true,"pay_to":"0x058D0Cc5CC97e61e8A9f38D6d6365bce525921B2","scheme":"exact"}],"counters":{"observed_at":"2026-09-15T16:57:44.360Z","calls_30d":13,"unique_payers_30d":2,"last_called_at":"2026-09-15T07:36:00.117Z"},"validation":{"latest":{"observed_at":"2026-09-15T06:58:35.642Z","state":"pass","failed_checks":[],"endpoint_http_status":402,"run_id":"daily-2026-09-15"},"uptime":[{"days":7,"observed":5,"passed":5,"ratio":1},{"days":30,"observed":5,"passed":5,"ratio":1},{"days":90,"observed":5,"passed":5,"ratio":1}],"history_90d":[{"observed_at":"2026-09-15T06:58:35.642Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-15","state_changed":false},{"observed_at":"2026-09-14T06:25:23.996Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-14","state_changed":false},{"observed_at":"2026-09-13T06:15:26.764Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-13","state_changed":false},{"observed_at":"2026-09-12T09:02:05.740Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-12","state_changed":false},{"observed_at":"2026-09-11T14:42:56.934Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-11","state_changed":true}]},"seller":{"wallet":"0x058D0Cc5CC97e61e8A9f38D6d6365bce525921B2","page":"https://tollindex.com/seller/0x058D0Cc5CC97e61e8A9f38D6d6365bce525921B2","endpoints":36,"hosts":17},"reports":0,"registry_record":{"cdp":[{"tags":["phishing","url","security","typosquat","safety"],"type":"http","accepts":[{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x058D0Cc5CC97e61e8A9f38D6d6365bce525921B2","amount":"3000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300}],"iconUrl":"https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1788960152/bazaar-icons/f98489fd044477d5.png","quality":{"lastCalledAt":"2026-09-15T07:36:00.117Z","l30DaysTotalCalls":13,"l30DaysUniquePayers":2},"resource":"https://safe.cyberwarex.com/check","extensions":{"bazaar":{"info":{"input":{"type":"http","method":"GET","queryParams":{"url":"https://coinbase.com.secure-login.xyz/verify"}},"output":{"type":"json","example":{"url":"https://coinbase.com.secure-login.xyz/verify","host":"coinbase.com.secure-login.xyz","labels":["brand_impersonation","suspicious_tld"],"source":"heuristics + RDAP","reasons":["'coinbase' appears in the host but the domain is secure-login.xyz, not coinbase.com"],"verdict":"DANGEROUS","risk_score":80,"domain_age_days":4,"registrable_domain":"secure-login.xyz"}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","required":["url"],"properties":{"url":{"type":"string","description":"The URL to check (a bare domain is accepted too)."}},"additionalProperties":false}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"url":{"type":"string"},"host":{"type":"string"},"labels":{"type":"array","items":{"type":"string"}},"reasons":{"type":"array","items":{"type":"string"}},"signals":{"type":"object"},"verdict":{"type":"string","description":"SAFE | SUSPICIOUS | DANGEROUS."},"risk_score":{"type":"integer","description":"0 (clean) to 100."},"domain_age_days":{"type":["integer","null"],"description":"best-effort via RDAP."},"registrable_domain":{"type":"string"}}}}}}}}},"description":"Score a URL for phishing risk before an agent opens or trusts it. Keyless, deterministic heuristics - typosquat / homoglyph of a known brand, punycode / mixed-script hosts, credentials-in-URL, raw-IP hosts, suspicious TLDs, over-deep subdomains - plus a best-effort domain-age check (young domains are a top phishing signal). Returns a 0-100 risk score, a SAFE / SUSPICIOUS / DANGEROUS verdict, and labelled reasons. No API keys, no LLM.","lastUpdated":"2026-09-15T07:36:00.607Z","serviceName":"URL Safety","x402Version":2}]}}