URL Risk Analyzer

Analyze a URL's structure for phishing/typosquatting risk signals. $0.01 per request.

What it does

Send a URL, get back a risk score and specific structural red flags — typosquatting, lookalike characters, credential-harvesting patterns — based purely on the URL's structure, no external reputation database needed.

Endpoint

Method	POST
Path	`/analyze`
Content-Type	`application/json`

Fields

field	required	description
`url`	yes	The URL to analyze

Example

curl -X POST https://url-risk-analyzer.pdfextractapi.workers.dev/analyze \
  -H "Content-Type: application/json" \
  -d '{"url": "https://paypa1-secure-login.xyz/verify-account"}'

Example response

{
  "url": "https://paypa1-secure-login.xyz/verify-account",
  "risk_score": 88,
  "verdict": "high_risk",
  "flags": ["typosquatting", "credential_harvesting_pattern"],
  "summary": "Misspells a known brand name and mimics a login/verification page on an unrelated domain."
}

Errors

Errors return a non-200 status with { "error": { "code": "...", "message": "..." } }. Common codes: missing_url, invalid_url.

Payment

This endpoint is paid per-request via the x402 protocol (HTTP 402 + USDC). Unpaid requests receive a 402 response with payment instructions.