Pricing

$20.00 / 1,000 url checkeds

URL Safety Analyzer API - Phishing & Suspicious URL Check

URL safety analyzer API. Input: urls (array). Output: JSON per URL with heuristic phishing signals - IP-as-host, punycode/homograph, excessive subdomains, suspicious TLDs, lookalike brands, shorteners, risky keywords - and a risk summary. No external blocklist. Pennies per URL checked.

Pricing

$20.00 / 1,000 url checkeds

Rating

0.0

(0)

Developer

Anthony Snider

Actor stats

Bookmarked

Total users

Monthly active users

3 days ago

Last modified

URL Safety Analyzer

Spot phishing and lookalike URLs in milliseconds — no external blocklist, no API keys, no rate limits.

Live on the Apify Store — run it instantly or call it as an agent tool via Apify MCP.

What you get

Heuristic phishing score 0-100 with a clear riskLevel (safe / low / medium / high / critical).
Signals that actually fired, so you know why a URL is risky: IP-as-host, punycode/homograph (xn--), @-in-URL host masking, excessive subdomains, long URLs, suspicious TLDs (.zip, .tk, …), brand lookalikes (paypal/apple/coinbase on a non-brand domain), action keywords (login/verify/secure), plain HTTP, URL shorteners, and hyphen/digit-stuffed hosts.
Brand-aware guard: real brand domains (paypal.com, apple.com…) are not flagged as lookalikes.
Bulk or single input, fully offline — every check is local, fast, and deterministic.
Clean per-item output: { url, riskScore, riskLevel, signals, recommendation }.

Input

{
  "urls": [
    "https://paypal-secure-login.tk/verify?account=update",
    "https://github.com",
    "http://192.168.0.1/admin"
  ],
  "maxUrls": 50
}

Pass either url (single) or urls (bulk).

Output

One dataset item per URL:

{
  "url": "https://paypal-secure-login.tk/verify?account=update",
  "riskScore": 92,
  "riskLevel": "critical",
  "signals": [
    "suspicious-tld:.tk",
    "brand-lookalike:paypal",
    "risky-keyword-host:secure",
    "risky-keyword-path:verify",
    "several-hyphens"
  ],
  "recommendation": "Critical phishing risk. Treat as malicious — do not visit or share."
}

A clean URL returns riskLevel: "safe", riskScore: 0, and an empty signals array.

Pricing

Pay-per-event: $0.02 per URL checked. No monthly fee.

Short URL Resolver & Scraper

taroyamada/url-shortener-resolver

Trace redirect chains and expand short URLs without executing browser scripts. Extract complete hop histories, identify infinite loops, and verify HTTP status.

naoki anzai

URL Shortener Expander

automation-lab/url-shortener-expander

This actor takes any list of shortened or redirecting URLs and follows each redirect step by step to reveal the final destination URL. It returns the complete redirect chain, redirect count, final status code, and final domain. Use it for link analysis, security verification, or marketing...

Stas Persiianenko

WHOIS Domain Lookup: Operational Domain Intelligence

ryanclinton/whois-domain-lookup

Look up WHOIS and RDAP registration data for any domain in bulk. Get registrar details, creation and expiry dates, nameservers, domain age, registrant info, DNSSEC status, and EPP status codes -- all without needing any API key.

Ryan Clinton

Unicode Text Inspector

maximedupre/unicode-text-inspector

Inspect pasted text for hidden Unicode characters, zero-width spaces, bidi controls, control characters, and homoglyphs. Get risk levels, issue evidence, category counts, cleaned text, and batch summaries.

Maxime Dupré

Google Safe Browsing

seemuapps/google-safe-browsing

Check a list of URLs against Google Safe Browsing threat lists and report per-URL safety status.

Andrew

Codespaces React

powerful_platypus/codespaces-react

Cybersecurity

GOUNTANTE yendoukoa

ScamSense

blukaze/ScamSense

ScamSense analyzes suspicious messages with OSINT checks on URLs, emails, phones, and dark web signals to score scam risk and explain why.

Blukaze Automations

URL Shortener Resolver API

andok/url-shortener-resolver

Bulk unshorten URLs and extract complete HTTP redirect chains. Resolve bit.ly, t.co, and others to find the final destination URL and HTTP status code.

Andok

Email & Domain OSINT (WHOIS + DNS + SSL + Breach)

gochujang/email-domain-osint

Per email: disposable / role detection, provider, optional password breach check (HIBP k-anonymity). Per domain: WHOIS, DNS (A/AAAA/MX/TXT/SPF/DMARC/DKIM probe), SSL cert + days-to-expiry, public HIBP breach metadata. All free APIs. $0.005 per target checked.

Hojun Lee

Trustpilot Review Analyzer — Sentiment, Trends & Response Rates

ryanclinton/trustpilot-review-analyzer

Scrape Trustpilot reviews for any business. Extract TrustScore, star ratings, review text, sentiment analysis, response rates, and keyword trends. No API key needed. Export JSON/CSV/Excel.

Ryan Clinton