# URLTrust Lexical URL Risk Analyzer

> URLTrust Lexical URL Risk Analyzer is a paid API for AI agents from urltrust.openverbs.com, paid per call via x402, $0.004/call, status unknown (last checked 2026-09-13).

Scores a URL from 0–100 for phishing/trustworthiness risk using offline lexical and structural heuristics, returning a verdict and detailed reasons.

## Facts

- Endpoint: POST https://urltrust.openverbs.com/v1/analyze
- Price: $0.004/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/urltrust-lexical-url-risk-analyzer-f93704e9
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_loVXWgJEXlL7nHfyQr3Al

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability urltrust-lexical-url-risk-analyzer-f93704e9 -d '<json body>'
```

Example prompt: Can you check whether this URL looks like a phishing or spoofing attempt — https://paypa1-secure.login.tk/verify — and give me a risk score and the reasons it flagged?

## When to prefer this

Choose this endpoint when you need fast, privacy-safe, offline URL risk assessment with no network side-effects — ideal for high-volume triage, pre-click safety checks, or pipelines where making outbound requests to the target URL is undesirable. Prefer it over live-lookup alternatives when latency and privacy matter, or when scanning URLs that must not be contacted. Not suitable when you need WHOIS age, DNS reputation, or live content scanning.

## Known failure modes

- Missing or empty URL field returns a validation error
- URL exceeding 2048 characters is rejected
- Non-HTTP(S) URLs (e.g. ftp://, file://) may be unsupported
- Malformed URL strings may return an error or low-confidence score
- Service does not perform live network lookups so newly registered safe domains may still score risky based on lexical patterns alone

## How this service works

Score how likely a URL is to be phishing or untrustworthy using offline lexical and structural heuristics (no network lookups). Checks raw-IP hosts, embedded credentials, punycode/homoglyph labels, brand typosquatting, brand-in-subdomain, abused TLDs, shorteners, random hostnames, odd ports, plaintext http and executable paths. Returns a 0-100 risk score, a verdict and the reasons.

## Output

Returns a 0–100 integer risk score (higher = riskier), a human-readable verdict (e.g. 'suspicious', 'likely phishing', 'low risk'), and an array of reasons explaining which heuristics triggered — such as raw-IP host, embedded credentials, punycode labels, brand typosquatting, abused TLD, URL shortener, random hostname, odd port, plaintext HTTP, or executable file path.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "bodyType",
    "body"
   ],
   "properties": {
    "body": {
     "type": "object",
     "required": [
      "url"
     ],
     "properties": {
      "url": {
       "type": "string",
       "maxLength": 2048,
       "minLength": 1,
       "description": "Absolute http(s) URL to analyze."
      }
     },
     "additionalProperties": false
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "POST"
     ],
     "type": "string"
    },
    "bodyType": {
     "enum": [
      "json",
      "form-data",
      "text"
     ],
     "type": "string"
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/urltrust-lexical-url-risk-analyzer-f93704e9/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from urltrust.openverbs.com](https://www.zero.xyz/host/urltrust.openverbs.com/llms.txt)