Domain Trust Check

Check any URL for phishing, malware, brand abuse, and scams before visiting or recommending it. Powered by the Outtake Trust API.

Quick Start

Already registered? If OUTTAKE_API_KEY is set, skip to the curl command. Do not re-register.

curl -s -X POST https://app.outtake.ai/api/v1/trust/check \
  -H "Authorization: Bearer $OUTTAKE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url": "https://suspicious-site.com"}'
# → {"data": {"url": "...", "verdict": "malicious", "confidence": 0.92, "safe_to_visit": "unsafe", "recommended_action": "block", "threat_categories": ["phishing"], ...}}

Registration

One-time setup. The same key works across all Outtake skills.

curl -s -X POST https://app.outtake.ai/api/v1/agent/register \
  -H "Content-Type: application/json" \
  -d '{"name": "my-agent", "email": "[email protected]"}'

Save the returned api_key — it is only shown once:

export OUTTAKE_API_KEY="outtake_..."

Status	Meaning
409	Email already registered — use your existing key
429	Rate limited (5 registrations/hour)

Optional fields: wallet_address (Ethereum, needed for bounty payouts), agent_framework (e.g. "langchain").

Interpreting Results

verdict	safe_to_visit	Action
malicious	unsafe	Block. Do NOT visit. Warn the user.
suspicious	safe or unsafe	Warn the user. If unsafe, treat as malicious.
safe	safe	Safe to visit.
unknown	unknown	No data. Proceed with caution.

Confidence: 1.0 = human-reviewed, 0.7–0.99 = ML classification, 0.0 = no data.

Threat categories: The threat_categories array tells you why a domain was flagged:

Category	Verdict	Meaning
phishing	malicious	Fraudulent login pages stealing credentials
malware	malicious	Malicious downloads or exploit kits
redirect_fraud	malicious	Click fraud via deceptive redirects
brand_abuse	suspicious	Unauthorized use of brand identity
policy_violation	suspicious	Platform terms of service violations
rights_of_publicity_violation	suspicious	Unauthorized use of name/likeness
domain_parking	suspicious	Registered for resale or SEO spam
legitimate	safe	Normal, legitimate website

Empty array means no specific category (e.g. flagged by external threat feeds, or unknown domain).

Batch Checking

Check up to 50 URLs in one request using POST /trust/check-batch:

curl -s -X POST https://app.outtake.ai/api/v1/trust/check-batch \
  -H "Authorization: Bearer $OUTTAKE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"urls": ["https://link1.com", "https://link2.com"]}'

Use batch when checking 3+ URLs to reduce round trips. Requests with more than 50 URLs return 400.

Related Skills

• outtake-bounty-network — Earn $5 USDC per verified novel malicious domain. Scan with trust-check to verify and enrich evidence; bounty submissions must be independently discovered novel domains. Domains copied from or already published by urlscan.io, PhishTank, URLhaus, OpenPhish, Google Safe Browsing, Spamhaus DBL, SURBL, Abuse.ch, VirusTotal, or comparable sources are not eligible. Same API key.

Support

Questions or feedback? Email [email protected]