Check Url
check_urlDetermine if a URL is flagged by USOM as malicious, including exact, parent-domain, path, or CIDR matches with source and category.
Instructions
Check whether a URL is listed by USOM (exact, parent-domain, URL path or CIDR match).
Call this first when a user asks whether a link is safe. The result carries the match type, record date, source and category of every hit.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | URL to check, e.g. https://example.com/login | |
| enrich | No | Also query VirusTotal (needs VIRUSTOTAL_API_KEY). |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| kind | Yes | ||
| note | No | ||
| cache | Yes | ||
| error | No | ||
| input | Yes | ||
| stale | Yes | True when a refresh failed and cached data may be outdated; warn the user. | |
| source | No | T.C. Siber Güvenlik Başkanlığı / USOM (siberguvenlik.gov.tr) | |
| matches | No | ||
| verdict | Yes | ||
| warnings | No | ||
| enrichment | No | ||
| normalized | No | ||
| data_origin | Yes | ||
| enrichment_errors | No | ||
| timestamps_timezone | No | unspecified |