Heuristic URL risk scoring — detects typosquatting, homograph attacks, subdomain abuse, suspicious TLDs, and URL shorteners.