URL Scanning
Real-time URL scanning to detect phishing, malware, and fraudulent sites.
Features
- Real-time analysis (< 300ms)
- Updated threat database
- Typosquatting detection
- SSL certificate analysis
- Malicious redirect detection
Scan URL
Analyze a URL to detect threats.
POST
/url/scanRequest Body
json
{
"url": "https://paypa1-security.com/verify-account",
"options": {
"follow_redirects": true,
"check_ssl": true,
"check_reputation": true
}
}Response
json
{
"scan_id": "scan_abc123",
"url": "https://paypa1-security.com/verify-account",
"is_safe": false,
"risk_level": "critical",
"risk_score": 0.94,
"threat_types": ["phishing", "typosquatting"],
"threats_detected": [
{
"type": "typosquatting",
"severity": "critical",
"description": "Domain 'paypa1-security.com' impersonates 'paypal.com'"
},
{
"type": "phishing",
"severity": "critical",
"description": "Page designed to steal credentials"
}
],
"domain_info": {
"domain": "paypa1-security.com",
"registered_date": "2025-01-10",
"age_days": 4,
"is_new_domain": true
},
"ssl_info": {
"valid": true,
"issuer": "Let's Encrypt",
"expires": "2025-04-10"
},
"recommendations": [
"DO NOT visit this URL",
"DO NOT enter any personal data",
"Report to your security team"
],
"scan_duration_ms": 187,
"scanned_at": "2025-01-14T17:30:00Z"
}Batch URL Scanning
Analyze multiple URLs in a single request.
Limits: Min 1 URL, Max 100 URLs
POST
/url/scan/batchRequest Body
json
{
"urls": [
"https://suspicious-site1.com",
"https://suspicious-site2.com",
"https://legitimate-site.com"
],
"options": {
"follow_redirects": true
}
}Response
json
{
"total_scanned": 3,
"safe": 1,
"threats": 2,
"results": [
{
"url": "https://suspicious-site1.com",
"is_safe": false,
"risk_level": "high",
"threat_types": ["phishing"]
},
{
"url": "https://suspicious-site2.com",
"is_safe": false,
"risk_level": "critical",
"threat_types": ["malware"]
},
{
"url": "https://legitimate-site.com",
"is_safe": true,
"risk_level": "safe",
"threat_types": []
}
],
"scan_duration_ms": 523
}Risk Levels
safe0.0 - 0.19No known threats
low0.2 - 0.39Minor anomalies detected
medium0.4 - 0.59Suspicious indicators present
high0.6 - 0.79Multiple phishing indicators
critical0.8 - 1.0Confirmed malicious site
Rate Limiting
Rate limits for the URL Scanning module are enforced per application. All endpoints share the same quota based on your plan. For detailed specifications, see the Security & Compliance page.
Sandbox: 60 req/min
Production: 1,000 req/min