Skip to main content
POST
security.url.inspect

Authorizations

Authorization
string
header
required

API key: sk_live_…

Headers

Idempotency-Key
string

Optional. A retry with the same key returns the stored result.

Maximum string length: 255
Pramaan-Max-Price-Micro
string

Optional. The most this request may be priced at, in micro-USD (a whole number above 0). It replaces the capability's own price ceiling for this request, lower or higher. Sources that could cost more are left out; when none is left the answer is 400 with the lowest limit that would work.

Pattern: ^[1-9]\d{0,14}$

Body

application/json
url
string
required

A public HTTP or HTTPS URL to scan. Do not include secrets or access tokens.

strictness
integer
default:0

Scan strictness, 0 to 2. Higher values may increase false positives; default 0.

Required range: 0 <= x <= 2
fast
boolean
default:false

Use lighter checks for a faster scan; default false.

timeoutSeconds
integer
default:2

Live page scan and redirect budget, 1 to 10 seconds; default 2.

Required range: 1 <= x <= 10

Response

The result

url
string
required

The URL you asked to scan.

unsafe
boolean
required

Whether the URL is suspected of being unsafe.

malware
boolean

Whether malware was detected.

phishing
boolean

Whether phishing was detected.

spam
boolean

Whether the domain is associated with spam.

suspicious
boolean

Whether suspicious activity was detected.

adult
boolean

Whether adult or dating content was detected.

parked
boolean

Whether the domain has a for-sale notice.

dnsValid
boolean

Whether valid DNS records exist.

redirected
boolean

Whether the URL redirects to another domain.

shortened
boolean

Whether a short link or redirected path was found.

hostedContent
boolean

Whether the page is on a free content host.

riskySuffix
boolean

Whether the domain suffix is associated with abuse.

spfPresent
boolean

Whether a sender policy DNS record exists.

dmarcPresent
boolean

Whether a mail authentication policy DNS record exists.

domain
string

Final destination hostname, including subdomains.

rootDomain
string

Final destination root domain.

server
string

Server banner, when available.

contentType
string

Content media type.

category
string

Content category, when available.

domainTrust
string

Domain reputation classification.

title
string

Page title, capped at 2,048 characters.

country
string

Two-letter server country code.

language
string

Two-letter page language code.

technologies
string[]

Technologies detected, up to 25 names.

Maximum array length: 25
mailExchangers
string[]

Mail exchanger records, up to 25.

Maximum array length: 25
addresses
string[]

Address records, up to 25.

Maximum array length: 25
nameServers
string[]

Name server records, up to 25.

Maximum array length: 25
finalUrl
string

Public destination URL after redirects, when available.

riskScore
number

Confidence that the URL is malicious, 0 to 100; this describes a URL, never a person.

Required range: 0 <= x <= 25
statusCode
integer

Page HTTP status; 0 means unreachable.

Required range: 0 <= x <= 599
pageBytes
integer

Number of bytes in the page; 0 means unreachable.

Required range: 0 <= x <= 9007199254740991
domainRank
integer

Estimated global domain popularity rank; absent for an unranked domain.

Required range: x <= 9007199254740991
domainRegisteredAt
string

Domain registration time in ISO format, when available.