About this endpoint
What it does
Extracts all hyperlinks from the web page at the given URL and returns them as absolute URLs. If secure_mode is enabled, the URL is checked against a malicious-URL database before the page is fetched.
Request Body
| Parameter | Type | Mandatory | Description |
|---|---|---|---|
| url | String | Yes | The URL of the page to extract links from. Protocol is optional — http:// is prepended if absent. |
| user_agent | String | No | Custom User-Agent header sent when fetching the URL. |
| secure_mode | Boolean | No | When true, the URL is checked against the malicious-URL database before fetching. Default: true. |
| accept_language | String | No | Custom Accept-Language header sent when fetching the URL. |
Response
Returns a JSON object with a required data field. On a normal response, data is an object containing a links array of strings with the absolute URLs found on the page. If the URL is detected as malicious, data is an object containing url as a string, threat as a string, and reported_malicious as a boolean.
| Parameter | Type | Mandatory | Description |
|---|---|---|---|
| data | Object | Yes | Wrapper object for the result. It can contain either the extracted links or malicious-URL details, depending on the outcome. |
| data.links | String Array | No | Absolute URLs of all hyperlinks found on the page. |
| data.url | String | No | The URL that was flagged as malicious. |
| data.threat | String | No | Threat label returned for the malicious URL. |
| data.reported_malicious | Boolean | No | Indicates whether the URL was reported as malicious. |