Hindi pa naisasalin ang page na ito — ipinapakita sa English.
Developers
confirmURL public API
Check a link from your own app, bot or script. Returns a JSON verdict, score, reasons, the redirect chain, and data from Google Safe Browsing and VirusTotal.
Endpoint
GET /api/v1/check?url=<url-encoded link> Header: X-API-Key: cu_… (or &key=cu_…)
Limits: 60 requests/hour per API key · 10/hour per IP without a key. Over the limit you get 429 with a Retry-After header. Results from VirusTotal and Safe Browsing are cached (24h / 6h), so the intel fields may be cached or say they were skipped when the shared quota is used up.
Example
curl -H "X-API-Key: YOUR_KEY" "https://confirmurl.com/api/v1/check?url=https%3A%2F%2Fbit.ly%2Fexample"
{
"url": "https://bit.ly/example",
"finalUrl": "https://example.com/",
"verdict": "caution", // ok | caution | danger | unreachable | blocked
"label": "Be careful",
"score": 20, // 0-100, higher = riskier
"reasons": [{ "code": "SHORTENER", "level": "medium", "points": 20, "message": "Link shortener (bit.ly) hides the real destination" }],
"redirects": [{ "url": "https://bit.ly/example", "status": 301 }, { "url": "https://example.com/", "status": 200 }],
"intel": { "safeBrowsing": { "matches": [] }, "virusTotal": { "malicious": 0, "suspicious": 0, "harmless": 60 }, "domain": { "ageDays": 10000 } },
"reportUrl": "https://confirmurl.com/report?id=…"
}
The API opens links with a server-side fetch only (no browser) and keeps the same safety blocks as the website: private/internal addresses are refused. Not affiliated with Google or VirusTotal; results use data from those services.