About this endpoint
What it does
Extracts all hyperlinks from the web page at the given URL and returns them as absolute URLs. If secure_mode is enabled, the URL is checked against a malicious-URL database before the page is fetched.
Request Body
| Parameter | Type | Description |
|---|---|---|
| url | String | The URL of the page to extract links from. Protocol is optional — http:// is prepended if absent. |
| user_agent | String | Custom User-Agent header sent when fetching the URL. |
| secure_mode | Boolean | When true, the URL is checked against the malicious-URL database before fetching. Default: true. |
| accept_language | String | Custom Accept-Language header sent when fetching the URL. |
Response
Returns a JSON object with a required data field. On a normal response, data is an object containing a links array of strings with the absolute URLs found on the page. If the URL is detected as malicious, data is an object containing url as a string, threat as a string, and reported_malicious as a boolean.
| Parameter | Type | Description |
|---|---|---|
| data | Object | Wrapper object for the result. It can contain either the extracted links or malicious-URL details, depending on the outcome. |
| data.links | String Array | Absolute URLs of all hyperlinks found on the page. |
| data.url | String | The URL that was flagged as malicious. |
| data.threat | String | Threat label returned for the malicious URL. |
| data.reported_malicious | Boolean | Indicates whether the URL was reported as malicious. |



