A link safety API that shows its reasons

{
  "url": "https://steamcornmunity.com/",
  "final_url": "https://www.hugedomains.com/domain_profile.cfm?d=steamcornmunity.com",
  "recommendation": "review",
  "risk_score": 25,
  "risk_level": "medium",
  "summary": "Be careful with this link",
  "signals": [
    { "code": "cross_domain_redirect", "weight": 5,
      "detail": "Redirects to a different domain: hugedomains.com" },
    { "code": "lookalike_letters", "weight": 20,
      "detail": "Look-alike letters (\"rn\" for \"m\") used to imitate \"steamcommunity\" in the link you were given" }
  ],
  "redirects": {
    "count": 1,
    "chain": [
      "https://steamcornmunity.com/",
      "https://www.hugedomains.com/domain_profile.cfm?d=steamcornmunity.com"
    ],
    "via_shortener": false,
    "truncated": false
  },
  "domain": {
    "name": "hugedomains.com",
    "host": "hugedomains.com",
    "resolves": true,
    "registered_at": "2003-10-31T19:24:33.000Z",
    "age_days": 8410,
    "registrar": "TurnCommerce, Inc. DBA NameBright.com",
    "abused_tld": false
  },
  "tls": { "valid": true, "matches_host": true, "issuer": "WE1", "issued_days_ago": 23, "expires_in_days": 66 },
  "brand": { "impersonates": "steamcommunity", "method": "letter_swap", "seen_in": "given_link", "custom": false },
  "links": {
    "result": "https://scanify.to/link-expander?q=https%3A%2F%2Fsteamcornmunity.com%2F",
    "screenshot": "https://scanify.to/api/v1/screenshot?url=https%3A%2F%2Fwww.hugedomains.com%2Fdomain_profile.cfm%3Fd%3Dsteamcornmunity.com"
  },
  "checked_at": "2026-11-10T12:20:23.207Z",
  "cached": false
}

curl "https://scanify.to/api/v1/check?url=example.com" \
  -H "Authorization: Bearer sfy_your_key_here"

curl -X POST "https://scanify.to/api/v1/check" \
  -H "Authorization: Bearer $SCANIFY_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url": "https://bit.ly/3xyz", "brands": ["acmepay"], "own_domains": ["acmepay.com"]}'

curl -X POST "https://scanify.to/api/v1/check/batch" \
  -H "Authorization: Bearer $SCANIFY_KEY" \
  -H "Content-Type: application/json" \
  -d '{"urls": ["https://example.com", "http://github.com", "not a link"]}'

{
  "count": 3,
  "results": [
    { "url": "https://example.com/", "recommendation": "allow", "risk_score": 0, "...": "..." },
    { "url": "http://github.com/", "final_url": "https://github.com/", "recommendation": "allow", "...": "..." },
    { "url": "not a link", "error": { "code": "invalid_target", "message": "Not a valid URL. Send an http or https link, or a bare domain." } }
  ]
}

curl -X POST "https://scanify.to/api/v1/extract" \
  -H "Authorization: Bearer $SCANIFY_KEY" \
  -H "Content-Type: application/json" \
  -d '{"text": "Your parcel is held. Pay the fee at http://paypa1-parcel.top/pay today."}'

{
  "count": 1,
  "urls": ["http://paypa1-parcel.top/pay"],
  "results": [ { "url": "http://paypa1-parcel.top/pay", "recommendation": "block", "...": "..." } ],
  "truncated": false,
  "highest_risk": { "url": "http://paypa1-parcel.top/pay", "risk_score": 63, "recommendation": "block" }
}

{
  "url": "http://github.com/",
  "final_url": "https://github.com/",
  "redirected": true,
  "redirects": { "count": 1, "chain": ["http://github.com/", "https://github.com/"], "via_shortener": false, "truncated": false },
  "final_domain": "github.com",
  "signals": [],
  "checked_at": "2026-11-10T12:21:29.173Z",
  "cached": false
}

{
  "domain": "github.com",
  "host": "github.com",
  "recommendation": "allow",
  "risk_score": 0,
  "risk_level": "safe",
  "signals": [],
  "resolves": true,
  "registered_at": "2007-10-09T18:20:50.000Z",
  "age_days": 6971,
  "registrar": "MarkMonitor Inc.",
  "abused_tld": false,
  "tls": { "valid": true, "matches_host": true, "issuer": "Sectigo Public Server Authentication CA DV E36", "issued_days_ago": 11, "expires_in_days": 78 },
  "brand": null,
  "checked_at": "2026-11-10T12:21:30.351Z",
  "cached": false
}

curl "https://scanify.to/api/v1/screenshot?url=https://example.com" \
  -H "Authorization: Bearer $SCANIFY_KEY" -o page.jpg

{
  "plan": "free",
  "requests": { "used": 18, "limit": 1000, "remaining": 982, "resets_at": "2026-12-01T00:00:00.000Z" },
  "rate_limit": { "per_minute": 30 },
  "batch_size": 25,
  "costs": { "check": 1, "expand": 1, "domain": 1, "screenshot": 5 }
}

curl "https://scanify.to/api/v1/domain/acmepay-support.com?brands=acmepay&own_domains=acmepay.com" \
  -H "Authorization: Bearer $SCANIFY_KEY"

{
  "domain": "acmepay-support.com",
  "recommendation": "block",
  "risk_score": 58,
  "risk_level": "high",
  "signals": [
    { "code": "domain_not_resolving", "weight": 25, "detail": "Domain doesn't exist right now (no DNS record), so nothing here can be verified" },
    { "code": "credential_bait_words", "weight": 8, "detail": "Credential-bait words in the domain name" },
    { "code": "custom_brand_in_hostname", "weight": 25, "detail": "Your brand \"acmepay\" appears in the domain name, on a domain that is not yours" }
  ],
  "brand": { "impersonates": "acmepay", "method": "name_in_hostname", "seen_in": "destination", "custom": true },
  "...": "..."
}

{
  "error": {
    "code": "non_public_target",
    "message": "That address is private or internal and cannot be checked.",
    "docs": "https://scanify.to/developers"
  }
}

import { Client, GatewayIntentBits } from 'discord.js';

const client = new Client({
  intents: [GatewayIntentBits.Guilds, GatewayIntentBits.GuildMessages, GatewayIntentBits.MessageContent],
});

client.on('messageCreate', async (msg) => {
  if (msg.author.bot || !msg.content.includes('.')) return;

  const res = await fetch('https://scanify.to/api/v1/extract', {
    method: 'POST',
    headers: { Authorization: `Bearer ${process.env.SCANIFY_KEY}`, 'Content-Type': 'application/json' },
    body: JSON.stringify({ text: msg.content }),
  }).catch(() => null);
  if (!res || !res.ok) return;                 // if the check fails, let the message through

  const { highest_risk: worst } = await res.json();
  if (worst?.recommendation === 'block') {
    await msg.delete();
    await msg.channel.send(`Removed a link from ${msg.author}: it looks unsafe (${worst.risk_score}/100).`);
  } else if (worst?.recommendation === 'review') {
    await msg.react('⚠️');
  }
});

client.login(process.env.DISCORD_TOKEN);

async function linkIsAcceptable(url) {
  const res = await fetch('https://scanify.to/api/v1/check', {
    method: 'POST',
    headers: { Authorization: `Bearer ${process.env.SCANIFY_KEY}`, 'Content-Type': 'application/json' },
    body: JSON.stringify({ url, brands: ['acmepay'], own_domains: ['acmepay.com'] }),
    signal: AbortSignal.timeout(20000),
  });
  if (!res.ok) return { ok: true, checked: false };        // your call: fail open or closed
  const r = await res.json();
  return { ok: r.recommendation !== 'block', checked: true, reasons: r.signals.map(s => s.detail), finalUrl: r.final_url };
}

app.post('/profile/website', async (req, res) => {
  const verdict = await linkIsAcceptable(req.body.website);
  if (!verdict.ok) return res.status(422).json({ error: 'That link looks unsafe.', reasons: verdict.reasons });
  // Save the accepted URL here.
  return res.sendStatus(204);
});

import os, requests

def email_domain_risk(email: str) -> dict:
    domain = email.rsplit("@", 1)[-1]
    r = requests.get(
        f"https://scanify.to/api/v1/domain/{domain}",
        headers={"Authorization": f"Bearer {os.environ['SCANIFY_KEY']}"},
        timeout=20,
    )
    r.raise_for_status()
    d = r.json()
    return {
        "hold_for_review": d["resolves"] is False or (d["age_days"] is not None and d["age_days"] < 30),
        "age_days": d["age_days"],
        "imitates": (d["brand"] or {}).get("impersonates"),
    }

import os, requests

def check_all(urls, size=25):                      # 50 on Pro
    out = []
    for i in range(0, len(urls), size):
        r = requests.post(
            "https://scanify.to/api/v1/check/batch",
            headers={"Authorization": f"Bearer {os.environ['SCANIFY_KEY']}"},
            json={"urls": urls[i:i + size]},
            timeout=60,
        )
        r.raise_for_status()
        out += r.json()["results"]
    return out

for item in check_all(open("links.txt").read().split()):
    if "error" in item:
        print("could not check", item["url"], item["error"]["code"])
    elif item["recommendation"] != "allow":
        print(item["recommendation"], item["risk_score"], item["url"], "->", item["final_url"])