SecurityMonitoring

Threat Enrichment

Enrich alerts with a verdict, risk score and indicators for any URL under investigation.

Start with 500 free credits Documentation

Malware URL scan · 1 credit per lookup · no monthly fee

How it works

One call, structured answer

Threat Enrichment runs on the malware url scan lookup at 1 credit per lookup. Same API key, same JSON shape as every other Encrata lookup.

Every redirect hop is expanded, so shortened links can't hide the destination
The link is analysed server-side, never opened in your environment
Structured indicators of compromise come back ready to block or export as STIX
1 credit per scan, and cached results for the same link are free

Terminal

curl -X POST "https://developer.encrata.com/api/malware/url/scan" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url": "http://bit.ly/free-gift-card"}'

response.json

{
  "kind": "url",
  "verdict": "malicious",
  "score": 92,
  "final_url": "https://accounts-secure-login.co/verify",
  "redirect_hops": [
    { "url": "http://bit.ly/free-gift-card", "status_code": 301 },
    { "url": "https://accounts-secure-login.co/verify", "status_code": 200 }
  ],
  "credits": 1
}