Inspect a URL: follow its redirect chain hop by hop with SSRF guards, and flag p...

{ "method": "GET", "queryParams": { "url": "http://bit.ly/3x4mple" }, "type": "http" }

{ "example": { "final_status": 200, "final_url": "https://postimg.cc/fVXBhNrm", "flags": [ { "code": "plain_http", "message": "The URL uses http: traffic and any form input are not encrypted.", "severity": "moderate" }, { "code": "url_shortener", "message": "A link shortener hides the final destination; the redirect chain below shows where it leads.", "severity": "moderate" }, { "code": "cross_domain_redirects", "message": "The redirect chain crosses 2 different registered domains: bit.ly -> postimg.cc.", "severity": "moderate" } ], "hops": [ { "content_type": "text/html", "ip": "67.199.248.11", "redirect_to": "https://postimg.cc/fVXBhNrm", "server": "nginx", "status": 301, "url": "http://bit.ly/3x4mple" }, { "content_type": "text/html", "ip": "45.43.142.100", "redirect_to": null, "server": "nginx", "status": 200, "url": "https://postimg.cc/fVXBhNrm" } ], "note": "Heuristic only: structure of the URL and the observed redirect chain (every hop checked against private and reserved networks before it is contacted). It does not consult a reputation or malware database, so \"none_detected\" is not a safety guarantee. Never enter credentials or connect a wallet on a page just because this check is clean.", "redirect_count": 1, "risk_level": "elevated", "risk_score": 45, "source": "Live request to the URL named (redirects followed manually, up to 6 hops); heuristics computed locally", "url": "http://bit.ly/3x4mple" }, "type": "json" }