# Report a malicious link

> Report a malicious link (public).

Source: https://straitlink.in/docs/api/report-link/

`POST /v1/report`

Auth: none. Public and rate-limited.

Report a Strait link used for phishing, malware, spam or a scam. No key needed; limited to 5 reports an hour per IP. Accepts JSON or a plain HTML form post (the /report page on every link host posts here and gets an HTML answer). Reports are reviewed by the Strait team within 24 hours.

| Field | Type | Notes |
|---|---|---|
| `url` (required) | `string` |  |
| `category` | `"phishing" | "malware" | "spam" | "scam" | "other"` |  |
| `details` | `string` |  |
| `email` | `string` | Optional, only if you want a reply |

```bash
curl -X POST https://strait.link/v1/report \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://hilltop.strait.link/sale",
    "category": "phishing",
    "details": "The page asked for my bank OTP."
  }'
```

- `201`: Received: `{ ok: true, id? }`
- `400`: `{ error: "invalid_report", message }`
- `429`: `{ error: "rate_limited", message }` (Retry-After: 3600)