Report a malicious link
Report a malicious link (public).
method
POST
host
strait.
version
/v1
resource
/
POST /v1/report
Auth: none. Public and rate-limited.
Request
Report a Strait link used for phishing, malware, spam or a scam. No key needed; limited to 5 reports an hour per IP. Accepts JSON or a plain HTML form post (the /report page on every link host posts here and gets an HTML answer). Reports are reviewed by the Strait team within 24 hours.
Body (JSON)
urlrequired stringcategory"phishing" | "malware" | "spam" | "scam" | "other"detailsstringemailstring- Optional, only if you want a reply
Response
- 201 Received:
{ ok: true, id? } - 400
{ error: "invalid_report", message } - 429
{ error: "rate_limited", message }(Retry-After: 3600)
curl -X POST https://strait.link/v1/report \
-H "Content-Type: application/json" \
-d '{
"url": "https://hilltop.strait.link/sale",
"category": "phishing",
"details": "The page asked for my bank OTP."
}'const res = await fetch('https://strait.link/v1/report', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({
"url": "https://hilltop.strait.link/sale",
"category": "phishing",
"details": "The page asked for my bank OTP."
}),
});
const text = await res.text();
console.log(res.status, text);import requests
res = requests.post(
"https://strait.link/v1/report",
json={
"url": "https://hilltop.strait.link/sale",
"category": "phishing",
"details": "The page asked for my bank OTP.",
},
)
print(res.status_code, res.text)<?php
// Plain PHP with ext-curl, no packages. In Laravel, Http::post($url, $body) sends the same request.
$ch = curl_init('https://strait.link/v1/report');
curl_setopt_array($ch, [
CURLOPT_CUSTOMREQUEST => 'POST',
CURLOPT_RETURNTRANSFER => true,
CURLOPT_HTTPHEADER => [
'Content-Type: application/json',
],
CURLOPT_POSTFIELDS => json_encode([
'url' => 'https://hilltop.strait.link/sale',
'category' => 'phishing',
'details' => 'The page asked for my bank OTP.',
], JSON_THROW_ON_ERROR),
]);
$response = curl_exec($ch);
if ($response === false) {
throw new RuntimeException(curl_error($ch));
}
$status = curl_getinfo($ch, CURLINFO_RESPONSE_CODE);
echo $status, PHP_EOL, $response, PHP_EOL;import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
// Java 17+, java.net.http only (no dependencies).
public class Main {
public static void main(String[] args) throws Exception {
String body = """
{
"url": "https://hilltop.strait.link/sale",
"category": "phishing",
"details": "The page asked for my bank OTP."
}
""";
HttpRequest request = HttpRequest.newBuilder(URI.create("https://strait.link/v1/report"))
.header("Content-Type", "application/json")
.POST(HttpRequest.BodyPublishers.ofString(body))
.build();
HttpResponse<String> res = HttpClient.newHttpClient().send(request, HttpResponse.BodyHandlers.ofString());
System.out.println(res.statusCode() + " " + res.body());
}
}package main
import (
"fmt"
"io"
"log"
"net/http"
"strings"
)
func main() {
body := strings.NewReader(`{
"url": "https://hilltop.strait.link/sale",
"category": "phishing",
"details": "The page asked for my bank OTP."
}`)
req, err := http.NewRequest(http.MethodPost, "https://strait.link/v1/report", body)
if err != nil {
log.Fatal(err)
}
req.Header.Set("Content-Type", "application/json")
res, err := http.DefaultClient.Do(req)
if err != nil {
log.Fatal(err)
}
defer res.Body.Close()
data, err := io.ReadAll(res.Body)
if err != nil {
log.Fatal(err)
}
fmt.Println(res.StatusCode, string(data))
}The response, printed
HTTP/1.1 201 Created