When to use this

Use this when a submitted URL might be a phishing page, fake login page, malware redirect, or lookalike domain.

How Verifence evaluates it

URL scanning is a reputation decision, not a visual inspection of the destination page. Verifence canonicalizes the link, checks its own reviewed bad-URL data, and queries Google Web Risk so known phishing and malware destinations can be stopped before someone clicks or publishes them.

Canonical matching

Equivalent forms of a URL are normalized so differences such as protocol, case, or a trailing slash do not bypass an existing bad-URL record.

Verifence threat data

Links are checked against URLs that have been reviewed and activated in the Verifence bad-URL database.

Google Web Risk

The scanner checks Google Web Risk and treats a confirmed reputation hit as a bad URL.

Batch processing

The web tool accepts pasted URLs or CSV and Excel files, queues the work in batches, and tracks safe and bad totals as processing completes.

How to do it

  1. 01 Preserve the original message and sender context, then submit the complete HTTP or HTTPS URL to the web scanner or /api/scan/url.
  2. 02 Use the returned safe/bad decision to identify current matches in Verifence threat data or Google Web Risk.
  3. 03 Block confirmed bad links before rendering, redirecting, or publishing them to another user.
  4. 04 Keep contextually suspicious but currently clean links in a review queue instead of assuming that no reputation hit proves the destination is safe.
  5. 05 Submit unresolved links to Phishing Submissions and rescan them before a later high-risk action.

How to act on the result

Allow

No configured reputation source identified the URL as malicious at scan time.

Block

A Verifence blacklist or Google Web Risk hit identifies the URL as unsafe.

Review

Use manual review when context remains suspicious even though current reputation sources return no hit.

Rescan

Threat reputation changes. Rescan important or newly reported links before a later high-risk action.

Implementation notes

  • Each URL scan costs 5 credits. The web batch tool accepts up to 500 valid URLs per submission.
  • The API requires an HTTP or HTTPS URL, with a maximum length of 2,048 characters, and returns a simple safe/bad decision.
  • A clean result means no current reputation hit was found; it is not a permanent guarantee about future destination content.