{ "openapi": "3.0.0", "info": { "title": "urlscan.io APIs", "description": "### Introduction\n\nAPI endpoints for urlscan.io and urlscan Pro. Most of these API endpoints\nrequire authentication.\n\nThe fastest way to start working with our APIs is by using one of the many\nexisting commercial or open-source integrations.\n\n### External Resources\n* [urlscan.io website](https://urlscan.io)\n* [urlscan.io Documentation Hub](https://docs.urlscan.io)\n* [urlscan.io API Status](https://status.urlscan.io)\n", "version": "1.0.0", "contact": { "name": "urlscan Support", "email": "support@urlscan.io" } }, "servers": [ { "url": "https://urlscan.io" } ], "components": { "securitySchemes": { "apikeyAuth": { "type": "apiKey", "in": "header", "name": "api-key" } }, "schemas": { "VerdictBrand": { "type": "object", "description": "Brand detected by a verdict source", "properties": { "key": { "type": "string", "description": "Brand key" }, "name": { "type": "string", "description": "Brand name" }, "country": { "type": "array", "description": "Brand countries (ISO-3166)", "items": { "type": "string" } }, "vertical": { "type": "array", "description": "Brand industry verticals", "items": { "type": "string" } } } }, "savedSearch": { "type": "object", "properties": { "datasource": { "type": "string", "enum": [ "hostnames", "scans" ], "description": "Which data this Saved Search operates on." }, "createdAt": { "type": "string", "format": "date-time", "description": "Time when the Saved Search was created.", "readOnly": true }, "description": { "type": "string", "description": "Short description." }, "longDescription": { "type": "string", "description": "Long description." }, "name": { "type": "string", "description": "User-facing short name." }, "ownerDescription": { "type": "string", "readOnly": true, "description": "User-facing owner description." }, "permissions": { "description": "Determine whether only other users on the same team or everyone on urlscan Pro can see the search.", "type": "array", "items": { "type": "string", "enum": [ "public:read", "team:read", "team:write" ] } }, "query": { "type": "string", "description": "Search API query" }, "tlp": { "description": "TLP (Traffic Light Protocol) indicator for other users on the urlscan Pro platform.", "type": "string", "enum": [ "red", "amber+strict", "amber", "green", "clear" ] }, "usertags": { "type": "array", "items": { "type": "string" }, "description": "User-supplied tags to be applied to matching items. Apply the following prefixes to tags to define their visibility scope: `pro.` (urlscan Pro users), `public.` (all registered users), `private.` (only you), or `team.` (you and team members)." } } }, "savedSearchRequestList": { "allOf": [ { "$ref": "#/components/schemas/savedSearch" }, { "type": "object", "required": [ "datasource", "name", "query" ] } ], "example": { "datasource": "scans", "query": "page.domain:urlscan.io", "name": "Testsearch", "description": "urlscan documentation example saved search.", "longDescription": "Example saved search created from urlscan documentation.", "tlp": "red", "userTags": [ "private.privatetag" ], "permissions": [ "team:read", "team:write" ] } }, "savedSearchRequest": { "properties": { "search": { "type": "object", "allOf": [ { "$ref": "#/components/schemas/savedSearch" }, { "type": "object", "required": [ "datasource", "name", "query" ] } ] } }, "required": [ "search" ], "example": { "search": { "datasource": "scans", "query": "page.domain:urlscan.io", "name": "Testsearch", "description": "urlscan documentation example saved search.", "longDescription": "Example saved search created from urlscan documentation.", "tlp": "red", "userTags": [ "private.privatetag" ], "permissions": [ "team:read", "team:write" ] } } }, "savedSearchResponse": { "allOf": [ { "$ref": "#/components/schemas/savedSearch" }, { "type": "object", "properties": { "_id": { "type": "string", "description": "Unique ID of the Saved Search." } } } ], "example": { "_id": "{{searchId}}", "datasource": "scans", "query": "page.domain:urlscan.io", "name": "Testsearch", "description": "urlscan documentation example saved search.", "longDescription": "Example saved search created from urlscan documentation", "tlp": "red", "userTags": [ "private.privatetag" ], "permissions": [ "team:read", "team:write" ] } }, "subscription": { "type": "object", "properties": { "searchIds": { "type": "array", "items": { "type": "string" }, "description": "Array of search IDs associated with this subscription." }, "frequency": { "type": "string", "enum": [ "live", "hourly", "daily" ], "description": "Frequency of notifications." }, "emailAddresses": { "type": "array", "items": { "type": "string", "format": "email" }, "description": "Email addresses receiving the notifications." }, "name": { "type": "string", "description": "Name of the subscription." }, "description": { "type": "string", "description": "Description of the subscription." }, "isActive": { "type": "boolean", "description": "Whether the subscription is active." }, "ignoreTime": { "type": "boolean", "description": "Whether to ignore time constraints." }, "weekDays": { "type": "array", "items": { "type": "string", "enum": [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday", "Sunday" ] }, "description": "Days of the week alerts will be generated." }, "permissions": { "type": "array", "items": { "type": "string", "enum": [ "team:read", "team:write" ] } }, "channelIds": { "type": "array", "items": { "type": "string" }, "description": "Array of channel IDs associated with this subscription." }, "incidentChannelIds": { "type": "array", "items": { "type": "string" }, "description": "Array of incident channel IDs associated with this subscription." }, "incidentProfileId": { "type": "string", "description": "Incident Profile ID associated with this subscription." }, "incidentVisibility": { "type": "string", "enum": [ "unlisted", "private" ], "description": "Incident visibility for this subscription." }, "incidentCreationMode": { "type": "string", "enum": [ "none", "default", "always", "ignore-if-exists" ], "description": "Incident creation rule for this subscription." }, "incidentWatchKeys": { "type": "string", "enum": [ "scans/page.url", "scans/page.domain", "scans/page.ip", "scans/page.apexDomain", "hostnames/hostname", "hostnames/domain" ], "description": "Source/key to watch in the incident." } } }, "subscriptionRequest": { "properties": { "subscription": { "type": "object", "allOf": [ { "$ref": "#/components/schemas/subscription" }, { "type": "object", "required": [ "searchIds", "frequency", "emailAddresses", "name", "isActive", "ignoreTime" ] } ] } }, "required": [ "subscription" ], "example": { "subscription": { "searchIds": [ "{{searchId}}" ], "frequency": "daily", "emailAddresses": [ "test@urlscan.io" ], "name": "Test Subscription", "description": "Subscription for testing purposes", "isActive": true, "ignoreTime": false } } }, "subscriptionResponseList": { "allOf": [ { "$ref": "#/components/schemas/subscription" } ], "example": { "searchIds": [ "{{searchId}}" ], "frequency": "daily", "emailAddresses": [ "test@urlscan.io" ], "name": "Test Subscription", "description": "Subscription for testing purposes", "isActive": true, "ignoreTime": false } }, "subscriptionResponse": { "properties": { "subscription": { "type": "object", "properties": { "_id": { "type": "string", "description": "Subscription ID" } }, "allOf": [ { "$ref": "#/components/schemas/subscription" } ] } }, "example": { "subscription": { "_id": "{{subscriptionId}}", "searchIds": [ "{{searchId}}" ], "frequency": "daily", "emailAddresses": [ "test@urlscan.io" ], "name": "Test Subscription", "description": "Subscription for testing purposes", "isActive": true, "ignoreTime": false } } }, "channelRequest": { "type": "object", "properties": { "channel": { "type": "object", "properties": { "_id": { "type": "string", "description": "Channel ID" }, "type": { "type": "string", "description": "Type of channel, \"webhook\" (default) or \"email\"." }, "webhookURL": { "type": "string", "description": "Webhook URL receiving the notifications." }, "frequency": { "type": "string", "description": "Frequency of notifications (\"live\", \"hourly\", or \"daily\")." }, "emailAddresses": { "type": "array", "items": { "type": "string", "format": "email" }, "description": "Email addresses receiving the notifications." }, "utcTime": { "type": "string", "description": "24 hour UTC time that daily emails are sent (e.g. 09:00)." }, "name": { "type": "string", "description": "Name of the channel." }, "isActive": { "type": "boolean", "description": "Whether the channel is active." }, "isDefault": { "type": "boolean", "description": "Whether the channel is the default (default: false)." }, "ignoreTime": { "type": "boolean", "description": "Whether to ignore time constraints (default: false)." }, "weekDays": { "type": "array", "items": { "type": "string", "enum": [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday", "Sunday" ] }, "description": "Days of the week alerts will be generated." }, "permissions": { "type": "array", "items": { "type": "string", "enum": [ "team:read", "team:write" ] } } }, "required": [ "type", "name" ] } }, "required": [ "channel" ], "example": { "channel": { "_id": "{{channelId}}", "type": "webhook", "webhookURL": "https://example.com/cgi-bin/urlscan", "name": "Test webhook", "description": "Webhook testing channel.", "isActive": true, "ignoreTime": false } } }, "channelResponse": { "type": "object", "properties": { "_id": { "type": "string", "description": "Channel ID" }, "type": { "type": "string", "description": "Type of channel, \"webhook\" or \"email\"." }, "webhookURL": { "type": "string", "enum": [ "live", "hourly", "daily" ], "description": "Frequency of notifications." }, "frequency": { "type": "string", "description": "Frequency of notifications (\"live\", \"hourly\", or \"daily\")." }, "emailAddresses": { "type": "array", "items": { "type": "string", "format": "email" }, "description": "Email addresses receiving the notifications." }, "utcTime": { "type": "string", "description": "24 hour UTC time that daily emails are sent (e.g. 09:00)." }, "name": { "type": "string", "description": "Name of the subscription." }, "isActive": { "type": "boolean", "description": "Whether the channel is active." }, "isDefault": { "type": "boolean", "description": "Whether the channel is the default (default: false)." }, "ignoreTime": { "type": "boolean", "description": "Whether to ignore time constraints (default: false)." }, "weekDays": { "type": "array", "items": { "type": "string", "enum": [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday", "Sunday" ] }, "description": "Days of the week alerts will be generated." }, "permissions": { "type": "array", "items": { "type": "string", "enum": [ "team:read", "team:write" ] } } }, "example": { "_id": "{{channelId}}", "type": "webhook", "webhookURL": "https://example.com/cgi-bin/urlscan", "name": "Test webhook", "description": "Webhook testing channel.", "isActive": true, "ignoreTime": false } }, "hostnameHistorySchema": { "type": "object", "properties": { "pageState": { "type": "string", "description": "If the pageState field is set then there are\nadditional results available. Repeat the API call with the\npageState value to get the next batch of results.\n" }, "results": { "type": "array", "items": { "type": "object", "properties": { "seen_on": { "type": "string", "format": "date", "description": "Date in YYYY-MM-DD format" }, "source": { "type": "string", "enum": [ "ct", "scan", "pdns", "zonefile", "scan-link", "scan-cert-subject" ], "description": "The source of the observation" }, "sub_id": { "type": "string", "description": "Observation value, can be empty." }, "first_seen": { "type": "string", "format": "date", "description": "First-seen timestamp, ISO8601" }, "last_seen": { "type": "string", "format": "date", "description": "Last-seen timestamp, ISO8601" }, "data_type": { "type": "string", "enum": [ "json" ], "description": "Indicates if there is additional data in the `data` field.\n" }, "data": { "type": "object", "description": "Additional JSON content for this record." } } } } }, "example": { "results": [ { "seen_on": "2200-01-01", "source": "seenDates", "sub_id": "", "first_seen": "2023-07-28T11:20:15.617Z", "last_seen": "2023-08-04T16:09:09.591Z", "data_type": null, "data": null }, { "seen_on": "2200-01-01", "source": "shardDate", "sub_id": "", "first_seen": "2023-07-28T11:20:15.685Z", "last_seen": null, "data_type": null, "data": null }, { "seen_on": "2100-01-01", "source": "ct", "sub_id": "", "first_seen": "2023-07-28T11:20:15.617Z", "last_seen": "2023-07-28T11:21:23.599Z", "data_type": null, "data": null }, { "seen_on": "2100-01-01", "source": "pdns", "sub_id": "", "first_seen": "2023-07-28T11:21:20.079Z", "last_seen": "2023-08-04T16:09:09.574Z", "data_type": null, "data": null }, { "seen_on": "2100-01-01", "source": "pdns", "sub_id": "A", "first_seen": "2023-07-28T11:21:20.079Z", "last_seen": "2023-08-04T16:09:09.574Z", "data_type": null, "data": null }, { "seen_on": "2100-01-01", "source": "pdns", "sub_id": "MX", "first_seen": "2023-07-28T11:21:20.174Z", "last_seen": "2023-07-31T11:23:22.848Z", "data_type": null, "data": null }, { "seen_on": "2100-01-01", "source": "pdns", "sub_id": "NS", "first_seen": "2023-07-28T11:21:20.128Z", "last_seen": "2023-08-04T11:05:40.130Z", "data_type": null, "data": null }, { "seen_on": "2100-01-01", "source": "pdns", "sub_id": "SOA", "first_seen": "2023-07-28T11:21:20.176Z", "last_seen": "2023-07-31T11:23:22.849Z", "data_type": null, "data": null }, { "seen_on": "2100-01-01", "source": "scan", "sub_id": "", "first_seen": "2023-07-28T11:23:52.876Z", "last_seen": "2023-08-04T16:09:09.591Z", "data_type": null, "data": null }, { "seen_on": "2100-01-01", "source": "zonefile", "sub_id": "", "first_seen": "2023-07-30T03:00:02.440Z", "last_seen": "2023-07-30T03:00:02.444Z", "data_type": null, "data": null }, { "seen_on": "2023-08-04", "source": "pdns", "sub_id": "A#91.215.85.14", "first_seen": "2023-08-04T10:09:45.599Z", "last_seen": "2023-08-04T16:09:09.574Z", "data_type": "json", "data": { "ttl": 14400, "rdata": "91.215.85.14", "geoip": { "country": "RU" }, "asn": { "ip": "91.215.85.14", "asn": "200593", "country": "RU", "registrar": "ripencc", "date": "2022-12-12", "description": "PROSPERO-AS, RU", "route": "91.215.85.0/24" } } } ], "pageState": "xxx" } }, "incident": { "type": "object", "properties": { "channels": { "type": "array", "items": { "type": "string" }, "description": "Channels subscribed to this incident." }, "observable": { "type": "string", "description": "Hostname, domain, IP, or URL to observe" }, "visibility": { "type": "string", "enum": [ "unlisted", "private" ], "description": "Scan visibility" }, "scanInterval": { "type": "integer", "description": "Interval (seconds) between triggering full website scans." }, "scanIntervalMode": { "type": "string", "enum": [ "manual", "automatic" ], "description": "If this is set to manual then scanIntervalAfterSuspended and scanIntervalAfterMalicious will not have an effect." }, "watchedAttributes": { "type": "array", "items": { "type": "string", "enum": [ "detections", "tls", "dns", "labels", "page", "meta", "ip" ] }, "description": "Determine which items will be monitored for." }, "userAgents": { "type": "array", "items": { "type": "string" }, "description": "Browser User-Agents to use during scanning" }, "userAgentsPerInterval": { "type": "integer", "description": "How many userAgents to use per scanInterval" }, "countries": { "type": "array", "items": { "type": "string" }, "description": "List of countries to scan from as ISO-3166-1 country codes." }, "countriesPerInterval": { "type": "integer", "description": "How many countries to use per scan interval." }, "stopDelaySuspended": { "type": "integer", "description": "When to automatically close the incident after the observable was suspended." }, "stopDelayInactive": { "type": "integer", "description": "When to automatically close the incident after the observable became inactive." }, "stopDelayMalicious": { "type": "integer", "description": "When to automatically close the incident after the observable became malicious." }, "scanIntervalAfterSuspended": { "type": "integer", "description": "How to change the scan interval after the observable was suspended." }, "scanIntervalAfterMalicious": { "type": "integer", "description": "How to change the scan interval after the observable became malicious." }, "incidentProfile": { "type": "string", "description": "ID of the incident profile to use when creating this incident." } } }, "incidentRequest": { "properties": { "incident": { "type": "object", "allOf": [ { "$ref": "#/components/schemas/incident" }, { "type": "object" }, { "required": [ "observable", "visibility", "channels" ] } ], "properties": { "expireAfter": { "type": "integer", "description": "Seconds until the incident will automatically be closed." } } } }, "required": [ "incident" ], "example": { "incident": { "scanInterval": 3600, "watchedAttributes": [ "detections", "tls" ], "userAgents": [ "Chrome on Linux", "Chrome on macOS" ], "userAgentsPerInterval": 1, "countries": [ "de", "us" ], "countriesPerInterval": 2, "stopDelaySuspended": 3600, "stopDelayInactive": 86400, "stopDelayMalicious": 90000, "scanIntervalAfterSuspended": 86400, "scanIntervalAfterMalicious": 86400, "observable": "foobar.com", "visibility": "private", "channels": [ "{{channelId}}" ], "scanIntervalMode": "automatic", "expireAfter": 86400 } } }, "incidentResponse": { "properties": { "incident": { "type": "object", "properties": { "_id": { "type": "string", "description": "Incident ID" }, "createdAt": { "type": "string", "format": "date-time", "description": "Time when the incident was created.", "readOnly": true }, "scannedAt": { "type": "string", "format": "date-time", "description": "Time when the incident was last scanned.", "readOnly": true }, "expireAt": { "type": "string", "format": "date-time", "description": "Time when the incident will be automatically closed.", "readOnly": true }, "sourceType": { "type": "string", "description": "How this incident was created.", "enum": [ "manual", "api", "subscription", "fork", "copy" ], "readOnly": true }, "sourceId": { "type": "string", "description": "ID of the original item that created this incident.", "readOnly": true }, "incidentProfile": { "type": "string", "description": "ID of the incident profile to use when creating this incident." }, "state": { "type": "string", "enum": [ "active", "closed" ], "description": "Whether the incident is active or closed", "readOnly": true }, "stateSize": { "type": "integer", "description": "Size in bytes of incident states in database.", "readOnly": true }, "stateCount": { "type": "integer", "description": "Number of stored incident states in database.", "readOnly": true }, "owner": { "type": "string", "readOnly": true, "description": "Incident owner." }, "type": { "type": "string", "enum": [ "url", "ip", "hostname" ] } }, "allOf": [ { "$ref": "#/components/schemas/incident" }, { "type": "object" } ] } }, "example": { "incident": { "_id": "{{incidentId}}", "scanInterval": 3600, "watchedAttributes": [ "detections", "tls" ], "userAgents": [ "Chrome on Linux", "Chrome on macOS" ], "userAgentsPerInterval": 1, "countries": [ "de", "us" ], "countriesPerInterval": 2, "stopDelaySuspended": 3600, "stopDelayInactive": 86400, "stopDelayMalicious": 90000, "scanIntervalAfterSuspended": 86400, "scanIntervalAfterMalicious": 86400, "owner": "own", "type": "hostname", "observable": "foobar.com", "state": "active", "visibility": "private", "channels": [ "{{channelId}}" ], "sourceType": "manual", "sourceId": "{{sourceId}}", "stateSize": 3717, "stateCount": 3, "scanIntervalMode": "automatic", "labels": [ "hasHTTP", "hasIP", "hasMX", "hasNS" ], "expireAt": "2025-01-24T11:44:52.563Z", "createdAt": "2025-01-21T11:44:52.566Z", "scannedAt": "2025-01-21T12:44:52.566Z" } } }, "searchResponse": { "properties": { "results": { "type": "array", "description": "Array of search results" }, "total": { "type": "integer", "description": "Total number of results with an exact count up to 10,000 results." }, "took": { "type": "integer", "description": "Search request time in milliseconds." }, "has_more": { "type": "boolean", "description": "True if there are more than 10,000 results." } } }, "livescanRequest": { "properties": { "task": { "type": "object", "properties": { "url": { "type": "string", "format": "uri", "description": "URL to scan" }, "visibility": { "type": "string", "enum": [ "public", "unlisted", "private" ] } } }, "scanner": { "type": "object", "properties": { "pageTimeout": { "type": "integer", "description": "Time to wait for the whole scan process (in ms)", "default": 10000 }, "captureDelay": { "type": "integer", "description": "Delay after page has finished loading before capturing page content", "default": 3000 }, "extraHeaders": { "type": "object", "description": "Extra Key-Value headers to send via the HTTP headers" }, "enableFeatures": { "type": "array" }, "disableFeatures": { "type": "array" } } } } }, "QuotaPeriod": { "type": "object", "properties": { "limit": { "type": "integer", "description": "Maximum allowed usage for this period" }, "used": { "type": "integer", "description": "Amount of quota used in this period" }, "remaining": { "type": "integer", "description": "Remaining quota for this period" }, "percent": { "type": "number", "description": "Percentage of quota used" } }, "required": [ "limit", "used", "remaining", "percent" ] }, "maliciousStats": { "type": "object", "properties": { "observable": { "type": "string", "description": "The observable that was looked up." }, "type": { "type": "string", "enum": [ "ip", "hostname", "domain", "url" ], "description": "The type of observable." }, "count": { "type": "integer", "description": "Number of times this observable has been seen in malicious scan results." }, "firstSeen": { "type": "string", "format": "date-time", "nullable": true, "description": "Timestamp when this observable was first seen in malicious scan results." }, "lastSeen": { "type": "string", "format": "date-time", "nullable": true, "description": "Timestamp when this observable was last seen in malicious scan results." } } } } }, "security": [ { "apikeyAuth": [ "read", "write" ] } ], "tags": [ { "name": "Generic", "description": "API endpoints related to the platform or the user account." }, { "name": "Scanning", "description": "These APIs allow URLs to be scanned and the results of the scans to be retrieved." }, { "name": "Search", "description": "The Search API allows users to search for historically website scans, hostnames, domains, TLS certificates and incidents." }, { "name": "Live Scanning", "description": "**urlscan Pro** - Live Scanning allows users to scan websites from different geographical locations and using different device settings.\n\nSee additional info about this proprietary feature on [urlscan Pro](https://pro.urlscan.io/help/livescan).\n" }, { "name": "Saved Searches", "description": "**urlscan Pro** - Saved Searches are rules that are executed inline against new incoming scans and hostnames.\n" }, { "name": "Subscriptions", "description": "**urlscan Pro** - Subscriptions allow notifications for Saved Searches.\n" }, { "name": "Hostnames", "description": "**urlscan Pro** - Historical information on hostnames and domains\n" }, { "name": "Brands", "description": "**urlscan Pro** - Information about tracked brands\n" }, { "name": "Files", "description": "**urlscan Pro** - Downloaded files\n" }, { "name": "Incidents", "description": "**urlscan Pro** - Incidents track observables, like hostnames and domains, and automatically scan and alert on changes.\n" }, { "name": "Malicious", "description": "**urlscan Pro** - Look up how often an observable (IP, hostname, domain, or URL) has been seen in malicious scan results, along with first and last seen timestamps.\n" } ], "paths": { "/api/v1/scan": { "post": { "operationId": "submitScan", "tags": [ "Scanning" ], "summary": "Scan", "description": "Submit a URL to be scanned and control options for how the scan should be performed.", "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "required": [ "url" ], "properties": { "url": { "type": "string", "format": "uri", "description": "The URL to be scanned" }, "visibility": { "type": "string", "enum": [ "public", "unlisted", "private" ], "default": "public", "description": "Intended visibility of the final scan result" }, "country": { "type": "string", "description": "Country to scan from. ISO 3166-1 alpha-2 format. If not supplied, an appropriate country will automatically be chosen." }, "tags": { "type": "array", "maxItems": 10, "items": { "type": "string", "maxLength": 30 }, "description": "User-defined tags to annotate this scan, e.g. \"phishing\" or \"malicious\"." }, "overrideSafety": { "type": "boolean", "description": "If set to any value, this will disable reclassification of URLs with potential PII in them. Use with care!" }, "referer": { "type": "string", "description": "Override HTTP referer for this scan" }, "customagent": { "type": "string", "description": "Override HTTP User-Agent for this scan" } }, "example": { "url": "https://urlscan.io", "visibility": "public", "country": "de", "tags": [ "iloveurlscan", "testing" ] } } } } }, "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object", "properties": { "uuid": { "type": "string", "format": "uuid", "description": "UUID for scan result, also called $scanId" }, "country": { "type": "string", "description": "Country for scanning" }, "visibility": { "type": "string", "description": "Determined visibility for scan" }, "url": { "type": "string", "format": "uri", "description": "Determined URL being scanned" } } }, "example": { "uuid": "68e26c59-2eae-437b-aeb1-cf750fafe7d7", "visibility": "public", "url": "https://urlscan.io/", "country": "de" } } } } } } }, "/api/v1/search": { "get": { "operationId": "searchDatasource", "tags": [ "Search" ], "summary": "Search", "description": "The Search API is used to find historical scans performed on the\nplatform. Some data sources and searchable fields are only available on **urlscan Pro**.\n\nThe API search will only indicate an exact count of results up to 10,000 results in the total property. After that the `has_more` flag will be true. Use the `sort` value of the last (i.e. oldest) scan result in the current list of results as a parameter for the next Search API call. Supply this value in the `search_after` query parameter for getting the next (older) batch of results.\n\nAPI search will find Public scans performed by anyone as well as Unlisted and Private scans performed by you or your teams.\nFor query syntax and searchable fields, refer to\n[https://docs.urlscan.io/pages/search-api-reference](https://docs.urlscan.io/pages/search-api-reference)\n", "parameters": [ { "name": "q", "in": "query", "schema": { "type": "string" }, "description": "Search Query (Elasticsearch Query String)", "example": "page.domain:example.com" }, { "name": "size", "in": "query", "schema": { "type": "integer", "maximum": 10000 }, "description": "Number of results to return", "example": 100 }, { "name": "search_after", "in": "query", "description": "For retrieving the next batch of results, send the value of the `sort` attribute of the last (oldest) result you received (comma-separated) from the previous call.\n", "schema": { "type": "string" } }, { "name": "datasource", "in": "query", "schema": { "type": "string", "enum": [ "scans", "hostnames", "incidents", "notifications", "certificates" ] }, "description": "Datasources to search: scans (urlscan.io), hostnames, incidents, notifications,\ncertificates (urlscan Pro)\n", "example": "scans" }, { "name": "collapse", "in": "query", "schema": { "type": "string" }, "description": "Field to collapse results on. Only works on current page of results.\n", "example": "page.domain.keyword" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/searchResponse" }, "example": { "results": [ { "verdicts": { "score": -50, "malicious": false, "urlscan": { "malicious": false }, "hasVerdicts": true }, "submitter": { "country": "cz" }, "dom": { "size": 229965, "hash": "2bdc117bbc12d656241cfda799ffbe033ae58d78469bb3f4e750c4c9d9532a9d" }, "frames": { "length": 1 }, "canonical": { "task": { "url": "urlscan.io/result/db0943fb-586d-4a00-9786-d9f818a30131" }, "page": { "url": "urlscan.io/result/db0943fb-586d-4a00-9786-d9f818a30131" } }, "task": { "visibility": "public", "method": "manual", "domain": "urlscan.io", "apexDomain": "urlscan.io", "time": "2023-08-18T09:26:20.465Z", "uuid": "78e48885-1b4c-4388-92bb-0d02cad46178", "url": "https://urlscan.io/result/db0943fb-586d-4a00-9786-d9f818a30131/" }, "stats": { "uniqIPs": 3, "uniqCountries": 2, "dataLength": 1038051, "encodedDataLength": 517522, "requests": 26 }, "scanner": { "country": "at" }, "links": { "length": 62 }, "page": { "country": "DE", "server": "nginx", "ip": "49.12.22.106", "mimeType": "text/html", "title": "www.wbc247-korea.com - urlscan.io", "url": "https://urlscan.io/result/db0943fb-586d-4a00-9786-d9f818a30131/", "tlsValidDays": 89, "tlsAgeDays": 49, "ptr": "urlscan.io", "tlsValidFrom": "2023-06-29T10:47:47.000Z", "domain": "urlscan.io", "umbrellaRank": 85248, "apexDomain": "urlscan.io", "asnname": "HETZNER-AS, DE", "asn": "AS24940", "tlsIssuer": "R3", "status": "200" }, "text": { "size": 54682, "hash": "e4ae30ae2ca6e8b6b75f18413e9c128a80bf261e2d03d60150b2e0799a05612f" }, "_id": "78e48885-1b4c-4388-92bb-0d02cad46178", "_score": null, "sort": [ 1692350780465, "78e48885-1b4c-4388-92bb-0d02cad46178" ], "result": "https://urlscan.io/api/v1/result/78e48885-1b4c-4388-92bb-0d02cad46178/", "screenshot": "https://urlscan.io/screenshots/78e48885-1b4c-4388-92bb-0d02cad46178.png" }, { "verdicts": { "score": -50, "malicious": false, "urlscan": { "malicious": false }, "hasVerdicts": true }, "submitter": { "country": "ie" }, "dom": { "size": 70886, "hash": "8d544648a7ede3eae277db9eac47853452966518f04fcca4571c0a16c5836cb6" }, "frames": { "length": 3 }, "canonical": { "task": { "url": "urlscan.io" }, "page": { "url": "urlscan.io" } }, "task": { "visibility": "unlisted", "method": "api", "domain": "urlscan.io", "apexDomain": "urlscan.io", "time": "2023-08-18T09:05:32.098Z", "uuid": "e142b92c-153b-42a6-b36b-262b22462e7f", "url": "https://urlscan.io/" }, "stats": { "uniqIPs": 5, "uniqCountries": 1, "dataLength": 2566855, "encodedDataLength": 1181236, "requests": 56 }, "scanner": { "country": "de" }, "links": { "length": 10 }, "page": { "country": "DE", "server": "nginx", "ip": "49.12.22.106", "mimeType": "text/html", "title": "URL and website scanner - urlscan.io", "url": "https://urlscan.io/", "tlsValidDays": 89, "tlsAgeDays": 49, "ptr": "urlscan.io", "tlsValidFrom": "2023-06-29T10:47:47.000Z", "domain": "urlscan.io", "umbrellaRank": 85248, "apexDomain": "urlscan.io", "asnname": "HETZNER-AS, DE", "asn": "AS24940", "tlsIssuer": "R3", "status": "200" }, "text": { "size": 35591, "hash": "9374b8777f43be35f95d4633daa288b9db3803e6e54af24b9666d98d1329499d" }, "_id": "e142b92c-153b-42a6-b36b-262b22462e7f", "_score": null, "sort": [ 1692349532098, "e142b92c-153b-42a6-b36b-262b22462e7f" ], "result": "https://urlscan.io/api/v1/result/e142b92c-153b-42a6-b36b-262b22462e7f/", "screenshot": "https://urlscan.io/screenshots/e142b92c-153b-42a6-b36b-262b22462e7f.png" } ], "total": 10000, "took": 23, "has_more": true } } } } } } }, "/api/v1/result/{scanId}/": { "get": { "operationId": "getResult", "tags": [ "Scanning" ], "summary": "Result", "parameters": [ { "in": "path", "name": "scanId", "schema": { "type": "string", "format": "uuid" }, "required": true, "description": "UUID of scan result" } ], "description": "Using the Scan ID received from the Submission API, you can use the Result API to poll for the scan. The most efficient approach would be to wait at least 10 seconds before starting to poll, and then only polling 2-second intervals with an eventual upper timeout in case the scan does not return.", "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object", "properties": { "data": { "type": "object", "description": "Raw scan data including network requests, responses, cookies, console logs, and page elements", "properties": { "requests": { "type": "array", "description": "Individual HTTP transactions during page navigation (+ metadata)", "items": { "type": "object", "properties": { "request": { "type": "object", "properties": { "requestId": { "type": "string" }, "loaderId": { "type": "string" }, "documentURL": { "type": "string", "format": "uri" }, "request": { "type": "object", "properties": { "url": { "type": "string", "format": "uri" }, "method": { "type": "string" }, "headers": { "type": "object", "additionalProperties": { "type": "string" } }, "mixedContentType": { "type": "string" }, "initialPriority": { "type": "string" }, "referrerPolicy": { "type": "string" }, "isSameSite": { "type": "boolean" }, "isLinkPreload": { "type": "boolean" } } }, "timestamp": { "type": "number" }, "wallTime": { "type": "number" }, "initiator": { "type": "object", "properties": { "type": { "type": "string" }, "url": { "type": "string", "format": "uri" }, "lineNumber": { "type": "integer" }, "columnNumber": { "type": "integer" } } }, "redirectHasExtraInfo": { "type": "boolean" }, "type": { "type": "string" }, "frameId": { "type": "string" }, "hasUserGesture": { "type": "boolean" }, "primaryRequest": { "type": "boolean" } } }, "response": { "type": "object", "properties": { "encodedDataLength": { "type": "integer" }, "dataLength": { "type": "integer" }, "requestId": { "type": "string" }, "type": { "type": "string" }, "hasExtraInfo": { "type": "boolean" }, "hash": { "type": "string" }, "size": { "type": "integer" }, "failed": { "type": "object", "description": "Present when the request failed (e.g. blocked, aborted, network error)", "properties": { "requestId": { "type": "string" }, "timestamp": { "type": "number" }, "type": { "type": "string" }, "errorText": { "type": "string" }, "canceled": { "type": "boolean" } } }, "asn": { "type": "object", "properties": { "ip": { "type": "string" }, "asn": { "type": "string" }, "country": { "type": "string" }, "description": { "type": "string" }, "name": { "type": "string" }, "route": { "type": "string" } } }, "geoip": { "type": "object", "properties": { "country": { "type": "string" }, "region": { "type": "string" }, "timezone": { "type": "string" }, "city": { "type": "string" }, "ll": { "type": "array", "items": { "type": "number" } }, "country_name": { "type": "string" }, "metro": { "type": "integer" } } }, "rdns": { "type": "object", "properties": { "ip": { "type": "string" }, "ptr": { "type": "string" } } }, "response": { "type": "object", "properties": { "url": { "type": "string", "format": "uri" }, "status": { "type": "integer" }, "statusText": { "type": "string" }, "headers": { "type": "object", "additionalProperties": { "type": "string" } }, "mimeType": { "type": "string" }, "remoteIPAddress": { "type": "string" }, "remotePort": { "type": "integer" }, "encodedDataLength": { "type": "integer" }, "timing": { "type": "object", "properties": { "requestTime": { "type": "number" }, "proxyStart": { "type": "number" }, "proxyEnd": { "type": "number" }, "dnsStart": { "type": "number" }, "dnsEnd": { "type": "number" }, "connectStart": { "type": "number" }, "connectEnd": { "type": "number" }, "sslStart": { "type": "number" }, "sslEnd": { "type": "number" }, "workerStart": { "type": "number" }, "workerReady": { "type": "number" }, "workerFetchStart": { "type": "number" }, "workerRespondWithSettled": { "type": "number" }, "sendStart": { "type": "number" }, "sendEnd": { "type": "number" }, "pushStart": { "type": "number" }, "pushEnd": { "type": "number" }, "receiveHeadersStart": { "type": "number" }, "receiveHeadersEnd": { "type": "number" } } }, "responseTime": { "type": "number" }, "protocol": { "type": "string" }, "alternateProtocolUsage": { "type": "string" }, "securityState": { "type": "string" }, "securityDetails": { "type": "object", "properties": { "protocol": { "type": "string" }, "keyExchange": { "type": "string" }, "keyExchangeGroup": { "type": "string" }, "cipher": { "type": "string" }, "certificateId": { "type": "integer" }, "subjectName": { "type": "string" }, "sanList": { "type": "array", "items": { "type": "string" } }, "issuer": { "type": "string" }, "validFrom": { "type": "integer" }, "validTo": { "type": "integer" }, "signedCertificateTimestampList": { "type": "array" }, "certificateTransparencyCompliance": { "type": "string" }, "serverSignatureAlgorithm": { "type": "integer" }, "encryptedClientHello": { "type": "boolean" } } }, "securityHeaders": { "type": "array", "items": { "type": "object", "properties": { "name": { "type": "string" }, "value": { "type": "string" } } } } } } } }, "initiatorInfo": { "type": "object", "properties": { "url": { "type": "string", "format": "uri" }, "host": { "type": "string" }, "type": { "type": "string" } } } } } }, "cookies": { "type": "array", "description": "Cookies set by the page with associated metadata", "items": { "type": "object", "properties": { "name": { "type": "string" }, "value": { "type": "string" }, "domain": { "type": "string" }, "path": { "type": "string" }, "expires": { "type": "number" }, "size": { "type": "integer" }, "httpOnly": { "type": "boolean" }, "secure": { "type": "boolean" }, "session": { "type": "boolean" }, "sameSite": { "type": "string" }, "priority": { "type": "string" }, "sameParty": { "type": "boolean" }, "sourceScheme": { "type": "string" }, "sourcePort": { "type": "integer" }, "partitionKey": { "type": "object", "properties": { "topLevelSite": { "type": "string" }, "hasCrossSiteAncestor": { "type": "boolean" } } }, "partitionKeyOpaque": { "type": "boolean" } } } }, "console": { "type": "array", "description": "Console messages during page navigation", "items": { "type": "object", "properties": { "message": { "type": "object", "properties": { "source": { "type": "string" }, "level": { "type": "string" }, "text": { "type": "string" }, "timestamp": { "type": "number" }, "url": { "type": "string" }, "line": { "type": "integer" } } } } } }, "links": { "type": "array", "description": "Links and link text contained on the fully loaded page", "items": { "type": "object", "properties": { "href": { "type": "string", "format": "uri" }, "text": { "type": "string" }, "type": { "type": "string", "enum": [ "qrcode" ], "description": "Set to `qrcode` when the link was extracted from a scanned QR code" }, "frameId": { "type": "string" } } } }, "timing": { "type": "object", "description": "Timing entries for various lifecycle events", "properties": { "beginNavigation": { "type": "string", "format": "date-time" }, "frameStartedLoading": { "type": "string", "format": "date-time" }, "frameNavigated": { "type": "string", "format": "date-time" }, "domContentEventFired": { "type": "string", "format": "date-time" }, "frameStoppedLoading": { "type": "string", "format": "date-time" } } }, "globals": { "type": "array", "description": "JavaScript non-standard global variable names and types on the fully loaded page", "items": { "type": "object", "properties": { "prop": { "type": "string" }, "type": { "type": "string", "enum": [ "object", "function", "boolean", "number", "string", "unknown" ] }, "source": { "type": "string", "enum": [ "windowScope", "globalScope" ] } } } }, "storages": { "type": "array", "description": "Recorded items set in `localStorage` and `sessionStorage`", "items": { "type": "object", "properties": { "origin": { "type": "string" }, "key": { "type": "string" }, "value": { "type": "string" }, "isLocalStorage": { "type": "boolean" } } } }, "redirects": { "type": "array", "description": "Redirect chain from the submitted URL (`task.url`) to the final page URL (`page.url`)", "items": { "type": "object", "properties": { "from": { "type": "string", "format": "uri" }, "to": { "type": "string", "format": "uri" }, "status": { "type": "integer" }, "initiator": { "type": "string" } } } }, "websockets": { "type": "array", "description": "Contains WebSocket connection data captured during scan", "items": { "type": "object", "properties": { "initiatorInfo": { "type": "object", "properties": { "requestId": { "type": "string" }, "url": { "type": "string" }, "initiator": { "type": "object" } } }, "frames": { "type": "object", "properties": { "sent": { "type": "array", "items": { "type": "object", "properties": { "requestId": { "type": "string" }, "timestamp": { "type": "number" }, "response": { "type": "object" } } } }, "received": { "type": "array", "items": { "type": "object", "properties": { "requestId": { "type": "string" }, "timestamp": { "type": "number" }, "response": { "type": "object" } } } } } }, "connectionDuration": { "type": "number" }, "bytesSent": { "type": "integer" }, "bytesReceived": { "type": "integer" }, "messagesSent": { "type": "integer" }, "messagesReceived": { "type": "integer" } } } } } }, "stats": { "type": "object", "description": "Statistical analysis of the scan including resource counts, protocols, security metrics, and geographic distribution", "properties": { "resourceStats": { "type": "array", "items": { "type": "object", "properties": { "count": { "type": "integer" }, "size": { "type": "integer" }, "encodedSize": { "type": "integer" }, "latency": { "type": "number" }, "countries": { "type": "array", "items": { "type": "string" } }, "ips": { "type": "array", "items": { "type": "string" } }, "type": { "type": "string" }, "compression": { "type": "string" }, "percentage": { "type": "integer" } } } }, "protocolStats": { "type": "array", "items": { "type": "object", "properties": { "count": { "type": "integer" }, "size": { "type": "integer" }, "encodedSize": { "type": "integer" }, "latency": { "type": "number" }, "countries": { "type": "array", "items": { "type": "string" } }, "ips": { "type": "array", "items": { "type": "string" } }, "percentage": { "type": "integer" }, "protocol": { "type": "string" }, "securityState": { "type": "object" } } } }, "tlsStats": { "type": "array", "items": { "type": "object", "properties": { "count": { "type": "integer" }, "size": { "type": "integer" }, "encodedSize": { "type": "integer" }, "latency": { "type": "number" }, "countries": { "type": "array", "items": { "type": "string" } }, "ips": { "type": "array", "items": { "type": "string" } }, "percentage": { "type": "integer" }, "protocols": { "type": "object", "additionalProperties": { "type": "integer" } }, "securityState": { "type": "string" } } } }, "serverStats": { "type": "array", "items": { "type": "object", "properties": { "count": { "type": "integer" }, "size": { "type": "integer" }, "encodedSize": { "type": "integer" }, "latency": { "type": "number" }, "countries": { "type": "array", "items": { "type": "string" } }, "ips": { "type": "array", "items": { "type": "string" } }, "percentage": { "type": "integer" }, "server": { "type": "string" } } } }, "domainStats": { "type": "array", "items": { "type": "object", "properties": { "count": { "type": "integer" }, "ips": { "type": "array", "items": { "type": "string" } }, "redirects": { "type": "integer" }, "size": { "type": "integer" }, "encodedSize": { "type": "integer" }, "countries": { "type": "array", "items": { "type": "string" } }, "index": { "type": "integer" }, "initiators": { "type": "array", "items": { "type": "string" } }, "requests": { "type": "integer" }, "domain": { "type": "string" } } } }, "regDomainStats": { "type": "array", "items": { "type": "object", "properties": { "count": { "type": "integer" }, "ips": { "type": "array", "items": { "type": "string" } }, "redirects": { "type": "integer" }, "size": { "type": "integer" }, "encodedSize": { "type": "integer" }, "countries": { "type": "array", "items": { "type": "string" } }, "index": { "type": "integer" }, "initiators": { "type": "array", "items": { "type": "string" } }, "requests": { "type": "integer" }, "regDomain": { "type": "string" }, "subDomains": { "type": "array", "items": { "type": "object", "properties": { "domain": { "type": "string" }, "country": { "type": "string" } } } } } } }, "secureRequests": { "type": "integer" }, "securePercentage": { "type": "integer" }, "IPv6Percentage": { "type": "integer" }, "uniqCountries": { "type": "integer" }, "totalLinks": { "type": "integer" }, "adBlocked": { "type": "integer" }, "malicious": { "type": "integer" }, "ipStats": { "type": "array", "items": { "type": "object", "properties": { "requests": { "type": "integer" }, "domains": { "type": "array", "items": { "type": "string" } }, "ips": { "type": "array", "items": { "type": "string" } }, "countries": { "type": "array", "items": { "type": "string" } }, "asns": { "type": "array", "items": { "type": "object", "properties": { "asn": { "type": "string" }, "country": { "type": "string" }, "organisation": { "type": "string" } } } }, "encoded_size": { "type": "integer" }, "size": { "type": "integer" }, "redirects": { "type": "integer" }, "ip": { "type": "string" }, "asn": { "type": "object", "properties": { "ip": { "type": "string" }, "asn": { "type": "string" }, "country": { "type": "string" }, "description": { "type": "string" }, "name": { "type": "string" }, "route": { "type": "string" } } }, "dns": { "type": "object" }, "geoip": { "type": "object", "properties": { "country": { "type": "string" }, "region": { "type": "string" }, "timezone": { "type": "string" }, "city": { "type": "string" }, "ll": { "type": "array", "items": { "type": "number" } }, "country_name": { "type": "string" }, "metro": { "type": "integer" } } }, "encodedSize": { "type": "integer" }, "index": { "type": "integer" }, "ipv6": { "type": "boolean" }, "count": { "nullable": true, "type": "integer" }, "rdns": { "type": "object", "properties": { "ip": { "type": "string" }, "ptr": { "type": "string" } } } } } } } }, "meta": { "type": "object", "description": "Enriched metadata from external processors including domain rankings, geolocation, DNS records, and ASN information", "properties": { "processors": { "type": "object", "properties": { "umbrella": { "type": "object", "properties": { "data": { "type": "array", "description": "Cisco Umbrella Top 1 Million annotation per hostname", "items": { "type": "object", "properties": { "hostname": { "type": "string" }, "rank": { "type": "integer" } } } } } }, "geoip": { "type": "object", "properties": { "data": { "type": "array", "description": "GeoIP annotation for every IP contacted during page navigation", "items": { "type": "object", "properties": { "ip": { "type": "string" }, "geoip": { "type": "object", "properties": { "country": { "type": "string" }, "country_name": { "type": "string" }, "region": { "type": "string" }, "timezone": { "type": "string" }, "city": { "type": "string" }, "ll": { "type": "array", "items": { "type": "number" } }, "metro": { "type": "integer" } } } } } } } }, "rdns": { "type": "object", "properties": { "data": { "type": "array", "description": "DNS PTR records for every hostname contacted during page navigation", "items": { "type": "object", "properties": { "ip": { "type": "string" }, "ptr": { "type": "string" } } } } } }, "asn": { "type": "object", "properties": { "data": { "type": "array", "description": "IP ASN annotation for every IP contacted during page navigation", "items": { "type": "object", "properties": { "ip": { "type": "string" }, "asn": { "type": "string" }, "country": { "type": "string" }, "description": { "type": "string" }, "name": { "type": "string" }, "route": { "type": "string" } } } } } }, "download": { "type": "object", "properties": { "data": { "type": "array", "description": "List of files that were downloaded by the website", "items": { "type": "object", "properties": { "filename": { "type": "string" }, "filesize": { "type": "integer" }, "receivedBytes": { "type": "integer" }, "url": { "type": "string", "format": "uri" }, "startedAt": { "type": "string", "format": "date-time" }, "state": { "type": "string" }, "mimeType": { "type": "string" }, "mimeDescription": { "type": "string" }, "sha256": { "type": "string" }, "finishedAt": { "type": "string", "format": "date-time" } } } } } }, "wappa": { "type": "object", "properties": { "data": { "type": "array", "description": "Wappalyzer technology detection for fully loaded page", "items": { "type": "object", "properties": { "confidence": { "type": "array", "items": { "type": "object", "properties": { "confidence": { "type": "integer" }, "pattern": { "type": "string" } } } }, "confidenceTotal": { "type": "integer" }, "app": { "type": "string" }, "icon": { "type": "string" }, "website": { "type": "string", "format": "uri" }, "categories": { "type": "array", "items": { "type": "object", "properties": { "groups": { "type": "array", "items": { "type": "integer" } }, "name": { "type": "string" }, "priority": { "type": "integer" } } } } } } } } } } } } }, "task": { "type": "object", "description": "Information about the scan task including configuration, URLs, and submission details", "properties": { "uuid": { "type": "string", "format": "uuid", "description": "The unique ID of the scan" }, "time": { "type": "string", "format": "date-time", "description": "Time the scan was created" }, "url": { "type": "string", "format": "uri", "description": "The URL that was tasked" }, "domain": { "type": "string", "description": "Hostname from `task.url`" }, "apexDomain": { "type": "string", "description": "The registered second-level domain of the task hostname" }, "visibility": { "type": "string", "enum": [ "public", "unlisted", "private" ], "description": "Visibility of the task" }, "options": { "type": "object", "description": "Options supplied to the scan (not standardised yet)" }, "method": { "type": "string", "enum": [ "api", "manual", "automatic", "urlscan-observe" ], "description": "The method of how the URL was tasked" }, "source": { "type": "string" }, "userAgent": { "type": "string" }, "reportURL": { "type": "string", "format": "uri" }, "screenshotURL": { "type": "string", "format": "uri" }, "domURL": { "type": "string", "format": "uri" }, "tags": { "type": "array", "description": "User-supplied tags submitted during submission", "items": { "type": "string" } } } }, "page": { "type": "object", "description": "Information about the scanned page including server details, location, and network properties", "properties": { "url": { "type": "string", "format": "uri", "description": "The URL of the \"primary request\", i.e., the HTML document loaded last after all redirects" }, "domain": { "type": "string", "description": "Hostname from `page.url`" }, "apexDomain": { "type": "string", "description": "The registered second-level domain of the `page.domain`" }, "country": { "type": "string", "description": "GeoIP Country Information about the IP contacted for the primary request" }, "city": { "type": "string", "description": "GeoIP City Information about the IP contacted for the primary request" }, "server": { "type": "string", "description": "HTTP \"Server\" header of the primary request response" }, "ip": { "type": "string", "description": "IP contacted for the primary request" }, "ptr": { "type": "string", "description": "DNS PTR record for the primary IP" }, "asn": { "type": "string", "description": "AS (Autonomous System) number of the primary IP" }, "asnname": { "type": "string", "description": "AS (Autonomous System) name of the primary IP" }, "title": { "type": "string", "description": "Title of the website" }, "mimeType": { "type": "string", "description": "Page MIME type" }, "status": { "type": "string", "description": "HTTP response code for primary page" }, "language": { "type": "string", "description": "Detected page language" }, "redirected": { "type": "string", "description": "Whether the page was redirected" }, "umbrellaRank": { "type": "integer", "description": "Cisco Umbrella rank of the page hostname" }, "apexDomainAgeDays": { "type": "integer", "description": "Age of the apex domain in days at the time of the scan" }, "domainAgeDays": { "type": "integer", "description": "Age of the domain in days at the time of the scan" }, "tlsAgeDays": { "type": "integer", "description": "Age of the TLS certificate at the time of scanning" }, "tlsValidDays": { "type": "integer", "description": "Validity period of the TLS certificate in days" }, "tlsValidFrom": { "type": "string", "format": "date-time", "description": "ISO 8601 timestamp of valid-from date for page TLS certificate" }, "tlsIssuer": { "type": "string", "description": "TLS issuer name for the TLS cert of the page" } } }, "lists": { "type": "object", "description": "Aggregated lists of unique domains, IPs, URLs, ASNs, servers, certificates and hashes.", "properties": { "ips": { "type": "array", "description": "IPs contacted", "items": { "type": "string" } }, "countries": { "type": "array", "description": "GeoIP country of IPs contacted (ISO-3166)", "items": { "type": "string" } }, "asns": { "type": "array", "description": "AS Numbers contacted", "items": { "type": "string" } }, "domains": { "type": "array", "description": "Hostnames contacted", "items": { "type": "string" } }, "servers": { "type": "array", "description": "Unique HTTP \"Server\" headers of responses", "items": { "type": "string" } }, "urls": { "type": "array", "description": "URLs requested", "items": { "type": "string" } }, "linkDomains": { "type": "array", "description": "Unique hostnames of links", "items": { "type": "string" } }, "certificates": { "type": "array", "description": "TLS Certificates of responses", "items": { "type": "object", "properties": { "subjectName": { "type": "string" }, "issuer": { "type": "string" }, "validFrom": { "type": "integer" }, "validTo": { "type": "integer" } } } }, "hashes": { "type": "array", "description": "SHA256 hashes of HTTP response bodies", "items": { "type": "string" } } } }, "verdicts": { "type": "object", "description": "Security verdicts and threat analysis from multiple sources including urlscan.io, third-party engines, and community ratings", "properties": { "overall": { "type": "object", "description": "Aggregated verdict combining urlscan, engines, and community signals", "properties": { "score": { "type": "integer", "description": "Maliciousness score (-100 to 100, with -100 being benign and 100 being malicious)" }, "categories": { "type": "array", "description": "Maliciousness categories (e.g., \"phishing\")", "items": { "type": "string" } }, "brands": { "type": "array", "description": "Brand detections", "items": { "$ref": "#/components/schemas/VerdictBrand" } }, "tags": { "type": "array", "items": { "type": "string" } }, "malicious": { "type": "boolean" }, "hasVerdicts": { "type": "boolean" } } }, "urlscan": { "type": "object", "description": "urlscan.io's own verdict for this scan", "properties": { "score": { "type": "integer", "description": "Maliciousness score (-100 to 100, with -100 being benign and 100 being malicious)" }, "categories": { "type": "array", "description": "Maliciousness categories (e.g., \"phishing\")", "items": { "type": "string" } }, "brands": { "type": "array", "description": "Brand detections", "items": { "$ref": "#/components/schemas/VerdictBrand" } }, "tags": { "type": "array", "items": { "type": "string" } }, "malicious": { "type": "boolean" }, "hasVerdicts": { "type": "boolean" } } }, "engines": { "type": "object", "description": "Aggregated verdicts from third-party detection engines", "properties": { "score": { "type": "integer" }, "categories": { "type": "array", "items": { "type": "string" } }, "brands": { "type": "array", "items": { "$ref": "#/components/schemas/VerdictBrand" } }, "tags": { "type": "array", "items": { "type": "string" } }, "malicious": { "type": "boolean" }, "enginesTotal": { "type": "integer" }, "maliciousTotal": { "type": "integer" }, "benignTotal": { "type": "integer" }, "verdicts": { "type": "array", "items": { "type": "object", "properties": { "engine": { "type": "string" }, "classification": { "type": "string" } } } }, "maliciousVerdicts": { "type": "array", "items": { "type": "object" } }, "benignVerdicts": { "type": "array", "items": { "type": "object" } }, "hasVerdicts": { "type": "boolean" } } }, "community": { "type": "object", "description": "Community-sourced verdicts and votes", "properties": { "score": { "type": "integer" }, "categories": { "type": "array", "items": { "type": "string" } }, "brands": { "type": "array", "items": { "$ref": "#/components/schemas/VerdictBrand" } }, "tags": { "type": "array", "items": { "type": "string" } }, "malicious": { "type": "boolean" }, "votesBenign": { "type": "integer" }, "votesMalicious": { "type": "integer" }, "votesTotal": { "type": "integer" }, "hasVerdicts": { "type": "boolean" } } } } }, "submitter": { "type": "object", "description": "Information about the entity that submitted the scan request", "properties": { "country": { "type": "string" } } }, "scanner": { "type": "object", "description": "Information about the scanner that performed the scan", "properties": { "country": { "type": "string" } } }, "visible": { "type": "object", "description": "Information made visible on the public report (e.g. detected brand)", "properties": { "brandname": { "type": "string", "description": "Name of the detected brand, if any" } } }, "labels": { "type": "array", "description": "System labels controlled by urlscan. Only in urlscan Pro", "items": { "type": "string" } }, "usertags": { "type": "array", "description": "User-defined tags applied by Saved Searches. Only in urlscan Pro", "items": { "type": "string" } }, "metatags": { "type": "array", "description": "Meta information about the scan and matched searches, e.g. the IDs of Saved Searches that this item has matched - Only in urlscan Pro (Attention: This field is called `meta` in the Search API)", "items": { "type": "string" } } } }, "example": { "data": { "requests": [ { "request": { "requestId": "BC350C207E3FEDDC4FC8886D11F3FC91", "loaderId": "BC350C207E3FEDDC4FC8886D11F3FC91", "documentURL": "https://urlscan.io/", "request": { "url": "https://urlscan.io/", "method": "GET", "headers": { "Upgrade-Insecure-Requests": "1", "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.96 Safari/537.36", "accept-language": "de-DE,de;q=0.9" }, "mixedContentType": "none", "initialPriority": "VeryHigh", "referrerPolicy": "strict-origin-when-cross-origin", "isSameSite": true }, "timestamp": 28691252.990895, "wallTime": 1692354482.664876, "initiator": { "type": "other" }, "redirectHasExtraInfo": false, "type": "Document", "frameId": "E7E7F995A2533610A262A45956F275B4", "hasUserGesture": false, "primaryRequest": true }, "response": { "encodedDataLength": 10743, "dataLength": 49220, "requestId": "BC350C207E3FEDDC4FC8886D11F3FC91", "type": "Document", "response": { "url": "https://urlscan.io/", "status": 200, "statusText": "", "headers": { "cache-control": "public, max-age=10", "content-encoding": "gzip", "content-security-policy": "default-src 'self' data: ; script-src 'self' data: developers.google.com www.google.com www.gstatic.com https://js.hs-scripts.com https://js.hsleadflows.net https://js.hs-banner.com https://js.hsadspixel.net https://js.hubspotfeedback.com https://js.usemessages.com https://js.hs-analytics.net https://js.hscollectedforms.net https://js.hsforms.net https://js-na1.hs-scripts.com https://forms.hsforms.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com www.google.com; img-src * data: *.hubspot.com cdn2.hubspot.net forms.hsforms.com; font-src 'self' fonts.gstatic.com; child-src 'self' app.hubspot.com forms.hsforms.com js.hsadspixel.net js.hscollectedforms.net js.usemessages.com; frame-src https://www.google.com/recaptcha/ *.hubspot.com forms.hsforms.com js.hsadspixel.net js.hscollectedforms.net js.usemessages.com; form-action 'self' forms.hsforms.com forms.hubspot.com; connect-src 'self' *.hubspot.com api.hubapi.com js.usemessages.com js.hsleadflows.net js.hs-banner.com js.hubspotfeedback.com js.hsadspixel.net js.hs-analytics.net js.hs-scripts.com forms.hsforms.com; upgrade-insecure-requests; frame-ancestors 'none'", "content-type": "text/html; charset=utf-8", "date": "Fri, 18 Aug 2023 10:28:06 GMT", "etag": "W/\"c044-EERqXa6ZZucJalKHrZnPzIgYB7I\"", "referrer-policy": "unsafe-url", "server": "nginx", "strict-transport-security": "max-age=63072000; includeSubdomains; preload", "x-content-type-options": "nosniff", "x-frame-options": "DENY", "x-proxy-cache": "HIT", "x-robots-tag": "all", "x-xss-protection": "0" }, "mimeType": "text/html", "remoteIPAddress": "49.12.22.106", "remotePort": 443, "encodedDataLength": 1136, "timing": { "requestTime": 28691252.991483, "proxyStart": -1, "proxyEnd": -1, "dnsStart": 0.278, "dnsEnd": 6.778, "connectStart": 6.778, "connectEnd": 3779.833, "sslStart": 3770.768, "sslEnd": 3779.827, "workerStart": -1, "workerReady": -1, "workerFetchStart": -1, "workerRespondWithSettled": -1, "sendStart": 3780.262, "sendEnd": 3780.341, "pushStart": 0, "pushEnd": 0, "receiveHeadersStart": 3790.027, "receiveHeadersEnd": 3790.149 }, "responseTime": 1692354486455.515, "protocol": "h2", "alternateProtocolUsage": "unspecifiedReason", "securityState": "secure", "securityDetails": { "protocol": "TLS 1.3", "keyExchange": "", "keyExchangeGroup": "X25519", "cipher": "AES_128_GCM", "certificateId": 0, "subjectName": "urlscan.io", "sanList": [ "*.urlscan.com", "*.urlscan.io", "*.urlscan.net", "urlscan.com", "urlscan.io" ], "issuer": "R3", "validFrom": 1688035667, "validTo": 1695811666, "signedCertificateTimestampList": [], "certificateTransparencyCompliance": "unknown", "serverSignatureAlgorithm": 1027, "encryptedClientHello": false }, "securityHeaders": [ { "name": "Content-Security-Policy", "value": "default-src 'self' data: ; script-src 'self' data: developers.google.com www.google.com www.gstatic.com https://js.hs-scripts.com https://js.hsleadflows.net https://js.hs-banner.com https://js.hsadspixel.net https://js.hubspotfeedback.com https://js.usemessages.com https://js.hs-analytics.net https://js.hscollectedforms.net https://js.hsforms.net https://js-na1.hs-scripts.com https://forms.hsforms.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com www.google.com; img-src * data: *.hubspot.com cdn2.hubspot.net forms.hsforms.com; font-src 'self' fonts.gstatic.com; child-src 'self' app.hubspot.com forms.hsforms.com js.hsadspixel.net js.hscollectedforms.net js.usemessages.com; frame-src https://www.google.com/recaptcha/ *.hubspot.com forms.hsforms.com js.hsadspixel.net js.hscollectedforms.net js.usemessages.com; form-action 'self' forms.hsforms.com forms.hubspot.com; connect-src 'self' *.hubspot.com api.hubapi.com js.usemessages.com js.hsleadflows.net js.hs-banner.com js.hubspotfeedback.com js.hsadspixel.net js.hs-analytics.net js.hs-scripts.com forms.hsforms.com; upgrade-insecure-requests; frame-ancestors 'none'" }, { "name": "Strict-Transport-Security", "value": "max-age=63072000; includeSubdomains; preload" }, { "name": "X-Content-Type-Options", "value": "nosniff" }, { "name": "X-Frame-Options", "value": "DENY" }, { "name": "X-Xss-Protection", "value": "0" } ] }, "hasExtraInfo": true, "hash": "b60065dd59ea4049235123c78f05e7a3a27f4d2a6b8a26d379ea3b9fe9ac64d2", "size": 49218, "asn": { "ip": "49.12.22.106", "asn": "24940", "country": "DE", "description": "HETZNER-AS, DE", "route": "49.12.0.0/16", "name": "HETZNER-AS" }, "geoip": { "country": "DE", "region": "", "timezone": "Europe/Berlin", "city": "", "ll": [ 51.2993, 9.491 ], "country_name": "Germany", "metro": 0 }, "rdns": { "ip": "49.12.22.106", "ptr": "urlscan.io" } } }, { "request": { "requestId": "90643.2", "loaderId": "BC350C207E3FEDDC4FC8886D11F3FC91", "documentURL": "https://urlscan.io/", "request": { "url": "https://urlscan.io/vendor/bootstrap/fonts/glyphicons-halflings-regular.woff2", "method": "GET", "headers": { "Referer": "https://urlscan.io/", "Origin": "https://urlscan.io", "accept-language": "de-DE,de;q=0.9", "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.96 Safari/537.36" }, "mixedContentType": "none", "initialPriority": "High", "referrerPolicy": "unsafe-url", "isLinkPreload": true, "isSameSite": true }, "timestamp": 28691256.786679, "wallTime": 1692354486.460695, "initiator": { "type": "parser", "url": "https://urlscan.io/", "lineNumber": 18, "columnNumber": 112 }, "redirectHasExtraInfo": false, "type": "Font", "frameId": "E7E7F995A2533610A262A45956F275B4", "hasUserGesture": false }, "response": { "encodedDataLength": 19207, "dataLength": 18028, "requestId": "90643.2", "type": "Font", "response": { "url": "https://urlscan.io/vendor/bootstrap/fonts/glyphicons-halflings-regular.woff2", "status": 200, "statusText": "", "headers": { "date": "Fri, 18 Aug 2023 10:28:06 GMT", "content-security-policy": "default-src 'self' data: ; script-src 'self' data: developers.google.com www.google.com www.gstatic.com https://js.hs-scripts.com https://js.hsleadflows.net https://js.hs-banner.com https://js.hsadspixel.net https://js.hubspotfeedback.com https://js.usemessages.com https://js.hs-analytics.net https://js.hscollectedforms.net https://js.hsforms.net https://js-na1.hs-scripts.com https://forms.hsforms.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com www.google.com; img-src * data: *.hubspot.com cdn2.hubspot.net forms.hsforms.com; font-src 'self' fonts.gstatic.com; child-src 'self' app.hubspot.com forms.hsforms.com js.hsadspixel.net js.hscollectedforms.net js.usemessages.com; frame-src https://www.google.com/recaptcha/ *.hubspot.com forms.hsforms.com js.hsadspixel.net js.hscollectedforms.net js.usemessages.com; form-action 'self' forms.hsforms.com forms.hubspot.com; connect-src 'self' *.hubspot.com api.hubapi.com js.usemessages.com js.hsleadflows.net js.hs-banner.com js.hubspotfeedback.com js.hsadspixel.net js.hs-analytics.net js.hs-scripts.com forms.hsforms.com; upgrade-insecure-requests; frame-ancestors 'none'", "x-content-type-options": "nosniff", "strict-transport-security": "max-age=63072000; includeSubdomains; preload", "content-length": "18028", "x-xss-protection": "0", "referrer-policy": "unsafe-url", "last-modified": "Fri, 11 Aug 2023 11:54:40 GMT", "server": "nginx", "etag": "W/\"466c-189e472dc00\"", "x-frame-options": "DENY", "content-type": "font/woff2", "cache-control": "public, max-age=3600", "accept-ranges": "bytes", "x-robots-tag": "all", "x-proxy-cache": "HIT" }, "mimeType": "font/woff2", "remoteIPAddress": "49.12.22.106", "remotePort": 443, "encodedDataLength": 1152, "timing": { "requestTime": 28691256.786978, "proxyStart": -1, "proxyEnd": -1, "dnsStart": -1, "dnsEnd": -1, "connectStart": -1, "connectEnd": -1, "sslStart": -1, "sslEnd": -1, "workerStart": -1, "workerReady": -1, "workerFetchStart": -1, "workerRespondWithSettled": -1, "sendStart": 0.341, "sendEnd": 0.503, "pushStart": 0, "pushEnd": 0, "receiveHeadersStart": 8.518, "receiveHeadersEnd": 8.778 }, "responseTime": 1692354486469.528, "protocol": "h2", "alternateProtocolUsage": "unspecifiedReason", "securityState": "secure", "securityDetails": { "protocol": "TLS 1.3", "keyExchange": "", "keyExchangeGroup": "X25519", "cipher": "AES_128_GCM", "certificateId": 0, "subjectName": "urlscan.io", "sanList": [ "*.urlscan.com", "*.urlscan.io", "*.urlscan.net", "urlscan.com", "urlscan.io" ], "issuer": "R3", "validFrom": 1688035667, "validTo": 1695811666, "signedCertificateTimestampList": [], "certificateTransparencyCompliance": "unknown", "serverSignatureAlgorithm": 1027, "encryptedClientHello": false }, "securityHeaders": [ { "name": "Content-Security-Policy", "value": "default-src 'self' data: ; script-src 'self' data: developers.google.com www.google.com www.gstatic.com https://js.hs-scripts.com https://js.hsleadflows.net https://js.hs-banner.com https://js.hsadspixel.net https://js.hubspotfeedback.com https://js.usemessages.com https://js.hs-analytics.net https://js.hscollectedforms.net https://js.hsforms.net https://js-na1.hs-scripts.com https://forms.hsforms.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com www.google.com; img-src * data: *.hubspot.com cdn2.hubspot.net forms.hsforms.com; font-src 'self' fonts.gstatic.com; child-src 'self' app.hubspot.com forms.hsforms.com js.hsadspixel.net js.hscollectedforms.net js.usemessages.com; frame-src https://www.google.com/recaptcha/ *.hubspot.com forms.hsforms.com js.hsadspixel.net js.hscollectedforms.net js.usemessages.com; form-action 'self' forms.hsforms.com forms.hubspot.com; connect-src 'self' *.hubspot.com api.hubapi.com js.usemessages.com js.hsleadflows.net js.hs-banner.com js.hubspotfeedback.com js.hsadspixel.net js.hs-analytics.net js.hs-scripts.com forms.hsforms.com; upgrade-insecure-requests; frame-ancestors 'none'" }, { "name": "Strict-Transport-Security", "value": "max-age=63072000; includeSubdomains; preload" }, { "name": "X-Content-Type-Options", "value": "nosniff" }, { "name": "X-Frame-Options", "value": "DENY" }, { "name": "X-Xss-Protection", "value": "0" } ] }, "hasExtraInfo": true, "hash": "fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c", "size": 24040, "asn": { "ip": "49.12.22.106", "asn": "24940", "country": "DE", "description": "HETZNER-AS, DE", "route": "49.12.0.0/16", "name": "HETZNER-AS" }, "geoip": { "country": "DE", "region": "", "timezone": "Europe/Berlin", "city": "", "ll": [ 51.2993, 9.491 ], "country_name": "Germany", "metro": 0 }, "rdns": { "ip": "49.12.22.106", "ptr": "urlscan.io" } }, "initiatorInfo": { "url": "https://urlscan.io/", "host": "urlscan.io", "type": "parser" } } ], "cookies": [ { "name": "_GRECAPTCHA", "value": "09AHJ_tr5ckOVI9kqzxws3TAIYBKxE69ENT9IWHqPRKwm6VBV-t8SALyxc78LKid8tNulwUGwPpSGOqCGA1ypACQ0", "domain": "www.google.com", "path": "/recaptcha", "expires": 1707906487.336871, "size": 100, "httpOnly": true, "secure": true, "session": false, "sameSite": "None", "priority": "High", "sameParty": false, "sourceScheme": "Secure", "sourcePort": 443 } ], "console": [ { "message": { "source": "network", "level": "error", "text": "Failed to load resource: the server responded with a status of 403 ()", "timestamp": 1692354486669.71, "url": "https://urlscan.io/user/username/" } } ], "links": [ { "href": "https://securitytrails.com/corp/urlscan?utm_source=urlscan&utm_medium=button&utm_campaign=header", "text": "" }, { "href": "https://tines.io/blog/tines-urlscan-automation/?utm_source=urlscan&utm_medium=sponsorship&utm_campaign=urlscan", "text": "" }, { "href": "https://www.joesecurity.org/?utm_source=urlscan&utm_medium=sponsorship&utm_campaign=urlscan", "text": "" }, { "href": "https://tria.ge/?utm_source=urlscan&utm_medium=sponsor&utm_campaign=2020", "text": "" }, { "href": "https://www.intezer.com/intezer-analyze/?utm_campaign=URLSCAN.IO&utm_source=URLSCAN", "text": "" }, { "href": "https://www.ctm360.com/?utm_campaign=urlscan&utm_source=urlscan", "text": "" }, { "href": "https://www.miltonsecurity.com/?utm_campaign=urlscan&utm_source=urlscan", "text": "" }, { "href": "https://twitter.com/urlscanio", "text": "Follow @urlscanio" }, { "href": "https://www.subscribepage.com/urlscanio", "text": "Newsletter" }, { "href": "https://status.urlscan.io/", "text": "Status Page" } ], "timing": { "beginNavigation": "2023-08-18T10:28:02.660Z", "frameStartedLoading": "2023-08-18T10:28:07.062Z", "frameNavigated": "2023-08-18T10:28:07.156Z", "domContentEventFired": "2023-08-18T10:28:06.653Z", "frameStoppedLoading": "2023-08-18T10:28:07.276Z" }, "globals": [ { "prop": "0", "type": "object" }, { "prop": "1", "type": "object" }, { "prop": "2", "type": "object" }, { "prop": "documentPictureInPicture", "type": "object" }, { "prop": "webpackChunkurlscan_server", "type": "object" }, { "prop": "onSubmit", "type": "function" }, { "prop": "___grecaptcha_cfg", "type": "object" }, { "prop": "grecaptcha", "type": "object" }, { "prop": "__recaptcha_api", "type": "string" }, { "prop": "__google_recaptcha_client", "type": "boolean" }, { "prop": "recaptcha", "type": "object" }, { "prop": "closure_lm_243339", "type": "object" } ], "storages": [ { "origin": "https://urlscan.io", "key": "foo", "value": "bar", "isLocalStorage": true } ], "redirects": [ { "from": "http://urlscan.io/", "to": "https://urlscan.io/", "status": 301 }, { "from": "https://urlscan.io/", "to": "https://urlscan.io/", "initiator": "script" } ] }, "stats": { "resourceStats": [ { "count": 19, "size": 156679, "encodedSize": 157560, "latency": 0, "countries": [ "DE" ], "ips": [ "49.12.22.106", "2a00:1450:4001:827::2003", "2a00:1450:4001:80f::2004" ], "type": "Image", "compression": "1.0", "percentage": 34 }, { "count": 14, "size": 1742101, "encodedSize": 683774, "latency": 0, "countries": [ "DE" ], "ips": [ "2a00:1450:4001:80f::2004", "49.12.22.106", "2a00:1450:4001:827::2003" ], "type": "Script", "compression": "2.5", "percentage": 25 }, { "count": 9, "size": 166188, "encodedSize": 168480, "latency": 0, "countries": [ "DE" ], "ips": [ "49.12.22.106", "2a00:1450:4001:828::2003" ], "type": "Font", "compression": "1.0", "percentage": 16 }, { "count": 5, "size": 269951, "encodedSize": 75551, "latency": 0, "countries": [ "DE" ], "ips": [ "49.12.22.106", "2a00:1450:4001:827::200a", "2a00:1450:4001:827::2003" ], "type": "Stylesheet", "compression": "3.6", "percentage": 9 }, { "count": 3, "size": 25108, "encodedSize": 7379, "latency": 0, "countries": [ "DE" ], "ips": [ "49.12.22.106" ], "type": "Fetch", "compression": "3.4", "percentage": 5 }, { "count": 3, "size": 112484, "encodedSize": 43702, "latency": 0, "countries": [ "DE" ], "ips": [ "49.12.22.106", "2a00:1450:4001:80f::2004" ], "type": "Document", "compression": "2.6", "percentage": 5 }, { "count": 1, "size": 40642, "encodedSize": 24610, "latency": 0, "countries": [ "DE" ], "ips": [ "2a00:1450:4001:80f::2004" ], "type": "XHR", "compression": "1.7", "percentage": 1 }, { "count": 1, "size": 102, "encodedSize": 134, "latency": 0, "countries": [ "DE" ], "ips": [ "2a00:1450:4001:80f::2004" ], "type": "Other", "compression": "0.8", "percentage": 1 } ], "protocolStats": [ { "count": 40, "size": 1334198, "encodedSize": 623256, "ips": [ "49.12.22.106", "2a00:1450:4001:80f::2004", "2a00:1450:4001:827::200a", "2a00:1450:4001:828::2003", "2a00:1450:4001:827::2003" ], "countries": [ "DE" ], "securityState": {}, "protocol": "h2" }, { "count": 15, "size": 1179057, "encodedSize": 537934, "ips": [ "2a00:1450:4001:827::2003", "2a00:1450:4001:80f::2004", "2a00:1450:4001:828::2003" ], "countries": [ "DE" ], "securityState": {}, "protocol": "h3" } ], "tlsStats": [ { "count": 55, "size": 2513255, "encodedSize": 1161190, "ips": [ "49.12.22.106", "2a00:1450:4001:80f::2004", "2a00:1450:4001:827::200a", "2a00:1450:4001:828::2003", "2a00:1450:4001:827::2003" ], "countries": [ "DE" ], "protocols": { "TLS 1.3 / / AES_128_GCM": 40, "QUIC / / AES_128_GCM": 15 }, "securityState": "secure" } ], "serverStats": [ { "count": 31, "size": 709147, "encodedSize": 300104, "ips": [ "49.12.22.106" ], "countries": [ "DE" ], "server": "nginx" }, { "count": 17, "size": 1656869, "encodedSize": 761526, "ips": [ "2a00:1450:4001:828::2003", "2a00:1450:4001:827::2003" ], "countries": [ "DE" ], "server": "sffe" }, { "count": 6, "size": 144943, "encodedSize": 98695, "ips": [ "2a00:1450:4001:80f::2004" ], "countries": [ "DE" ], "server": "GSE" }, { "count": 1, "size": 2296, "encodedSize": 865, "ips": [ "2a00:1450:4001:827::200a" ], "countries": [ "DE" ], "server": "ESF" } ], "domainStats": [ { "count": 31, "ips": [ "49.12.22.106" ], "domain": "urlscan.io", "size": 709147, "encodedSize": 300104, "countries": [ "DE" ], "index": 0, "initiators": [ "urlscan.io" ], "redirects": 0 }, { "count": 9, "ips": [ "2a00:1450:4001:827::2003" ], "domain": "www.gstatic.com", "size": 1508709, "encodedSize": 612253, "countries": [ "DE" ], "index": 32, "initiators": [ "www.google.com", "www.gstatic.com" ], "redirects": 0 }, { "count": 8, "ips": [ "2a00:1450:4001:828::2003" ], "domain": "fonts.gstatic.com", "size": 148160, "encodedSize": 149273, "countries": [ "DE" ], "index": 26, "initiators": [ "fonts.googleapis.com", "www.google.com" ], "redirects": 0 }, { "count": 6, "ips": [ "2a00:1450:4001:80f::2004" ], "domain": "www.google.com", "size": 144943, "encodedSize": 98695, "countries": [ "DE" ], "index": 6, "initiators": [ "urlscan.io", "www.gstatic.com", "www.google.com" ], "redirects": 0 }, { "count": 1, "ips": [ "2a00:1450:4001:827::200a" ], "domain": "fonts.googleapis.com", "size": 2296, "encodedSize": 865, "countries": [ "DE" ], "index": 25, "initiators": [ "urlscan.io" ], "redirects": 0 } ], "regDomainStats": [ { "count": 31, "ips": [ "49.12.22.106" ], "regDomain": "urlscan.io", "size": 709147, "encodedSize": 300104, "countries": [], "index": 0, "subDomains": [ { "domain": "", "country": "DE" } ], "redirects": 0 }, { "count": 17, "ips": [ "2a00:1450:4001:828::2003", "2a00:1450:4001:827::2003" ], "regDomain": "gstatic.com", "size": 1656869, "encodedSize": 761526, "countries": [], "index": 26, "subDomains": [ { "domain": "fonts", "country": "DE" }, { "domain": "www", "country": "DE" } ], "redirects": 0 }, { "count": 6, "ips": [ "2a00:1450:4001:80f::2004" ], "regDomain": "google.com", "size": 144943, "encodedSize": 98695, "countries": [], "index": 6, "subDomains": [ { "domain": "www", "country": "DE" } ], "redirects": 0 }, { "count": 1, "ips": [ "2a00:1450:4001:827::200a" ], "regDomain": "googleapis.com", "size": 2296, "encodedSize": 865, "countries": [], "index": 25, "subDomains": [ { "domain": "fonts", "country": "DE" } ], "redirects": 0 } ], "secureRequests": 55, "securePercentage": 100, "IPv6Percentage": 80, "uniqCountries": 1, "totalLinks": 10, "malicious": 0, "adBlocked": 0, "ipStats": [ { "requests": 31, "domains": [ "urlscan.io" ], "ip": "49.12.22.106", "asn": { "ip": "49.12.22.106", "asn": "24940", "country": "DE", "description": "HETZNER-AS, DE", "route": "49.12.0.0/16", "name": "HETZNER-AS" }, "dns": {}, "geoip": { "country": "DE", "region": "", "timezone": "Europe/Berlin", "city": "", "ll": [ 51.2993, 9.491 ], "country_name": "Germany", "metro": 0 }, "size": 709147, "encodedSize": 300104, "countries": [ "DE" ], "index": 0, "ipv6": false, "redirects": 0, "count": null, "rdns": { "ip": "49.12.22.106", "ptr": "urlscan.io" } }, { "requests": 6, "domains": [ "www.google.com" ], "ip": "2a00:1450:4001:80f::2004", "asn": { "ip": "2a00:1450:4001:80f::2004", "asn": "15169", "country": "US", "description": "GOOGLE, US", "route": "2a00:1450:4001::/48", "name": "GOOGLE" }, "dns": {}, "geoip": { "country": "DE", "region": "HE", "timezone": "Europe/Berlin", "city": "Frankfurt am Main", "ll": [ 50.1188, 8.6843 ], "country_name": "Germany", "metro": 0 }, "size": 144943, "encodedSize": 98695, "countries": [ "DE" ], "index": 6, "ipv6": true, "redirects": 0, "count": null }, { "requests": 1, "domains": [ "fonts.googleapis.com" ], "ip": "2a00:1450:4001:827::200a", "asn": { "ip": "2a00:1450:4001:827::200a", "asn": "15169", "country": "US", "description": "GOOGLE, US", "route": "2a00:1450:4001::/48", "name": "GOOGLE" }, "dns": {}, "geoip": { "country": "DE", "region": "HE", "timezone": "Europe/Berlin", "city": "Frankfurt am Main", "ll": [ 50.1188, 8.6843 ], "country_name": "Germany", "metro": 0 }, "size": 2296, "encodedSize": 865, "countries": [ "DE" ], "index": 25, "ipv6": true, "redirects": 0, "count": null }, { "requests": 8, "domains": [ "fonts.gstatic.com" ], "ip": "2a00:1450:4001:828::2003", "asn": { "ip": "2a00:1450:4001:828::2003", "asn": "15169", "country": "US", "description": "GOOGLE, US", "route": "2a00:1450:4001::/48", "name": "GOOGLE" }, "dns": {}, "geoip": { "country": "DE", "region": "HE", "timezone": "Europe/Berlin", "city": "Frankfurt am Main", "ll": [ 50.1188, 8.6843 ], "country_name": "Germany", "metro": 0 }, "size": 148160, "encodedSize": 149273, "countries": [ "DE" ], "index": 26, "ipv6": true, "redirects": 0, "count": null }, { "requests": 9, "domains": [ "www.gstatic.com" ], "ip": "2a00:1450:4001:827::2003", "asn": { "ip": "2a00:1450:4001:827::2003", "asn": "15169", "country": "US", "description": "GOOGLE, US", "route": "2a00:1450:4001::/48", "name": "GOOGLE" }, "dns": {}, "geoip": { "country": "DE", "region": "HE", "timezone": "Europe/Berlin", "city": "Frankfurt am Main", "ll": [ 50.1188, 8.6843 ], "country_name": "Germany", "metro": 0 }, "size": 1508709, "encodedSize": 612253, "countries": [ "DE" ], "index": 32, "ipv6": true, "redirects": 0, "count": null } ] }, "meta": { "processors": { "umbrella": { "data": [ { "hostname": "urlscan.io", "rank": 85248 }, { "hostname": "www.google.com", "rank": 3 }, { "hostname": "fonts.googleapis.com", "rank": 73 } ] }, "geoip": { "data": [ { "ip": "49.12.22.106", "geoip": { "country": "DE", "region": "", "timezone": "Europe/Berlin", "city": "", "ll": [ 51.2993, 9.491 ], "country_name": "Germany", "metro": 0 } }, { "ip": "2a00:1450:4001:80f::2004", "geoip": { "country": "DE", "region": "HE", "timezone": "Europe/Berlin", "city": "Frankfurt am Main", "ll": [ 50.1188, 8.6843 ], "country_name": "Germany", "metro": 0 } }, { "ip": "2a00:1450:4001:827::200a", "geoip": { "country": "DE", "region": "HE", "timezone": "Europe/Berlin", "city": "Frankfurt am Main", "ll": [ 50.1188, 8.6843 ], "country_name": "Germany", "metro": 0 } }, { "ip": "2a00:1450:4001:828::2003", "geoip": { "country": "DE", "region": "HE", "timezone": "Europe/Berlin", "city": "Frankfurt am Main", "ll": [ 50.1188, 8.6843 ], "country_name": "Germany", "metro": 0 } }, { "ip": "2a00:1450:4001:827::2003", "geoip": { "country": "DE", "region": "HE", "timezone": "Europe/Berlin", "city": "Frankfurt am Main", "ll": [ 50.1188, 8.6843 ], "country_name": "Germany", "metro": 0 } } ] }, "rdns": { "data": [ { "ip": "49.12.22.106", "ptr": "urlscan.io" } ] }, "asn": { "data": [ { "ip": "49.12.22.106", "asn": "24940", "country": "DE", "registrar": "ripencc", "date": "2002-06-03", "description": "HETZNER-AS, DE", "route": "49.12.0.0/16", "name": "HETZNER-AS" }, { "ip": "2a00:1450:4001:80f::2004", "asn": "15169", "country": "US", "description": "GOOGLE, US", "route": "2a00:1450:4001::/48", "name": "GOOGLE" }, { "ip": "2a00:1450:4001:827::200a", "asn": "15169", "country": "US", "description": "GOOGLE, US", "route": "2a00:1450:4001::/48", "name": "GOOGLE" }, { "ip": "2a00:1450:4001:828::2003", "asn": "15169", "country": "US", "description": "GOOGLE, US", "route": "2a00:1450:4001::/48", "name": "GOOGLE" }, { "ip": "2a00:1450:4001:827::2003", "asn": "15169", "country": "US", "description": "GOOGLE, US", "route": "2a00:1450:4001::/48", "name": "GOOGLE" } ] }, "wappa": { "data": [ { "confidence": [ { "confidence": 100, "pattern": "]* href=[^>]*?bootstrap(?:[^>]*?([0-9a-fA-F]{7,40}|[\\d]+(?:.[\\d]+(?:.[\\d]+)?)?)|)[^>]*?(?:\\.min)?\\.css" }, { "confidence": 100, "pattern": "bootstrap(?:[^>]*?([0-9a-fA-F]{7,40}|[\\d]+(?:.[\\d]+(?:.[\\d]+)?)?)|)[^>]*?(?:\\.min)?\\.js" } ], "confidenceTotal": 100, "app": "Bootstrap", "icon": "Bootstrap.png", "website": "https://getbootstrap.com", "categories": [ { "name": "Web Frameworks", "priority": 7 } ] }, { "confidence": [ { "confidence": 100, "pattern": "]* href=[^>]+fonts\\.(?:googleapis|google)\\.com" } ], "confidenceTotal": 100, "app": "Google Font API", "icon": "Google Font API.png", "website": "http://google.com/fonts", "categories": [ { "name": "Font Scripts", "priority": 9 } ] }, { "confidence": [ { "confidence": 100, "pattern": "/recaptcha/api\\.js" } ], "confidenceTotal": 100, "app": "reCAPTCHA", "icon": "reCAPTCHA.png", "website": "https://www.google.com/recaptcha/", "categories": [ { "name": "Captchas", "priority": 9 } ] } ] } } }, "task": { "uuid": "68e26c59-2eae-437b-aeb1-cf750fafe7d7", "time": "2023-08-18T10:27:47.342Z", "url": "https://urlscan.io/", "visibility": "public", "method": "api", "source": "d1675d21", "tags": [], "reportURL": "https://urlscan.io/result/68e26c59-2eae-437b-aeb1-cf750fafe7d7/", "screenshotURL": "https://urlscan.io/screenshots/68e26c59-2eae-437b-aeb1-cf750fafe7d7.png", "domURL": "https://urlscan.io/dom/68e26c59-2eae-437b-aeb1-cf750fafe7d7/" }, "page": { "url": "https://urlscan.io/", "domain": "urlscan.io", "country": "DE", "city": "", "server": "nginx", "ip": "49.12.22.106", "asn": "AS24940", "asnname": "HETZNER-AS, DE" }, "lists": { "ips": [ "2a00:1450:4001:827::2003", "2a00:1450:4001:828::2003", "2a00:1450:4001:827::200a", "2a00:1450:4001:80f::2004", "49.12.22.106" ], "countries": [ "DE" ], "asns": [ "15169", "15169", "15169", "15169", "24940" ], "domains": [ "urlscan.io", "www.gstatic.com", "fonts.gstatic.com", "www.google.com", "fonts.googleapis.com" ], "servers": [ "nginx", "sffe", "GSE", "ESF" ], "urls": [ "https://urlscan.io/", "https://urlscan.io/vendor/bootstrap/fonts/glyphicons-halflings-regular.woff2", "https://urlscan.io/vendor/bootstrap/css/bootstrap.min.css", "https://urlscan.io/vendor/flag-icon-css/css/flag-icon.min.css", "https://urlscan.io/img/urlscan_256.png", "https://urlscan.io/img/securitytrails-rf.png", "https://www.google.com/recaptcha/api.js", "https://urlscan.io/img/loading.svg", "https://urlscan.io/img/securitytrails.png", "https://urlscan.io/img/tines_logo.png", "https://urlscan.io/img/joesecurity.svg", "https://urlscan.io/img/hatching.svg", "https://urlscan.io/img/intezer.png", "https://urlscan.io/img/ctm360.png", "https://urlscan.io/img/miltonsecurity.png", "https://urlscan.io/js/935.6ffb44e4247c191833df.js", "https://urlscan.io/js/755.52f8fd33e38e3182e860.js", "https://urlscan.io/js/875.2cbe62c6f5fc9d20cd21.js", "https://urlscan.io/js/206.0ced6b44294d7c337f71.js", "https://urlscan.io/js/246.73acb5c3173b4acb3712.js", "https://urlscan.io/js/910.055aeff77afe5ea0bf04.js", "https://urlscan.io/js/710.52aef988d6415d6e3e3b.js", "https://urlscan.io/js/index.5ec26f9dc85bcf1764e6.js", "https://urlscan.io/js/784.9545db3228c71536d892.js", "https://urlscan.io/js/app.bc3e6660af305ff609f8.js", "https://fonts.googleapis.com/css?family=Lato:400,700,400italic&display=swap", "https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2", "https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2", "https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2", "https://urlscan.io/json/live/", "https://urlscan.io/user/username/", "https://urlscan.io/stats", "https://www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/recaptcha__de.js", "https://urlscan.io/vendor/flag-icon-css/flags/4x3/us.svg", "https://urlscan.io/vendor/flag-icon-css/flags/4x3/fr.svg", "https://urlscan.io/vendor/flag-icon-css/flags/4x3/nl.svg", "https://urlscan.io/vendor/flag-icon-css/flags/4x3/de.svg", "https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdpjT8UAAAAAG_0TXCcMTAKBSnUBiU4M8YfQtvM&co=aHR0cHM6Ly91cmxzY2FuLmlvOjQ0Mw..&hl=de&v=QybaJej5brGL8d7EvWmfKMZU&size=invisible&cb=rev9qybmprng", "https://www.gstatic.com/recaptcha/releases/QybaJej5brGL8d7EvWmfKMZU/styles__ltr.css", "https://www.gstatic.com/recaptcha/api2/logo_48.png", "https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2", "https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2", "https://www.google.com/recaptcha/api2/webworker.js?hl=de&v=QybaJej5brGL8d7EvWmfKMZU", "https://www.google.com/recaptcha/api2/bframe?hl=de&v=QybaJej5brGL8d7EvWmfKMZU&k=6LdpjT8UAAAAAG_0TXCcMTAKBSnUBiU4M8YfQtvM", "https://www.google.com/recaptcha/api2/reload?k=6LdpjT8UAAAAAG_0TXCcMTAKBSnUBiU4M8YfQtvM", "https://www.gstatic.com/recaptcha/api2/refresh_2x.png", "https://www.gstatic.com/recaptcha/api2/audio_2x.png", "https://www.gstatic.com/recaptcha/api2/info_2x.png", "https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2", "https://www.google.com/recaptcha/api2/payload?p=06ADUVZwDGPlzKPPGhXOD0MYnSqtx5HN2zwZMj9jbQFxlRQ7avTsHp1Gr55KqrqDWVbLrXsRd4aVmOeBYJli-MRyqvwAcO5Zc6NvZVvdmQCP6Pqa661ngGLsCZbx_DFZGtM5cDbFAWixEPNMqXrphCihdz8J1bqs7ENGtH3We6YdR5y3-GhXPCv5w7dnj-pBoKBgCsBpg3oEdfB2XHurZ8r3b8YNhgg0lYRw&k=6LdpjT8UAAAAAG_0TXCcMTAKBSnUBiU4M8YfQtvM" ], "linkDomains": [ "securitytrails.com", "tines.io", "www.joesecurity.org", "tria.ge", "www.intezer.com", "www.ctm360.com", "www.miltonsecurity.com", "twitter.com", "www.subscribepage.com", "status.urlscan.io" ], "certificates": [ { "subjectName": "urlscan.io", "issuer": "R3", "validFrom": 1688035667, "validTo": 1695811666 }, { "subjectName": "www.google.com", "issuer": "GTS CA 1C3", "validFrom": 1690791778, "validTo": 1698049377 }, { "subjectName": "upload.video.google.com", "issuer": "GTS CA 1C3", "validFrom": 1690791739, "validTo": 1698049338 }, { "subjectName": "*.gstatic.com", "issuer": "GTS CA 1C3", "validFrom": 1690791738, "validTo": 1698049337 }, { "subjectName": "*.google.com", "issuer": "GTS CA 1C3", "validFrom": 1690791404, "validTo": 1698049003 } ], "hashes": [ "b60065dd59ea4049235123c78f05e7a3a27f4d2a6b8a26d379ea3b9fe9ac64d2", "fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c", "fa00e1049bcb2085317320e5818f2564985f1c90dcb60ed7406c1d0a2bacad03", "1108d9c16e258ebb7d76ca276f25feb22ea46f182455d7b8ed3cbd1507a19d48", "48cdea2dd75a0def891f0d5a2b3e6c611cfe0985125ac60915f3da7cacb2cd2b", "89a3fc351bb8fbc4cc0cc8cf361a09368ce57e32fbb9839d259e2424adf681de", "45a66a05249a9a90553e6173c2b862904c26c181a906ff76408b39c3ba7eb572", "0a9b13d99a5a6965e08e1cb4017a8820821d28434739dd6be36b0c940f473510", "77480580a4975cf9e8c40a82e8caf16d9a9b7e4d2e6d4d8b2b8a8c3440b43c71", "7968267c3ca3b2173dd8ab2f6677a0a6025c6028dc9397c693f7e56cc9f97e6c", "20641c3767fe3f16bdaa86aa709d08b3699147e3869698b6ba599e0400503fc8", "d364f7f6798ad6f2ca13359da0a9d8672c830a29719a5efaebb792bc41305a7a", "bcff11b6ad3cd11120db704ea323f80a54354e96b9857916524ff1cf7b437347", "078d3b02c7faad046214cc9d69cde27581aa933f3cd0d3fad0172a023e4faf1f", "f5ed2ae8a842d23caed7ebfaf77e7b2d0cadb89f45cb6cfe3c5d5bc67b3d2206", "20e2833200d259f5cd7d45e3794c15ed3f52582e64845f7e030eff26b5eac894", "186d7b0dad4db61a6ddf1cc72b451e53bf358b028ee993b0a4d6813162d3ac27", "530c27253a04fcdf93eaeefacff59f479c16fc238b0eaa0d33b447297c35f1f3", "3a36452a9f4500e969a785847a54b82f562ee4afa56edb2b573d8832aa1e2f3e", "bf90bfefd38fad9c266f7bcca9c79a88844510d017d23593e8207fce79cb6414", "4240ec9acca1e17575f95253d4c824c6eb025d19f5e90401bf0ede21022833c4", "45fd454a50fc61fc7381fecf0206d0b7ab57a398dbd49a884be4353b24fefdba", "8a2b43e673ffebc2feb168d3b9bd883b241dfedf6257f6dfafded6199e103d42", "a76ad9ae1c943658b10e357a402e331f68181b1cef059f749595a718011df7c2", "29364e3e4ca6be8e93feed822c55b33c5a7387ae53dcb7a5157b86df2f2ecadb", "2fa9fe860db91cd61cc3f22128da83ad23545a3e213dd569f172c5174e7bfc58", "918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537", "bca1d88ada544d9c80872d4da27133fab6d347361fa26e932b47ec9559088fd0", "c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49", "f7148cd5855071efe0edf83eb709e2ca8cb9d7ce26c2c3fc3bf2beb671c86a25", "86e91e6c8ac39ebad1fa2b5ad4b38073fbd5b832891acf93cedf409adc2e0a5d", "f8bed1d201aa9dd956adccf9a51c979f176bdb77273afa1e103c01b074cd21c0", "e6a162cb53d79e0ee3a6d020bc72c80cde5644ffbeb9913b96c3c4833a4a65d6", "6d053f4d6e1412745749fc8d981833d6d7f8f19b72042d1a65e3356ca29a7ef7", "4e8c446e032572a2e74d1fdccec9a3ae93d66dc24952ed2f1fe5bdab6fef5702", "8f7bff63589346e93733c01f1f18c5a11e8c94911253bcf852f173a933cd928e", "25b2cd9911e66c9ddbf617979df54a9ddaae407337b0348e0e9631e1d6738869", "f699f2ab580329366f51f9d8930d3d20d7e77185325d1cbe1f85e4453d0e43a0", "952833e41ba7a4b64c31a2d7b07dde81bf5bbacf5cbb967821cfe459d0c4a0d8", "1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a", "3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc", "5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7", "baf20988174c478eda15c85d7fc23ab8079c989812ea8379011945a1bea61dec", "e14544f76ec44d80eb41577b00069c26ed2bcbd7904caa8413c3e0dd6f8ebfc5", "159f46a3daa9127779479b854563d93d79250dd541351b01c28f26ecae1dacde", "44b988703019cd6bfa86c91840fecf2a42b611b364e3eea2f4eb63bf62714e98", "89c62095126fca89ea1511cf35b49b8306162946b0c26d6f60c5506c51d85992", "55eaf62cb05da20088dc12b39d7d254d046cb1fd61ddf3ae641f1439efd0a5ee", "c912a9ce0c3122d4b2b29ad26bfe06b0390d1a5bdaa5d6128692c0befd1dfbbd", "2ab2615ff4710af8771a357de5cdb7184ab7f76b1d7533108c2e67790d424797" ] }, "verdicts": { "overall": { "score": -50, "categories": [], "brands": [], "tags": [], "malicious": false, "hasVerdicts": true }, "urlscan": { "score": -50, "categories": [], "brands": [], "tags": [], "malicious": false, "hasVerdicts": true }, "engines": { "score": 0, "categories": [], "enginesTotal": 0, "maliciousTotal": 0, "benignTotal": 0, "maliciousVerdicts": [], "benignVerdicts": [], "malicious": false, "hasVerdicts": false }, "community": { "score": 0, "categories": [], "brands": [], "votesTotal": 0, "votesMalicious": 0, "votesBenign": 0, "malicious": false, "hasVerdicts": false } }, "submitter": { "country": "US" }, "scanner": { "country": "us" } } } } } } } }, "/screenshots/{scanId}.png": { "get": { "operationId": "getScreenshot", "tags": [ "Scanning" ], "summary": "Screenshot", "description": "Use the scan UUID to retrieve the screenshot for a scan once the scan has finished.", "parameters": [ { "in": "path", "name": "scanId", "schema": { "type": "string", "format": "uuid" }, "required": true, "description": "UUID of scan result" } ], "responses": { "200": { "description": "Successful response", "content": { "image/png": { "schema": { "type": "string", "format": "binary" } } } } } } }, "/dom/{scanId}/": { "get": { "operationId": "getDom", "tags": [ "Scanning" ], "summary": "DOM", "description": "Use the scan UUID to retrieve the DOM snapshot for a scan once the scan has finished.", "parameters": [ { "in": "path", "name": "scanId", "schema": { "type": "string", "format": "uuid" }, "required": true, "description": "UUID of scan result" } ], "responses": { "200": { "description": "DOM snapshot of the page", "content": { "text/plain": { "schema": { "type": "string" } } } } } } }, "/responses/{fileHash}/": { "get": { "operationId": "getResponse", "tags": [ "Scanning" ], "summary": "Response", "description": "Get a (Script|Document|Fetch|XHR) response in plain text format by SHA256 hash. Note that this endpoint returns the content as `text/plain`. If you need to download a binary file (like a ZIP file, etc.), use the [Download a file](../files/downloadfile) endpoint instead.", "parameters": [ { "in": "path", "name": "fileHash", "schema": { "type": "string" }, "required": true, "description": "SHA256 hash of response" } ], "responses": { "200": { "description": "Response content in plain text format", "content": { "text/plain": { "schema": { "type": "string" } } } } } } }, "/api/v1/result/{scanId}/visibility/": { "put": { "operationId": "updateResultVisibility", "tags": [ "Scanning" ], "summary": "Update Result Visibility", "description": "**urlscan Pro** - Change the visibility of a scan owned by you or your team.\n", "parameters": [ { "in": "path", "name": "scanId", "schema": { "type": "string", "format": "uuid" }, "required": true, "description": "UUID of scan result" } ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "required": [ "visibility" ], "properties": { "visibility": { "type": "string", "enum": [ "public", "unlisted", "private", "deleted" ], "description": "New visibility for the scan result" } } } } } }, "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object", "properties": { "uuid": { "type": "string", "format": "uuid" }, "message": { "type": "string", "example": "Visibility updated" }, "visibility": { "type": "string", "enum": [ "public", "unlisted", "private", "deleted" ], "description": "Updated visibility of a scan owned by you or your team" } } } } } } } }, "delete": { "operationId": "deleteResultVisibility", "tags": [ "Scanning" ], "summary": "Reset to original visibility", "description": "**urlscan Pro** - Reset the visibility of a scan owned by you or your team to its original visibility\n", "parameters": [ { "in": "path", "name": "scanId", "schema": { "type": "string", "format": "uuid" }, "required": true, "description": "UUID of scan result" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object", "properties": { "uuid": { "type": "string", "format": "uuid" }, "message": { "type": "string", "example": "Visibility reset" } } } } } } } } }, "/api/v1/availableCountries": { "get": { "operationId": "getAvailableCountries", "tags": [ "Scanning" ], "summary": "Available Countries", "description": "Retrieve countries available for scanning using the Scan API", "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object", "properties": { "countries": { "type": "array", "description": "List of available countries" } } }, "example": { "countries": [ "de", "us", "jp", "fr", "gb", "nl", "ca", "it", "es", "se", "fi", "dk", "no", "is", "au", "nz", "pl", "sg", "ge", "pt", "at", "ch" ] } } } } } } }, "/api/v1/userAgents": { "get": { "operationId": "getUserAgents", "tags": [ "Scanning" ], "summary": "Available User Agents", "description": "Get grouped user agents to use with the Scan API.", "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object", "properties": { "userAgents": { "type": "array", "items": { "type": "object", "properties": { "group": { "type": "string", "description": "Browser or device group name" }, "useragents": { "type": "array", "items": { "type": "string" }, "description": "Array of user agent strings for this group" } }, "required": [ "group", "useragents" ] } } }, "required": [ "userAgents" ] }, "example": { "userAgents": [ { "group": "Chrome", "useragents": [ "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36" ] }, { "group": "iOS", "useragents": [ "Mozilla/5.0 (iPhone; CPU iPhone OS 14_7_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Mobile/15E148 Safari/604.1" ] }, { "group": "Android", "useragents": [ "Mozilla/5.0 (Linux; Android 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Mobile Safari/537.36" ] }, { "group": "Firefox", "useragents": [ "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0" ] }, { "group": "Safari", "useragents": [ "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_5_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.2 Safari/605.1.15" ] }, { "group": "Edge", "useragents": [ "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67", "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_5_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 Edg/92.0.902.67" ] }, { "group": "Internet Explorer", "useragents": [ "Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko" ] }, { "group": "Opera", "useragents": [ "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36 OPR/78.0.4093.112" ] }, { "group": "Bots & Crawlers", "useragents": [ "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)", "Google (+https://developers.google.com/+/web/snippet/)" ] } ] } } } } } } }, "/api/v1/quotas": { "get": { "operationId": "getQuotas", "tags": [ "Generic" ], "summary": "API Quotas", "description": "API Endpoint to get available and used API quotas.", "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object", "properties": { "scope": { "type": "string", "description": "Scope of the quota limits" }, "limits": { "type": "object", "additionalProperties": true, "properties": { "private": { "type": "object", "properties": { "day": { "$ref": "#/components/schemas/QuotaPeriod" }, "hour": { "$ref": "#/components/schemas/QuotaPeriod" }, "minute": { "$ref": "#/components/schemas/QuotaPeriod" } }, "required": [ "day", "hour", "minute" ] } }, "required": [ "private" ] } }, "required": [ "scope", "limits" ] }, "example": { "scope": "team", "limits": { "private": { "day": { "limit": 20000, "used": 0, "remaining": 20000, "percent": 0 }, "hour": { "limit": 2000, "used": 0, "remaining": 2000, "percent": 0 }, "minute": { "limit": 120, "used": 0, "remaining": 120, "percent": 0 } }, "public": { "day": { "limit": 50000, "used": 0, "remaining": 50000, "percent": 0 }, "hour": { "limit": 5000, "used": 0, "remaining": 5000, "percent": 0 }, "minute": { "limit": 120, "used": 0, "remaining": 120, "percent": 0 } }, "retrieve": { "day": { "limit": 150000, "used": 0, "remaining": 150000, "percent": 0 }, "hour": { "limit": 10000, "used": 0, "remaining": 10000, "percent": 0 }, "minute": { "limit": 1000, "used": 0, "remaining": 1000, "percent": 0 } }, "search": { "day": { "limit": 500000, "used": 1389, "remaining": 498611, "reset": "2023-09-30T00:00:00.000Z", "percent": 0 }, "hour": { "limit": 100000, "used": 21, "remaining": 99979, "reset": "2023-09-29T10:00:00.000Z", "percent": 0 }, "minute": { "limit": 5000, "used": 1, "remaining": 4999, "reset": "2023-09-29T09:09:00.000Z", "percent": 0 } }, "unlisted": { "day": { "limit": 40000, "used": 0, "remaining": 40000, "percent": 0 }, "hour": { "limit": 4000, "used": 0, "remaining": 4000, "percent": 0 }, "minute": { "limit": 120, "used": 0, "remaining": 120, "percent": 0 } }, "livescan": { "day": { "limit": 10000, "used": 0, "remaining": 10000, "percent": 0 }, "hour": { "limit": 1000, "used": 0, "remaining": 1000, "percent": 0 }, "minute": { "limit": 60, "used": 0, "remaining": 60, "percent": 0 } }, "liveshot": { "day": 1000, "hour": 100, "minute": 10 }, "maxRetentionPeriodDays": 90, "privateIncidentCreate": { "day": 10 }, "unlistedIncidentCreate": { "day": 10000 }, "privateIncidentOpen": 100, "unlistedIncidentOpen": 200, "maxSearchRangeMonths": 6, "maxSearchResults": 10000, "products": [ "livescan", "pro" ], "features": [ "country-select", "livescan/tier/base" ], "queryableFields": [ "asn", "asnname.*", "brand.*", "canonical.*", "content.*", "country", "date", "dom.*", "domain.*", "filename.*", "files.*", "frames.*", "hash", "indexedAt", "ip", "links.*", "page.*", "result.task.time", "scanner.country", "server", "stats.*", "submitter.country", "task.*", "team", "text.*", "updatedAt", "user", "verdicts.categories", "verdicts.hasVerdicts", "verdicts.malicious", "verdicts.score", "verdicts.urlscan.malicious", "visual" ], "queryVisibility": [ "public", "unlisted" ] } } } } } } } }, "/api/v1/pro/availableBrands": { "get": { "operationId": "getAvailableBrands", "tags": [ "Brands" ], "summary": "Available Brands", "description": "API Endpoint to get a list of brands that are tracked as part of urlscan's brand and phishing detection.", "responses": { "200": { "description": "Successful response", "content": { "application/json": { "schema": { "type": "object", "properties": { "kits": { "type": "array", "items": { "type": "object", "properties": { "_id": { "type": "string", "description": "Unique database ID of the brand" }, "name": { "type": "string", "description": "User-facing name of the brand" }, "key": { "type": "string", "description": "Searchable key for the brand" }, "vertical": { "type": "array", "description": "Industry verticals for this brand" }, "country": { "type": "array", "description": "Countries of operation for this brand" }, "terms": { "type": "object", "properties": { "domains": { "type": "array", "items": { "type": "string", "description": "Legitimate domains for this brand" } }, "asns": { "type": "array", "items": { "type": "string", "description": "Legitimate ASN for this brand" } } } }, "createdAt": { "type": "string", "format": "date-time", "description": "Time when brand was created" } } } } } } } } } } } }, "/api/v1/pro/brands": { "get": { "operationId": "getBrandSummary", "tags": [ "Brands" ], "summary": "Brands", "description": "Get the list of brands that we are able to detect phishing pages, the total number of detected pages and the latest hit for each brand. This is _slower_ than the availableBrands endpoint.", "responses": { "200": { "description": "Successful response" } } } }, "/api/v1/pro/phishfeed": { "get": { "deprecated": true, "operationId": "getPhishfeed", "tags": [ "Search" ], "summary": "Phishfeed", "description": "**urlscan Pro** - The Phishing URL endpoint is a convenience method over the Search API for retrieving detected pages. Unless you have a specific reason not to, you should use the Search API instead!\n", "parameters": [ { "name": "q", "in": "query", "schema": { "type": "string" }, "example": "date:>now-24h" }, { "name": "limit", "in": "query", "schema": { "type": "integer" }, "description": "How many results to return", "example": "10" }, { "name": "format", "in": "query", "schema": { "type": "string", "enum": [ "csv", "tsv", "json" ] }, "description": "Can be one of csv, tsv, or json", "example": "json" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/searchResponse" }, "example": { "results": [ { "verdicts": { "score": -50, "malicious": false, "urlscan": { "malicious": false }, "hasVerdicts": true }, "submitter": { "country": "cz" }, "dom": { "size": 229965, "hash": "2bdc117bbc12d656241cfda799ffbe033ae58d78469bb3f4e750c4c9d9532a9d" }, "frames": { "length": 1 }, "canonical": { "task": { "url": "urlscan.io/result/db0943fb-586d-4a00-9786-d9f818a30131" }, "page": { "url": "urlscan.io/result/db0943fb-586d-4a00-9786-d9f818a30131" } }, "task": { "visibility": "public", "method": "manual", "domain": "urlscan.io", "apexDomain": "urlscan.io", "time": "2023-08-18T09:26:20.465Z", "uuid": "78e48885-1b4c-4388-92bb-0d02cad46178", "url": "https://urlscan.io/result/db0943fb-586d-4a00-9786-d9f818a30131/" }, "stats": { "uniqIPs": 3, "uniqCountries": 2, "dataLength": 1038051, "encodedDataLength": 517522, "requests": 26 }, "scanner": { "country": "at" }, "links": { "length": 62 }, "page": { "country": "DE", "server": "nginx", "ip": "49.12.22.106", "mimeType": "text/html", "title": "www.wbc247-korea.com - urlscan.io", "url": "https://urlscan.io/result/db0943fb-586d-4a00-9786-d9f818a30131/", "tlsValidDays": 89, "tlsAgeDays": 49, "ptr": "urlscan.io", "tlsValidFrom": "2023-06-29T10:47:47.000Z", "domain": "urlscan.io", "umbrellaRank": 85248, "apexDomain": "urlscan.io", "asnname": "HETZNER-AS, DE", "asn": "AS24940", "tlsIssuer": "R3", "status": "200" }, "text": { "size": 54682, "hash": "e4ae30ae2ca6e8b6b75f18413e9c128a80bf261e2d03d60150b2e0799a05612f" }, "_id": "78e48885-1b4c-4388-92bb-0d02cad46178", "_score": null, "sort": [ 1692350780465, "78e48885-1b4c-4388-92bb-0d02cad46178" ], "result": "https://urlscan.io/api/v1/result/78e48885-1b4c-4388-92bb-0d02cad46178/", "screenshot": "https://urlscan.io/screenshots/78e48885-1b4c-4388-92bb-0d02cad46178.png" }, { "verdicts": { "score": -50, "malicious": false, "urlscan": { "malicious": false }, "hasVerdicts": true }, "submitter": { "country": "ie" }, "dom": { "size": 70886, "hash": "8d544648a7ede3eae277db9eac47853452966518f04fcca4571c0a16c5836cb6" }, "frames": { "length": 3 }, "canonical": { "task": { "url": "urlscan.io" }, "page": { "url": "urlscan.io" } }, "task": { "visibility": "unlisted", "method": "api", "domain": "urlscan.io", "apexDomain": "urlscan.io", "time": "2023-08-18T09:05:32.098Z", "uuid": "e142b92c-153b-42a6-b36b-262b22462e7f", "url": "https://urlscan.io/" }, "stats": { "uniqIPs": 5, "uniqCountries": 1, "dataLength": 2566855, "encodedDataLength": 1181236, "requests": 56 }, "scanner": { "country": "de" }, "links": { "length": 10 }, "page": { "country": "DE", "server": "nginx", "ip": "49.12.22.106", "mimeType": "text/html", "title": "URL and website scanner - urlscan.io", "url": "https://urlscan.io/", "tlsValidDays": 89, "tlsAgeDays": 49, "ptr": "urlscan.io", "tlsValidFrom": "2023-06-29T10:47:47.000Z", "domain": "urlscan.io", "umbrellaRank": 85248, "apexDomain": "urlscan.io", "asnname": "HETZNER-AS, DE", "asn": "AS24940", "tlsIssuer": "R3", "status": "200" }, "text": { "size": 35591, "hash": "9374b8777f43be35f95d4633daa288b9db3803e6e54af24b9666d98d1329499d" }, "_id": "e142b92c-153b-42a6-b36b-262b22462e7f", "_score": null, "sort": [ 1692349532098, "e142b92c-153b-42a6-b36b-262b22462e7f" ], "result": "https://urlscan.io/api/v1/result/e142b92c-153b-42a6-b36b-262b22462e7f/", "screenshot": "https://urlscan.io/screenshots/e142b92c-153b-42a6-b36b-262b22462e7f.png" } ], "total": 10000, "took": 23, "has_more": true } } } } } } }, "/api/v1/livescan/scanners/": { "get": { "operationId": "getLivescanScanners", "tags": [ "Live Scanning" ], "summary": "Live Scanners", "description": "API Endpoint to a list of available Live Scanning nodes along with their current metadata.", "responses": { "200": { "description": "Successful response" } } } }, "/api/v1/livescan/{scannerId}/task/": { "post": { "operationId": "createLivescanTask", "tags": [ "Live Scanning" ], "summary": "Non-Blocking Trigger Live Scan", "description": "Task a URL to be scanned. The HTTP request will return with the scan UUID immediately and then it is your responsibility to poll the result resource type until the scan has finished.", "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/livescanRequest" } } } }, "parameters": [ { "name": "scannerId", "in": "path", "schema": { "type": "string" }, "required": true, "example": "de01" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object", "properties": { "uuid": { "type": "string", "format": "uuid", "description": "UUID of scan" } } }, "example": { "uuid": "92d683cd-1575-4bde-89d1-99cd46ae07a7" } } } } } } }, "/api/v1/livescan/{scannerId}/scan/": { "post": { "operationId": "createLivescanScan", "tags": [ "Live Scanning" ], "summary": "Trigger Live Scan", "description": "Task a URL to be scanned. The HTTP request will **block** until the scan has finished.", "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/livescanRequest" } } } }, "parameters": [ { "name": "scannerId", "in": "path", "schema": { "type": "string" }, "required": true, "example": "de01" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object", "properties": { "uuid": { "type": "string", "format": "uuid", "description": "UUID of scan" } } }, "example": { "uuid": "10dae531-a98a-42fc-8c6f-cb8610ec0c10" } } } } } } }, "/api/v1/livescan/{scannerId}/{resourceType}/{resourceId}": { "get": { "operationId": "getLivescanResource", "tags": [ "Live Scanning" ], "summary": "Live Scan Get Resource", "description": "Retrieve the resource for a particular scan ID or SHA256 from\n this live scanner.", "parameters": [ { "name": "scannerId", "in": "path", "schema": { "type": "string" }, "required": true, "example": "de01" }, { "name": "resourceType", "in": "path", "schema": { "type": "string", "enum": [ "result", "screenshot", "dom", "response", "download" ] }, "required": true, "example": "result" }, { "name": "resourceId", "in": "path", "schema": { "type": "string" }, "required": true, "example": "{resourceId}", "description": "* For result, screenshot, dom: UUID of the scan\n* For response, download: The SHA256 of the resource\n" } ], "responses": { "200": { "description": "Successful response" } } } }, "/api/v1/livescan/{scannerId}/{scanId}/": { "put": { "operationId": "storeLivescanResult", "tags": [ "Live Scanning" ], "summary": "Store Live Scan Result", "description": "Store the temporary scan as a permanent snapshot on urlscan.io.", "requestBody": { "content": { "application/json": { "schema": { "type": "object", "properties": { "task": { "type": "object", "properties": { "visibility": { "type": "string", "enum": [ "public", "unlisted", "private" ] } } } }, "example": { "task": { "visibility": "public" } } } } } }, "parameters": [ { "name": "scannerId", "in": "path", "schema": { "type": "string" }, "required": true, "example": "de01" }, { "name": "scanId", "in": "path", "schema": { "type": "string" }, "required": true, "example": "{scanId}" } ], "responses": { "200": { "description": "Successful response" } } }, "delete": { "operationId": "discardLivescanResult", "tags": [ "Live Scanning" ], "summary": "Purge Live Scan Result", "description": "Purge temporary scan from scanner immediately. Scans will be automatically purged after 60 minutes.", "parameters": [ { "name": "scannerId", "in": "path", "schema": { "type": "string" }, "required": true, "example": "de01" }, { "name": "scanId", "in": "path", "schema": { "type": "string" }, "required": true, "example": "{scanId}" } ], "responses": { "200": { "description": "Successful response" } } } }, "/api/v1/hostname/{hostname}": { "get": { "operationId": "getHostnameHistory", "tags": [ "Hostnames" ], "summary": "Hostname History", "description": "Get the historical observations for a specific hostname in the \"Hostnames\" data source.", "parameters": [ { "name": "hostname", "in": "path", "schema": { "type": "string" }, "required": true, "description": "The hostname to query", "example": "urlscan.io" }, { "name": "limit", "in": "query", "schema": { "type": "integer", "default": 1000 }, "description": "Return at most this many results. Minimum 10 Maximum 10000 Default 1000" }, { "name": "pageState", "in": "query", "schema": { "type": "string" }, "description": "Returns additional results starting from this page state from the previous API call." } ], "responses": { "200": { "description": "Successful response", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/hostnameHistorySchema" } } } } } } }, "/api/v1/pro/username": { "get": { "operationId": "getProUsername", "tags": [ "Generic" ], "summary": "User Information", "description": "Get information about the current user or API key making the request.", "responses": { "200": { "description": "Successful response" } } } }, "/api/v1/pro/result/{scanId}/similar/": { "get": { "operationId": "getSimilarResults", "tags": [ "Search" ], "summary": "Structure Search", "description": "**urlscan Pro** - Get structurally similar results to a specific scan. See\ndescription for this propietary feature on [urlscan\nPro](https://pro.urlscan.io/help/structuresearch).\n", "parameters": [ { "name": "q", "in": "query", "schema": { "type": "string" }, "description": "Additional query filter", "example": "page.domain:urlscan.io" }, { "name": "size", "in": "query", "schema": { "type": "integer" }, "description": "Maximum results per call", "example": "10" }, { "name": "search_after", "in": "query", "schema": { "type": "string" }, "description": "Parameter to iterate over older results" }, { "name": "scanId", "in": "path", "schema": { "type": "string" }, "required": true, "description": "The original scan to compare to", "example": "68e26c59-2eae-437b-aeb1-cf750fafe7d7" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/searchResponse" }, "example": { "results": [ { "verdicts": { "score": -50, "malicious": false, "urlscan": { "malicious": false }, "hasVerdicts": true }, "submitter": { "country": "ie" }, "dom": { "size": 71541, "hash": "79b590b0df71e6d0d0d5835009dac485ad26d27ac8d85f266197e23f2e9801d8" }, "task": { "visibility": "unlisted", "method": "api", "domain": "urlscan.io", "apexDomain": "urlscan.io", "time": "2023-09-29T09:01:26.240Z", "uuid": "2c900eb9-08c0-4615-af6d-38510f5ce254", "url": "https://urlscan.io/" }, "frames": { "length": 3 }, "stats": { "uniqIPs": 5, "uniqCountries": 2, "dataLength": 2618802, "encodedDataLength": 1239272, "requests": 61 }, "scanner": { "country": "de" }, "links": { "length": 11 }, "canonical": { "task": { "url": "urlscan.io" }, "page": { "url": "urlscan.io" } }, "page": { "country": "DE", "server": "nginx", "ip": "49.12.22.106", "mimeType": "text/html", "title": "URL and website scanner - urlscan.io", "url": "https://urlscan.io/", "tlsValidDays": 89, "tlsAgeDays": 21, "ptr": "urlscan.io", "tlsValidFrom": "2023-09-07T10:30:42.000Z", "domain": "urlscan.io", "umbrellaRank": 97618, "apexDomain": "urlscan.io", "asnname": "HETZNER-AS, DE", "asn": "AS24940", "tlsIssuer": "R3", "status": "200" }, "text": { "size": 35483, "hash": "7150080736183e13994e725fd4a922b3267a227042912814f7b7eaef1f15b50d" }, "_id": "2c900eb9-08c0-4615-af6d-38510f5ce254", "_score": null, "sort": [ 1695978086240, "2c900eb9-08c0-4615-af6d-38510f5ce254" ], "result": "https://urlscan.io/api/v1/result/2c900eb9-08c0-4615-af6d-38510f5ce254/", "screenshot": "https://urlscan.io/screenshots/2c900eb9-08c0-4615-af6d-38510f5ce254.png" }, { "verdicts": { "score": -50, "malicious": false, "urlscan": { "malicious": false }, "hasVerdicts": true }, "submitter": { "country": "ie" }, "dom": { "size": 71496, "hash": "3f714dbe79d09b5ec0eb5f4facf4bb900febef2e7ecebf9574e098d556c85175" }, "frames": { "length": 3 }, "canonical": { "task": { "url": "urlscan.io" }, "page": { "url": "urlscan.io" } }, "task": { "visibility": "unlisted", "method": "api", "domain": "urlscan.io", "apexDomain": "urlscan.io", "time": "2023-09-29T09:01:08.446Z", "uuid": "7bd80df6-4efd-4953-87be-cb6371ac9083", "url": "https://urlscan.io/" }, "stats": { "uniqIPs": 5, "uniqCountries": 1, "dataLength": 2602984, "encodedDataLength": 1237497, "requests": 57 }, "scanner": { "country": "de" }, "links": { "length": 11 }, "page": { "country": "DE", "server": "nginx", "ip": "49.12.22.106", "mimeType": "text/html", "title": "URL and website scanner - urlscan.io", "url": "https://urlscan.io/", "tlsValidDays": 89, "tlsAgeDays": 21, "ptr": "urlscan.io", "tlsValidFrom": "2023-09-07T10:30:42.000Z", "domain": "urlscan.io", "umbrellaRank": 97618, "apexDomain": "urlscan.io", "asnname": "HETZNER-AS, DE", "asn": "AS24940", "tlsIssuer": "R3", "status": "200" }, "text": { "size": 35465, "hash": "a0de075666e5dd0ec7a50e62285aadb96d481a667b8466caa5ca418efaca95e0" }, "_id": "7bd80df6-4efd-4953-87be-cb6371ac9083", "_score": null, "sort": [ 1695978068446, "7bd80df6-4efd-4953-87be-cb6371ac9083" ], "result": "https://urlscan.io/api/v1/result/7bd80df6-4efd-4953-87be-cb6371ac9083/", "screenshot": "https://urlscan.io/screenshots/7bd80df6-4efd-4953-87be-cb6371ac9083.png" } ], "total": 7684, "took": 72, "has_more": false } } } } } } }, "/api/v1/user/searches/": { "get": { "operationId": "listSavedSearches", "tags": [ "Saved Searches" ], "summary": "Saved Searches", "description": "Get a list of Saved Searches for the current user.", "responses": { "200": { "description": "Successful response", "content": { "application/json": { "schema": { "properties": { "searches": { "type": "array", "items": { "$ref": "#/components/schemas/savedSearchResponse" } } } } } } } } }, "post": { "operationId": "createSavedSearch", "tags": [ "Saved Searches" ], "summary": "Create Saved Search", "description": "Create a Saved Search.", "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/savedSearchRequest" } } } }, "responses": { "201": { "description": "OK", "content": { "application/json": { "schema": { "type": "object", "properties": { "search": { "$ref": "#/components/schemas/savedSearchResponse" } } } } } } } } }, "/api/v1/user/searches/{searchId}/": { "put": { "operationId": "updateSavedSearch", "tags": [ "Saved Searches" ], "summary": "Update Saved Search", "description": "Update a Saved Search.", "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/savedSearchRequest" } } } }, "parameters": [ { "name": "searchId", "in": "path", "schema": { "type": "string" }, "required": true, "example": "{{searchId}}" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object", "properties": { "search": { "$ref": "#/components/schemas/savedSearchResponse" } } } } } } } }, "delete": { "operationId": "deleteSavedSearch", "tags": [ "Saved Searches" ], "summary": "Delete Saved Search", "description": "Delete a Saved Search", "parameters": [ { "name": "searchId", "in": "path", "schema": { "type": "string" }, "required": true, "example": "{{searchId}}" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object", "properties": {}, "additionalProperties": false } } } } } } }, "/api/v1/user/searches/{searchId}/results/": { "get": { "operationId": "getSavedSearchResults", "tags": [ "Saved Searches" ], "summary": "Saved Search Search Results", "description": "Get the search results for a specific Saved Search.", "parameters": [ { "name": "searchId", "in": "path", "schema": { "type": "string" }, "required": true, "example": "{{searchId}}" } ], "responses": { "302": { "description": "HTTP redirect to the query against the Search API to retrieve the hits." } } } }, "/api/v1/user/subscriptions/": { "get": { "operationId": "listSubscriptions", "tags": [ "Subscriptions" ], "summary": "Subscriptions", "description": "Get a list of Subscriptions for the current user.", "responses": { "200": { "description": "Successful response", "content": { "application/json": { "schema": { "properties": { "subscriptions": { "type": "array", "items": { "$ref": "#/components/schemas/subscriptionResponseList" } } } } } } } } }, "post": { "operationId": "createSubscription", "tags": [ "Subscriptions" ], "summary": "Create Subscription", "description": "Create a new subscription.", "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/subscriptionRequest" } } } }, "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/subscriptionResponse" } } } } } } }, "/api/v1/user/subscriptions/{subscriptionId}/": { "put": { "operationId": "updateSubscription", "tags": [ "Subscriptions" ], "summary": "Update Subscription", "description": "Update the settings for a subscription.", "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/subscriptionRequest", "example": { "subscription": { "_id": "{{subscriptionId}}", "searchIds": [ "{{searchId}}" ], "frequency": "daily", "emailAddresses": [ "test@urlscan.io" ], "name": "Test Subscription - Updated", "description": "Subscription for testing purposes", "isActive": true, "ignoreTime": false } } } } } }, "parameters": [ { "name": "subscriptionId", "in": "path", "schema": { "type": "string" }, "required": true, "example": "{{subscriptionId}}" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/subscriptionResponse" } } } } } }, "delete": { "operationId": "deleteSubscription", "tags": [ "Subscriptions" ], "summary": "Delete Subscription", "description": "Delete a subscription.", "parameters": [ { "name": "subscriptionId", "in": "path", "schema": { "type": "string" }, "required": true, "example": "{{subscriptionId}}" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object", "properties": {}, "additionalProperties": false } } } } } } }, "/api/v1/user/subscriptions/{subscriptionId}/results/{datasource}/": { "get": { "operationId": "getSubscriptionResults", "tags": [ "Subscriptions" ], "summary": "Subscription Search Results", "description": "Get the search results for a specific subscription and datasource.", "parameters": [ { "name": "subscriptionId", "in": "path", "schema": { "type": "string" }, "required": true }, { "name": "datasource", "in": "path", "schema": { "type": "string" }, "required": true, "example": "scans" } ], "responses": { "302": { "description": "HTTP redirect to the query against the Search API to retrieve the hits." } } } }, "/api/v1/user/channels/": { "get": { "operationId": "listChannels", "tags": [ "Channels" ], "summary": "Channels", "description": "Get a list of notification channels for the current user.", "responses": { "200": { "description": "Successful response", "content": { "application/json": { "schema": { "type": "object", "properties": { "channels": { "type": "array", "items": { "$ref": "#/components/schemas/channelResponse" } } } } } } } } }, "post": { "operationId": "createChannel", "tags": [ "Channels" ], "summary": "Create Channel", "description": "Create a new channel.", "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/channelRequest" } } } }, "responses": { "200": { "description": "Successful response", "content": { "application/json": { "schema": { "type": "object", "properties": { "channel": { "$ref": "#/components/schemas/channelResponse" } } } } } } } } }, "/api/v1/user/channels/{channelId}": { "get": { "operationId": "getChannel", "tags": [ "Channels" ], "summary": "Channel Search Results", "description": "Get the search results for a specific notification channel.", "parameters": [ { "name": "channelId", "in": "path", "schema": { "type": "string" }, "required": true } ], "responses": { "200": { "description": "Successful response", "content": { "application/json": { "schema": { "type": "object", "properties": { "channel": { "$ref": "#/components/schemas/channelResponse" } } } } } } } }, "put": { "operationId": "updateChannel", "tags": [ "Channels" ], "summary": "Update Channel", "description": "Update an existing channel.", "parameters": [ { "name": "channelId", "in": "path", "schema": { "type": "string" }, "required": true } ], "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/channelRequest" } } } }, "responses": { "200": { "description": "Successful response", "content": { "application/json": { "schema": { "type": "object", "properties": { "channel": { "$ref": "#/components/schemas/channelResponse" } } } } } } } } }, "/api/v1/user/incidents": { "post": { "operationId": "createIncident", "tags": [ "Incidents" ], "summary": "Create Incident", "description": "Create an incident with specific options", "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/incidentRequest" } } } }, "responses": { "200": { "description": "Incident body", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/incidentResponse" } } } } } } }, "/api/v1/user/incidents/{incidentId}": { "get": { "operationId": "getIncident", "tags": [ "Incidents" ], "summary": "Get Incident", "description": "Get details for a specific incident.", "parameters": [ { "in": "path", "name": "incidentId", "schema": { "type": "string" }, "required": true, "description": "ID of incident" } ], "responses": { "200": { "description": "Incident body", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/incidentResponse" } } } } } }, "put": { "operationId": "updateIncident", "tags": [ "Incidents" ], "summary": "Update Incident options", "description": "Update specific runtime options of the incident", "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/incidentRequest" } } } }, "parameters": [ { "in": "path", "name": "incidentId", "schema": { "type": "string" }, "required": true, "description": "ID of incident" } ], "responses": { "200": { "description": "Incident body", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/incidentResponse" } } } } } } }, "/api/v1/user/incidents/{incidentId}/close": { "put": { "operationId": "closeIncident", "tags": [ "Incidents" ], "summary": "Close Incident", "description": "Close (stop) the incident", "requestBody": { "content": { "application/json": {} } }, "parameters": [ { "in": "path", "name": "incidentId", "schema": { "type": "string" }, "required": true, "description": "ID of incident" } ], "responses": { "200": { "description": "OK" } } } }, "/api/v1/user/incidents/{incidentId}/restart": { "put": { "operationId": "restartIncident", "tags": [ "Incidents" ], "summary": "Restart Incident", "description": "Restart a closed incident. Automatically extends the incident expireAt. Starts with new incident states.", "requestBody": { "content": { "application/json": {} } }, "parameters": [ { "in": "path", "name": "incidentId", "schema": { "type": "string" }, "required": true, "description": "ID of incident" } ], "responses": { "200": { "description": "OK" } } } }, "/api/v1/user/incidents/{incidentId}/copy": { "post": { "operationId": "copyIncident", "tags": [ "Incidents" ], "summary": "Copy Incident", "description": "Copy an incident without its history.", "requestBody": { "content": { "application/json": {} } }, "parameters": [ { "in": "path", "name": "incidentId", "schema": { "type": "string" }, "required": true, "description": "ID of incident" } ], "responses": { "200": { "description": "Incident body", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/incidentResponse" } } } } } } }, "/api/v1/user/incidents/{incidentId}/fork": { "post": { "operationId": "forkIncident", "tags": [ "Incidents" ], "summary": "Fork Incident", "description": "Copy an incident along with its history (incident states).", "requestBody": { "content": { "application/json": {} } }, "parameters": [ { "in": "path", "name": "incidentId", "schema": { "type": "string" }, "required": true, "description": "ID of incident" } ], "responses": { "200": { "description": "Incident body", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/incidentResponse" } } } } } } }, "/api/v1/user/watchableAttributes": { "get": { "operationId": "getWatchableAttributes", "tags": [ "Incidents" ], "summary": "Get Watchable Attributes", "description": "Get the list of attributes which can be supplied to the watchedAttributes property of the incident.", "responses": { "200": { "description": "OK" } } } }, "/api/v1/user/incidentstates/{incidentId}/": { "get": { "operationId": "getIncidentStates", "tags": [ "Incidents" ], "summary": "Get Incident States", "description": "Retrieve individual incident states of an incident.", "parameters": [ { "in": "path", "name": "incidentId", "schema": { "type": "string" }, "required": true, "description": "ID of incident" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object", "properties": { "incidentstates": { "type": "array", "items": { "type": "object", "properties": { "_id": { "type": "string", "description": "Unique ID of incident state interval" }, "incident": { "type": "string", "description": "ID of the incident" }, "state": { "type": "object", "description": "Current state of the interval" }, "timeStart": { "type": "string", "format": "date", "description": "Start time of the interval" }, "timeEnd": { "type": "string", "format": "date", "description": "End time of the interval" } } } } } } } } } } } }, "/api/v1/datadump/list/{timeWindow}/{fileType}/{date}": { "get": { "operationId": "listDatadumps", "tags": [ "Data Dumps" ], "summary": "List Data Dump Files", "description": "**urlscan Pro** - List available data dump files for a specific time window, file type, and date.\n", "parameters": [ { "name": "timeWindow", "in": "path", "schema": { "type": "string", "enum": [ "days", "hours", "minutes" ] }, "required": true, "description": "Time window of the data dump" }, { "name": "fileType", "in": "path", "schema": { "type": "string", "enum": [ "api", "search", "screenshot", "dom" ] }, "required": true, "description": "Type of data dump file" }, { "name": "date", "in": "path", "schema": { "type": "string", "format": "date" }, "required": true, "description": "Date of the data dump in YYYYMMDD format" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object", "properties": { "files": { "type": "array", "items": { "type": "object", "properties": { "path": { "type": "string", "description": "Path to download the data dump file" }, "size": { "type": "integer", "description": "Size of the data dump file" } } } } } }, "example": { "files": [ { "path": "days/search/20251001.gz", "size": 2548253 }, { "path": "days/search/20251002.gz", "size": 4114821 } ] } } } } } } }, "/api/v1/datadump/link/{path}": { "get": { "operationId": "getDatadumpLink", "tags": [ "Data Dumps" ], "summary": "Get Data Dump Download Link", "description": "**urlscan Pro** - Generate a temporary download link for a specific data dump file.\n", "parameters": [ { "name": "path", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Path of the data dump file" } ], "responses": { "200": { "description": "OK", "content": { "application/gzip": { "schema": { "type": "string", "format": "binary" } } } } } } }, "/downloads/{fileHash}": { "get": { "operationId": "downloadFile", "tags": [ "Files" ], "summary": "Download a file", "description": "**urlscan Pro** - Download a file by SHA256 hash. For the ZIP files delivered by this\nendpoint, the default encryption password is `urlscan!` - including the\ntrailing exclamation mark. The ZIP file contains a single file named\nafter the SHA256 of the requested file.\n", "parameters": [ { "in": "path", "name": "fileHash", "schema": { "type": "string" }, "required": true, "description": "SHA256 hash of file" }, { "name": "password", "in": "query", "schema": { "type": "string", "default": "urlscan!" }, "description": "The password to use to encrypt the ZIP file. Using a password is\nmandatory, the default password is urlscan!\n" }, { "name": "filename", "in": "query", "schema": { "type": "string", "default": "$fileHash.zip" }, "description": "Specify the name of the ZIP file that should be downloaded. This\ndoes not change the name of files within the ZIP archive. The\ndefault filename is $fileHash.zip\n" } ], "responses": { "200": { "description": "OK", "content": { "application/zip": { "schema": { "type": "string", "format": "binary" } } } } } } }, "/api/v1/malicious/{type}/{value}": { "get": { "operationId": "lookupMaliciousObservable", "tags": [ "Malicious" ], "summary": "Malicious observable lookup", "description": "**urlscan Pro** - Look up how often an observable has been seen in malicious scan results,\nalong with first and last seen timestamps.\n\nThe `type` parameter selects what kind of observable to query:\n\n- **`ip`** — Match scans by the IP address of the page server (e.g. `192.0.2.1`).\n- **`hostname`** — Match scans by the exact page hostname (e.g. `www.example.com`). Use this when you are interested in a specific host.\n- **`domain`** — Match scans by the apex (registered) domain (e.g. `example.com`). This covers all subdomains under that domain, so a lookup for `example.com` will include scans for `www.example.com`, `blog.example.com`, etc. Use this for a broader view across an entire domain.\n- **`url`** — Match scans by the exact page URL. The value must be URL-encoded (e.g. `https%3A%2F%2Fexample.com%2F`).\n", "parameters": [ { "name": "type", "in": "path", "schema": { "type": "string", "enum": [ "ip", "hostname", "domain", "url" ] }, "required": true, "description": "The type of observable to look up." }, { "name": "value", "in": "path", "schema": { "type": "string" }, "required": true, "description": "The observable value. Format depends on `type`:\n- `ip`: an IP address (e.g. `192.0.2.1`)\n- `hostname`: a fully qualified hostname (e.g. `www.example.com`)\n- `domain`: an apex/registered domain (e.g. `example.com`)\n- `url`: a URL-encoded URL (e.g. `https%3A%2F%2Fexample.com%2Fpath`)\n" } ], "responses": { "200": { "description": "Successful response", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/maliciousStats" } } } } } } } } }