# Result

Using the Scan ID received from the Submission API, you can use the Result API to poll for the scan. The most efficient approach would be to wait at least 10 seconds before starting to poll, and then only polling 2-second intervals with an eventual upper timeout in case the scan does not return.

Endpoint: GET /api/v1/result/{scanId}/
Version: 1.0.0
Security: apikeyAuth

## Path parameters:

  - `scanId` (string, required)
    UUID of scan result

## Response 200 fields (application/json):

  - `data` (object)
    Raw scan data including network requests, responses, cookies, console logs, and page elements

  - `data.requests` (array)
    Individual HTTP transactions during page navigation (+ metadata)

  - `data.requests.request` (object)

  - `data.requests.request.requestId` (string)

  - `data.requests.request.loaderId` (string)

  - `data.requests.request.documentURL` (string)

  - `data.requests.request.request` (object)

  - `data.requests.request.request.url` (string)

  - `data.requests.request.request.method` (string)

  - `data.requests.request.request.headers` (object)

  - `data.requests.request.request.mixedContentType` (string)

  - `data.requests.request.request.initialPriority` (string)

  - `data.requests.request.request.referrerPolicy` (string)

  - `data.requests.request.request.isSameSite` (boolean)

  - `data.requests.request.request.isLinkPreload` (boolean)

  - `data.requests.request.timestamp` (number)

  - `data.requests.request.wallTime` (number)

  - `data.requests.request.initiator` (object)

  - `data.requests.request.initiator.type` (string)

  - `data.requests.request.initiator.url` (string)

  - `data.requests.request.initiator.lineNumber` (integer)

  - `data.requests.request.initiator.columnNumber` (integer)

  - `data.requests.request.redirectHasExtraInfo` (boolean)

  - `data.requests.request.type` (string)

  - `data.requests.request.frameId` (string)

  - `data.requests.request.hasUserGesture` (boolean)

  - `data.requests.request.primaryRequest` (boolean)

  - `data.requests.response` (object)

  - `data.requests.response.encodedDataLength` (integer)

  - `data.requests.response.dataLength` (integer)

  - `data.requests.response.requestId` (string)

  - `data.requests.response.type` (string)

  - `data.requests.response.hasExtraInfo` (boolean)

  - `data.requests.response.hash` (string)

  - `data.requests.response.size` (integer)

  - `data.requests.response.failed` (object)
    Present when the request failed (e.g. blocked, aborted, network error)

  - `data.requests.response.failed.requestId` (string)

  - `data.requests.response.failed.timestamp` (number)

  - `data.requests.response.failed.type` (string)

  - `data.requests.response.failed.errorText` (string)

  - `data.requests.response.failed.canceled` (boolean)

  - `data.requests.response.asn` (object)

  - `data.requests.response.asn.ip` (string)

  - `data.requests.response.asn.asn` (string)

  - `data.requests.response.asn.country` (string)

  - `data.requests.response.asn.description` (string)

  - `data.requests.response.asn.name` (string)

  - `data.requests.response.asn.route` (string)

  - `data.requests.response.geoip` (object)

  - `data.requests.response.geoip.country` (string)

  - `data.requests.response.geoip.region` (string)

  - `data.requests.response.geoip.timezone` (string)

  - `data.requests.response.geoip.city` (string)

  - `data.requests.response.geoip.ll` (array)

  - `data.requests.response.geoip.country_name` (string)

  - `data.requests.response.geoip.metro` (integer)

  - `data.requests.response.rdns` (object)

  - `data.requests.response.rdns.ip` (string)

  - `data.requests.response.rdns.ptr` (string)

  - `data.requests.response.response` (object)

  - `data.requests.response.response.url` (string)

  - `data.requests.response.response.status` (integer)

  - `data.requests.response.response.statusText` (string)

  - `data.requests.response.response.headers` (object)

  - `data.requests.response.response.mimeType` (string)

  - `data.requests.response.response.remoteIPAddress` (string)

  - `data.requests.response.response.remotePort` (integer)

  - `data.requests.response.response.encodedDataLength` (integer)

  - `data.requests.response.response.timing` (object)

  - `data.requests.response.response.timing.requestTime` (number)

  - `data.requests.response.response.timing.proxyStart` (number)

  - `data.requests.response.response.timing.proxyEnd` (number)

  - `data.requests.response.response.timing.dnsStart` (number)

  - `data.requests.response.response.timing.dnsEnd` (number)

  - `data.requests.response.response.timing.connectStart` (number)

  - `data.requests.response.response.timing.connectEnd` (number)

  - `data.requests.response.response.timing.sslStart` (number)

  - `data.requests.response.response.timing.sslEnd` (number)

  - `data.requests.response.response.timing.workerStart` (number)

  - `data.requests.response.response.timing.workerReady` (number)

  - `data.requests.response.response.timing.workerFetchStart` (number)

  - `data.requests.response.response.timing.workerRespondWithSettled` (number)

  - `data.requests.response.response.timing.sendStart` (number)

  - `data.requests.response.response.timing.sendEnd` (number)

  - `data.requests.response.response.timing.pushStart` (number)

  - `data.requests.response.response.timing.pushEnd` (number)

  - `data.requests.response.response.timing.receiveHeadersStart` (number)

  - `data.requests.response.response.timing.receiveHeadersEnd` (number)

  - `data.requests.response.response.responseTime` (number)

  - `data.requests.response.response.protocol` (string)

  - `data.requests.response.response.alternateProtocolUsage` (string)

  - `data.requests.response.response.securityState` (string)

  - `data.requests.response.response.securityDetails` (object)

  - `data.requests.response.response.securityDetails.protocol` (string)

  - `data.requests.response.response.securityDetails.keyExchange` (string)

  - `data.requests.response.response.securityDetails.keyExchangeGroup` (string)

  - `data.requests.response.response.securityDetails.cipher` (string)

  - `data.requests.response.response.securityDetails.certificateId` (integer)

  - `data.requests.response.response.securityDetails.subjectName` (string)

  - `data.requests.response.response.securityDetails.sanList` (array)

  - `data.requests.response.response.securityDetails.issuer` (string)

  - `data.requests.response.response.securityDetails.validFrom` (integer)

  - `data.requests.response.response.securityDetails.validTo` (integer)

  - `data.requests.response.response.securityDetails.signedCertificateTimestampList` (array)

  - `data.requests.response.response.securityDetails.certificateTransparencyCompliance` (string)

  - `data.requests.response.response.securityDetails.serverSignatureAlgorithm` (integer)

  - `data.requests.response.response.securityDetails.encryptedClientHello` (boolean)

  - `data.requests.response.response.securityHeaders` (array)

  - `data.requests.response.response.securityHeaders.name` (string)

  - `data.requests.response.response.securityHeaders.value` (string)

  - `data.requests.initiatorInfo` (object)

  - `data.requests.initiatorInfo.url` (string)

  - `data.requests.initiatorInfo.host` (string)

  - `data.requests.initiatorInfo.type` (string)

  - `data.cookies` (array)
    Cookies set by the page with associated metadata

  - `data.cookies.name` (string)

  - `data.cookies.value` (string)

  - `data.cookies.domain` (string)

  - `data.cookies.path` (string)

  - `data.cookies.expires` (number)

  - `data.cookies.size` (integer)

  - `data.cookies.httpOnly` (boolean)

  - `data.cookies.secure` (boolean)

  - `data.cookies.session` (boolean)

  - `data.cookies.sameSite` (string)

  - `data.cookies.priority` (string)

  - `data.cookies.sameParty` (boolean)

  - `data.cookies.sourceScheme` (string)

  - `data.cookies.sourcePort` (integer)

  - `data.cookies.partitionKey` (object)

  - `data.cookies.partitionKey.topLevelSite` (string)

  - `data.cookies.partitionKey.hasCrossSiteAncestor` (boolean)

  - `data.cookies.partitionKeyOpaque` (boolean)

  - `data.console` (array)
    Console messages during page navigation

  - `data.console.message` (object)

  - `data.console.message.source` (string)

  - `data.console.message.level` (string)

  - `data.console.message.text` (string)

  - `data.console.message.timestamp` (number)

  - `data.console.message.url` (string)

  - `data.console.message.line` (integer)

  - `data.links` (array)
    Links and link text contained on the fully loaded page

  - `data.links.href` (string)

  - `data.links.text` (string)

  - `data.links.type` (string)
    Set to qrcode when the link was extracted from a scanned QR code
    Enum: "qrcode"

  - `data.links.frameId` (string)

  - `data.timing` (object)
    Timing entries for various lifecycle events

  - `data.timing.beginNavigation` (string)

  - `data.timing.frameStartedLoading` (string)

  - `data.timing.frameNavigated` (string)

  - `data.timing.domContentEventFired` (string)

  - `data.timing.frameStoppedLoading` (string)

  - `data.globals` (array)
    JavaScript non-standard global variable names and types on the fully loaded page

  - `data.globals.prop` (string)

  - `data.globals.type` (string)
    Enum: "object", "function", "boolean", "number", "string", "unknown"

  - `data.globals.source` (string)
    Enum: "windowScope", "globalScope"

  - `data.storages` (array)
    Recorded items set in localStorage and sessionStorage

  - `data.storages.origin` (string)

  - `data.storages.key` (string)

  - `data.storages.value` (string)

  - `data.storages.isLocalStorage` (boolean)

  - `data.redirects` (array)
    Redirect chain from the submitted URL (task.url) to the final page URL (page.url)

  - `data.redirects.from` (string)

  - `data.redirects.to` (string)

  - `data.redirects.status` (integer)

  - `data.redirects.initiator` (string)

  - `data.websockets` (array)
    Contains WebSocket connection data captured during scan

  - `data.websockets.initiatorInfo` (object)

  - `data.websockets.initiatorInfo.requestId` (string)

  - `data.websockets.initiatorInfo.url` (string)

  - `data.websockets.initiatorInfo.initiator` (object)

  - `data.websockets.frames` (object)

  - `data.websockets.frames.sent` (array)

  - `data.websockets.frames.sent.requestId` (string)

  - `data.websockets.frames.sent.timestamp` (number)

  - `data.websockets.frames.sent.response` (object)

  - `data.websockets.frames.received` (array)

  - `data.websockets.frames.received.requestId` (string)

  - `data.websockets.frames.received.timestamp` (number)

  - `data.websockets.frames.received.response` (object)

  - `data.websockets.connectionDuration` (number)

  - `data.websockets.bytesSent` (integer)

  - `data.websockets.bytesReceived` (integer)

  - `data.websockets.messagesSent` (integer)

  - `data.websockets.messagesReceived` (integer)

  - `stats` (object)
    Statistical analysis of the scan including resource counts, protocols, security metrics, and geographic distribution

  - `stats.resourceStats` (array)

  - `stats.resourceStats.count` (integer)

  - `stats.resourceStats.size` (integer)

  - `stats.resourceStats.encodedSize` (integer)

  - `stats.resourceStats.latency` (number)

  - `stats.resourceStats.countries` (array)

  - `stats.resourceStats.ips` (array)

  - `stats.resourceStats.type` (string)

  - `stats.resourceStats.compression` (string)

  - `stats.resourceStats.percentage` (integer)

  - `stats.protocolStats` (array)

  - `stats.protocolStats.count` (integer)

  - `stats.protocolStats.size` (integer)

  - `stats.protocolStats.encodedSize` (integer)

  - `stats.protocolStats.latency` (number)

  - `stats.protocolStats.countries` (array)

  - `stats.protocolStats.ips` (array)

  - `stats.protocolStats.percentage` (integer)

  - `stats.protocolStats.protocol` (string)

  - `stats.protocolStats.securityState` (object)

  - `stats.tlsStats` (array)

  - `stats.tlsStats.count` (integer)

  - `stats.tlsStats.size` (integer)

  - `stats.tlsStats.encodedSize` (integer)

  - `stats.tlsStats.latency` (number)

  - `stats.tlsStats.countries` (array)

  - `stats.tlsStats.ips` (array)

  - `stats.tlsStats.percentage` (integer)

  - `stats.tlsStats.protocols` (object)

  - `stats.tlsStats.securityState` (string)

  - `stats.serverStats` (array)

  - `stats.serverStats.count` (integer)

  - `stats.serverStats.size` (integer)

  - `stats.serverStats.encodedSize` (integer)

  - `stats.serverStats.latency` (number)

  - `stats.serverStats.countries` (array)

  - `stats.serverStats.ips` (array)

  - `stats.serverStats.percentage` (integer)

  - `stats.serverStats.server` (string)

  - `stats.domainStats` (array)

  - `stats.domainStats.count` (integer)

  - `stats.domainStats.ips` (array)

  - `stats.domainStats.redirects` (integer)

  - `stats.domainStats.size` (integer)

  - `stats.domainStats.encodedSize` (integer)

  - `stats.domainStats.countries` (array)

  - `stats.domainStats.index` (integer)

  - `stats.domainStats.initiators` (array)

  - `stats.domainStats.requests` (integer)

  - `stats.domainStats.domain` (string)

  - `stats.regDomainStats` (array)

  - `stats.regDomainStats.count` (integer)

  - `stats.regDomainStats.ips` (array)

  - `stats.regDomainStats.redirects` (integer)

  - `stats.regDomainStats.size` (integer)

  - `stats.regDomainStats.encodedSize` (integer)

  - `stats.regDomainStats.countries` (array)

  - `stats.regDomainStats.index` (integer)

  - `stats.regDomainStats.initiators` (array)

  - `stats.regDomainStats.requests` (integer)

  - `stats.regDomainStats.regDomain` (string)

  - `stats.regDomainStats.subDomains` (array)

  - `stats.regDomainStats.subDomains.domain` (string)

  - `stats.regDomainStats.subDomains.country` (string)

  - `stats.secureRequests` (integer)

  - `stats.securePercentage` (integer)

  - `stats.IPv6Percentage` (integer)

  - `stats.uniqCountries` (integer)

  - `stats.totalLinks` (integer)

  - `stats.adBlocked` (integer)

  - `stats.malicious` (integer)

  - `stats.ipStats` (array)

  - `stats.ipStats.requests` (integer)

  - `stats.ipStats.domains` (array)

  - `stats.ipStats.ips` (array)

  - `stats.ipStats.countries` (array)

  - `stats.ipStats.asns` (array)

  - `stats.ipStats.asns.asn` (string)

  - `stats.ipStats.asns.country` (string)

  - `stats.ipStats.asns.organisation` (string)

  - `stats.ipStats.encoded_size` (integer)

  - `stats.ipStats.size` (integer)

  - `stats.ipStats.redirects` (integer)

  - `stats.ipStats.ip` (string)

  - `stats.ipStats.asn` (object)

  - `stats.ipStats.asn.ip` (string)

  - `stats.ipStats.asn.asn` (string)

  - `stats.ipStats.asn.country` (string)

  - `stats.ipStats.asn.description` (string)

  - `stats.ipStats.asn.name` (string)

  - `stats.ipStats.asn.route` (string)

  - `stats.ipStats.dns` (object)

  - `stats.ipStats.geoip` (object)

  - `stats.ipStats.geoip.country` (string)

  - `stats.ipStats.geoip.region` (string)

  - `stats.ipStats.geoip.timezone` (string)

  - `stats.ipStats.geoip.city` (string)

  - `stats.ipStats.geoip.ll` (array)

  - `stats.ipStats.geoip.country_name` (string)

  - `stats.ipStats.geoip.metro` (integer)

  - `stats.ipStats.encodedSize` (integer)

  - `stats.ipStats.index` (integer)

  - `stats.ipStats.ipv6` (boolean)

  - `stats.ipStats.count` (integer,null)

  - `stats.ipStats.rdns` (object)

  - `stats.ipStats.rdns.ip` (string)

  - `stats.ipStats.rdns.ptr` (string)

  - `meta` (object)
    Enriched metadata from external processors including domain rankings, geolocation, DNS records, and ASN information

  - `meta.processors` (object)

  - `meta.processors.umbrella` (object)

  - `meta.processors.umbrella.data` (array)
    Cisco Umbrella Top 1 Million annotation per hostname

  - `meta.processors.umbrella.data.hostname` (string)

  - `meta.processors.umbrella.data.rank` (integer)

  - `meta.processors.geoip` (object)

  - `meta.processors.geoip.data` (array)
    GeoIP annotation for every IP contacted during page navigation

  - `meta.processors.geoip.data.ip` (string)

  - `meta.processors.geoip.data.geoip` (object)

  - `meta.processors.geoip.data.geoip.country` (string)

  - `meta.processors.geoip.data.geoip.country_name` (string)

  - `meta.processors.geoip.data.geoip.region` (string)

  - `meta.processors.geoip.data.geoip.timezone` (string)

  - `meta.processors.geoip.data.geoip.city` (string)

  - `meta.processors.geoip.data.geoip.ll` (array)

  - `meta.processors.geoip.data.geoip.metro` (integer)

  - `meta.processors.rdns` (object)

  - `meta.processors.rdns.data` (array)
    DNS PTR records for every hostname contacted during page navigation

  - `meta.processors.rdns.data.ip` (string)

  - `meta.processors.rdns.data.ptr` (string)

  - `meta.processors.asn` (object)

  - `meta.processors.asn.data` (array)
    IP ASN annotation for every IP contacted during page navigation

  - `meta.processors.asn.data.ip` (string)

  - `meta.processors.asn.data.asn` (string)

  - `meta.processors.asn.data.country` (string)

  - `meta.processors.asn.data.description` (string)

  - `meta.processors.asn.data.name` (string)

  - `meta.processors.asn.data.route` (string)

  - `meta.processors.download` (object)

  - `meta.processors.download.data` (array)
    List of files that were downloaded by the website

  - `meta.processors.download.data.filename` (string)

  - `meta.processors.download.data.filesize` (integer)

  - `meta.processors.download.data.receivedBytes` (integer)

  - `meta.processors.download.data.url` (string)

  - `meta.processors.download.data.startedAt` (string)

  - `meta.processors.download.data.state` (string)

  - `meta.processors.download.data.mimeType` (string)

  - `meta.processors.download.data.mimeDescription` (string)

  - `meta.processors.download.data.sha256` (string)

  - `meta.processors.download.data.finishedAt` (string)

  - `meta.processors.wappa` (object)

  - `meta.processors.wappa.data` (array)
    Wappalyzer technology detection for fully loaded page

  - `meta.processors.wappa.data.confidence` (array)

  - `meta.processors.wappa.data.confidence.confidence` (integer)

  - `meta.processors.wappa.data.confidence.pattern` (string)

  - `meta.processors.wappa.data.confidenceTotal` (integer)

  - `meta.processors.wappa.data.app` (string)

  - `meta.processors.wappa.data.icon` (string)

  - `meta.processors.wappa.data.website` (string)

  - `meta.processors.wappa.data.categories` (array)

  - `meta.processors.wappa.data.categories.groups` (array)

  - `meta.processors.wappa.data.categories.name` (string)

  - `meta.processors.wappa.data.categories.priority` (integer)

  - `task` (object)
    Information about the scan task including configuration, URLs, and submission details

  - `task.uuid` (string)
    The unique ID of the scan

  - `task.time` (string)
    Time the scan was created

  - `task.url` (string)
    The URL that was tasked

  - `task.domain` (string)
    Hostname from task.url

  - `task.apexDomain` (string)
    The registered second-level domain of the task hostname

  - `task.visibility` (string)
    Visibility of the task
    Enum: "public", "unlisted", "private"

  - `task.options` (object)
    Options supplied to the scan (not standardised yet)

  - `task.method` (string)
    The method of how the URL was tasked
    Enum: "api", "manual", "automatic", "urlscan-observe"

  - `task.source` (string)

  - `task.userAgent` (string)

  - `task.reportURL` (string)

  - `task.screenshotURL` (string)

  - `task.domURL` (string)

  - `task.tags` (array)
    User-supplied tags submitted during submission

  - `page` (object)
    Information about the scanned page including server details, location, and network properties

  - `page.url` (string)
    The URL of the "primary request", i.e., the HTML document loaded last after all redirects

  - `page.domain` (string)
    Hostname from page.url

  - `page.apexDomain` (string)
    The registered second-level domain of the page.domain

  - `page.country` (string)
    GeoIP Country Information about the IP contacted for the primary request

  - `page.city` (string)
    GeoIP City Information about the IP contacted for the primary request

  - `page.server` (string)
    HTTP "Server" header of the primary request response

  - `page.ip` (string)
    IP contacted for the primary request

  - `page.ptr` (string)
    DNS PTR record for the primary IP

  - `page.asn` (string)
    AS (Autonomous System) number of the primary IP

  - `page.asnname` (string)
    AS (Autonomous System) name of the primary IP

  - `page.title` (string)
    Title of the website

  - `page.mimeType` (string)
    Page MIME type

  - `page.status` (string)
    HTTP response code for primary page

  - `page.language` (string)
    Detected page language

  - `page.redirected` (string)
    Whether the page was redirected

  - `page.umbrellaRank` (integer)
    Cisco Umbrella rank of the page hostname

  - `page.apexDomainAgeDays` (integer)
    Age of the apex domain in days at the time of the scan

  - `page.domainAgeDays` (integer)
    Age of the domain in days at the time of the scan

  - `page.tlsAgeDays` (integer)
    Age of the TLS certificate at the time of scanning

  - `page.tlsValidDays` (integer)
    Validity period of the TLS certificate in days

  - `page.tlsValidFrom` (string)
    ISO 8601 timestamp of valid-from date for page TLS certificate

  - `page.tlsIssuer` (string)
    TLS issuer name for the TLS cert of the page

  - `lists` (object)
    Aggregated lists of unique domains, IPs, URLs, ASNs, servers, certificates and hashes.

  - `lists.ips` (array)
    IPs contacted

  - `lists.countries` (array)
    GeoIP country of IPs contacted (ISO-3166)

  - `lists.asns` (array)
    AS Numbers contacted

  - `lists.domains` (array)
    Hostnames contacted

  - `lists.servers` (array)
    Unique HTTP "Server" headers of responses

  - `lists.urls` (array)
    URLs requested

  - `lists.linkDomains` (array)
    Unique hostnames of links

  - `lists.certificates` (array)
    TLS Certificates of responses

  - `lists.certificates.subjectName` (string)

  - `lists.certificates.issuer` (string)

  - `lists.certificates.validFrom` (integer)

  - `lists.certificates.validTo` (integer)

  - `lists.hashes` (array)
    SHA256 hashes of HTTP response bodies

  - `verdicts` (object)
    Security verdicts and threat analysis from multiple sources including urlscan.io, third-party engines, and community ratings

  - `verdicts.overall` (object)
    Aggregated verdict combining urlscan, engines, and community signals

  - `verdicts.overall.score` (integer)
    Maliciousness score (-100 to 100, with -100 being benign and 100 being malicious)

  - `verdicts.overall.categories` (array)
    Maliciousness categories (e.g., "phishing")

  - `verdicts.overall.brands` (array)
    Brand detections

  - `verdicts.overall.brands.key` (string)
    Brand key

  - `verdicts.overall.brands.name` (string)
    Brand name

  - `verdicts.overall.brands.country` (array)
    Brand countries (ISO-3166)

  - `verdicts.overall.brands.vertical` (array)
    Brand industry verticals

  - `verdicts.overall.tags` (array)

  - `verdicts.overall.malicious` (boolean)

  - `verdicts.overall.hasVerdicts` (boolean)

  - `verdicts.urlscan` (object)
    urlscan.io's own verdict for this scan

  - `verdicts.urlscan.score` (integer)
    Maliciousness score (-100 to 100, with -100 being benign and 100 being malicious)

  - `verdicts.urlscan.categories` (array)
    Maliciousness categories (e.g., "phishing")

  - `verdicts.urlscan.brands` (array)
    Brand detections

  - `verdicts.urlscan.brands.key` (string)
    Brand key

  - `verdicts.urlscan.brands.name` (string)
    Brand name

  - `verdicts.urlscan.brands.country` (array)
    Brand countries (ISO-3166)

  - `verdicts.urlscan.brands.vertical` (array)
    Brand industry verticals

  - `verdicts.urlscan.tags` (array)

  - `verdicts.urlscan.malicious` (boolean)

  - `verdicts.urlscan.hasVerdicts` (boolean)

  - `verdicts.engines` (object)
    Aggregated verdicts from third-party detection engines

  - `verdicts.engines.score` (integer)

  - `verdicts.engines.categories` (array)

  - `verdicts.engines.brands` (array)

  - `verdicts.engines.brands.key` (string)
    Brand key

  - `verdicts.engines.brands.name` (string)
    Brand name

  - `verdicts.engines.brands.country` (array)
    Brand countries (ISO-3166)

  - `verdicts.engines.brands.vertical` (array)
    Brand industry verticals

  - `verdicts.engines.tags` (array)

  - `verdicts.engines.malicious` (boolean)

  - `verdicts.engines.enginesTotal` (integer)

  - `verdicts.engines.maliciousTotal` (integer)

  - `verdicts.engines.benignTotal` (integer)

  - `verdicts.engines.verdicts` (array)

  - `verdicts.engines.verdicts.engine` (string)

  - `verdicts.engines.verdicts.classification` (string)

  - `verdicts.engines.maliciousVerdicts` (array)

  - `verdicts.engines.benignVerdicts` (array)

  - `verdicts.engines.hasVerdicts` (boolean)

  - `verdicts.community` (object)
    Community-sourced verdicts and votes

  - `verdicts.community.score` (integer)

  - `verdicts.community.categories` (array)

  - `verdicts.community.brands` (array)

  - `verdicts.community.brands.key` (string)
    Brand key

  - `verdicts.community.brands.name` (string)
    Brand name

  - `verdicts.community.brands.country` (array)
    Brand countries (ISO-3166)

  - `verdicts.community.brands.vertical` (array)
    Brand industry verticals

  - `verdicts.community.tags` (array)

  - `verdicts.community.malicious` (boolean)

  - `verdicts.community.votesBenign` (integer)

  - `verdicts.community.votesMalicious` (integer)

  - `verdicts.community.votesTotal` (integer)

  - `verdicts.community.hasVerdicts` (boolean)

  - `submitter` (object)
    Information about the entity that submitted the scan request

  - `submitter.country` (string)

  - `scanner` (object)
    Information about the scanner that performed the scan

  - `scanner.country` (string)

  - `visible` (object)
    Information made visible on the public report (e.g. detected brand)

  - `visible.brandname` (string)
    Name of the detected brand, if any

  - `labels` (array)
    System labels controlled by urlscan. Only in urlscan Pro

  - `usertags` (array)
    User-defined tags applied by Saved Searches. Only in urlscan Pro

  - `metatags` (array)
    Meta information about the scan and matched searches, e.g. the IDs of Saved Searches that this item has matched - Only in urlscan Pro (Attention: This field is called meta in the Search API)