# Result

Using the Scan ID received from the Submission API, you can use the Result API to poll for the scan. The most efficient approach would be to wait at least 10 seconds before starting to poll, and then only polling 2-second intervals with an eventual upper timeout in case the scan does not return.

Endpoint: GET /api/v1/result/{scanId}/
Version: 1.0.0
Security: apikeyAuth

## Path parameters:

  - `scanId` (string, required)
    UUID of scan result

## Response 200 fields (application/json):

  - `data` (object)
    Raw scan data including network requests, responses, cookies, console logs, and page elements

  - `data.requests` (array)

  - `data.requests.request` (object)

  - `data.requests.request.requestId` (string)

  - `data.requests.request.loaderId` (string)

  - `data.requests.request.documentURL` (string)

  - `data.requests.request.request` (object)

  - `data.requests.request.request.url` (string)

  - `data.requests.request.request.method` (string)

  - `data.requests.request.request.headers` (object)

  - `data.requests.request.request.mixedContentType` (string)

  - `data.requests.request.request.initialPriority` (string)

  - `data.requests.request.request.referrerPolicy` (string)

  - `data.requests.request.request.isSameSite` (boolean)

  - `data.requests.request.request.isLinkPreload` (boolean)

  - `data.requests.request.timestamp` (number)

  - `data.requests.request.wallTime` (number)

  - `data.requests.request.initiator` (object)

  - `data.requests.request.initiator.type` (string)

  - `data.requests.request.initiator.url` (string)

  - `data.requests.request.initiator.lineNumber` (integer)

  - `data.requests.request.initiator.columnNumber` (integer)

  - `data.requests.request.redirectHasExtraInfo` (boolean)

  - `data.requests.request.type` (string)

  - `data.requests.request.frameId` (string)

  - `data.requests.request.hasUserGesture` (boolean)

  - `data.requests.request.primaryRequest` (boolean)

  - `data.requests.response` (object)

  - `data.requests.response.encodedDataLength` (integer)

  - `data.requests.response.dataLength` (integer)

  - `data.requests.response.requestId` (string)

  - `data.requests.response.type` (string)

  - `data.requests.response.hasExtraInfo` (boolean)

  - `data.requests.response.hash` (string)

  - `data.requests.response.size` (integer)

  - `data.requests.response.asn` (object)

  - `data.requests.response.asn.ip` (string)

  - `data.requests.response.asn.asn` (string)

  - `data.requests.response.asn.country` (string)

  - `data.requests.response.asn.registrar` (string)

  - `data.requests.response.asn.date` (string)

  - `data.requests.response.asn.description` (string)

  - `data.requests.response.asn.route` (string)

  - `data.requests.response.asn.name` (string)

  - `data.requests.response.geoip` (object)

  - `data.requests.response.geoip.country` (string)

  - `data.requests.response.geoip.region` (string)

  - `data.requests.response.geoip.timezone` (string)

  - `data.requests.response.geoip.city` (string)

  - `data.requests.response.geoip.ll` (array)

  - `data.requests.response.geoip.country_name` (string)

  - `data.requests.response.geoip.metro` (integer)

  - `data.requests.response.geoip.area` (integer)

  - `data.requests.response.rdns` (object)

  - `data.requests.response.rdns.ip` (string)

  - `data.requests.response.rdns.ptr` (string)

  - `data.requests.response.response` (object)

  - `data.requests.response.response.url` (string)

  - `data.requests.response.response.status` (integer)

  - `data.requests.response.response.statusText` (string)

  - `data.requests.response.response.headers` (object)

  - `data.requests.response.response.mimeType` (string)

  - `data.requests.response.response.remoteIPAddress` (string)

  - `data.requests.response.response.remotePort` (integer)

  - `data.requests.response.response.encodedDataLength` (integer)

  - `data.requests.response.response.timing` (object)

  - `data.requests.response.response.timing.requestTime` (number)

  - `data.requests.response.response.timing.proxyStart` (number)

  - `data.requests.response.response.timing.proxyEnd` (number)

  - `data.requests.response.response.timing.dnsStart` (number)

  - `data.requests.response.response.timing.dnsEnd` (number)

  - `data.requests.response.response.timing.connectStart` (number)

  - `data.requests.response.response.timing.connectEnd` (number)

  - `data.requests.response.response.timing.sslStart` (number)

  - `data.requests.response.response.timing.sslEnd` (number)

  - `data.requests.response.response.timing.workerStart` (number)

  - `data.requests.response.response.timing.workerReady` (number)

  - `data.requests.response.response.timing.workerFetchStart` (number)

  - `data.requests.response.response.timing.workerRespondWithSettled` (number)

  - `data.requests.response.response.timing.sendStart` (number)

  - `data.requests.response.response.timing.sendEnd` (number)

  - `data.requests.response.response.timing.pushStart` (number)

  - `data.requests.response.response.timing.pushEnd` (number)

  - `data.requests.response.response.timing.receiveHeadersStart` (number)

  - `data.requests.response.response.timing.receiveHeadersEnd` (number)

  - `data.requests.response.response.responseTime` (number)

  - `data.requests.response.response.protocol` (string)

  - `data.requests.response.response.alternateProtocolUsage` (string)

  - `data.requests.response.response.securityState` (string)

  - `data.requests.response.response.securityDetails` (object)

  - `data.requests.response.response.securityDetails.protocol` (string)

  - `data.requests.response.response.securityDetails.keyExchange` (string)

  - `data.requests.response.response.securityDetails.keyExchangeGroup` (string)

  - `data.requests.response.response.securityDetails.cipher` (string)

  - `data.requests.response.response.securityDetails.certificateId` (integer)

  - `data.requests.response.response.securityDetails.subjectName` (string)

  - `data.requests.response.response.securityDetails.sanList` (array)

  - `data.requests.response.response.securityDetails.issuer` (string)

  - `data.requests.response.response.securityDetails.validFrom` (integer)

  - `data.requests.response.response.securityDetails.validTo` (integer)

  - `data.requests.response.response.securityDetails.signedCertificateTimestampList` (array)

  - `data.requests.response.response.securityDetails.certificateTransparencyCompliance` (string)

  - `data.requests.response.response.securityDetails.serverSignatureAlgorithm` (integer)

  - `data.requests.response.response.securityDetails.encryptedClientHello` (boolean)

  - `data.requests.response.response.securityHeaders` (array)

  - `data.requests.response.response.securityHeaders.name` (string)

  - `data.requests.response.response.securityHeaders.value` (string)

  - `data.requests.initiatorInfo` (object)

  - `data.requests.initiatorInfo.url` (string)

  - `data.requests.initiatorInfo.host` (string)

  - `data.requests.initiatorInfo.type` (string)

  - `data.cookies` (array)

  - `data.console` (array)

  - `data.links` (array)

  - `data.links.href` (string)

  - `data.links.text` (string)

  - `data.timing` (object)

  - `data.globals` (array)

  - `data.storages` (array)

  - `data.redirects` (array)

  - `stats` (object)
    Statistical analysis of the scan including resource counts, protocols, security metrics, and geographic distribution

  - `stats.resourceStats` (array)

  - `stats.resourceStats.count` (integer)

  - `stats.resourceStats.size` (integer)

  - `stats.resourceStats.encodedSize` (integer)

  - `stats.resourceStats.latency` (number)

  - `stats.resourceStats.countries` (array)

  - `stats.resourceStats.ips` (array)

  - `stats.resourceStats.type` (string)

  - `stats.resourceStats.compression` (string)

  - `stats.resourceStats.percentage` (integer)

  - `stats.protocolStats` (array)

  - `stats.protocolStats.count` (integer)

  - `stats.protocolStats.size` (integer)

  - `stats.protocolStats.encodedSize` (integer)

  - `stats.protocolStats.latency` (number)

  - `stats.protocolStats.countries` (array)

  - `stats.protocolStats.ips` (array)

  - `stats.protocolStats.percentage` (integer)

  - `stats.protocolStats.protocol` (string)

  - `stats.protocolStats.securityState` (object)

  - `stats.tlsStats` (array)

  - `stats.tlsStats.count` (integer)

  - `stats.tlsStats.size` (integer)

  - `stats.tlsStats.encodedSize` (integer)

  - `stats.tlsStats.latency` (number)

  - `stats.tlsStats.countries` (array)

  - `stats.tlsStats.ips` (array)

  - `stats.tlsStats.percentage` (integer)

  - `stats.tlsStats.protocols` (object)

  - `stats.tlsStats.securityState` (string)

  - `stats.serverStats` (array)

  - `stats.serverStats.count` (integer)

  - `stats.serverStats.size` (integer)

  - `stats.serverStats.encodedSize` (integer)

  - `stats.serverStats.latency` (number)

  - `stats.serverStats.countries` (array)

  - `stats.serverStats.ips` (array)

  - `stats.serverStats.percentage` (integer)

  - `stats.serverStats.server` (string)

  - `stats.domainStats` (array)

  - `stats.domainStats.count` (integer)

  - `stats.domainStats.ips` (array)

  - `stats.domainStats.redirects` (integer)

  - `stats.domainStats.size` (integer)

  - `stats.domainStats.encodedSize` (integer)

  - `stats.domainStats.countries` (array)

  - `stats.domainStats.index` (integer)

  - `stats.domainStats.initiators` (array)

  - `stats.domainStats.requests` (integer)

  - `stats.domainStats.domain` (string)

  - `stats.regDomainStats` (array)

  - `stats.regDomainStats.count` (integer)

  - `stats.regDomainStats.ips` (array)

  - `stats.regDomainStats.redirects` (integer)

  - `stats.regDomainStats.size` (integer)

  - `stats.regDomainStats.encodedSize` (integer)

  - `stats.regDomainStats.countries` (array)

  - `stats.regDomainStats.index` (integer)

  - `stats.regDomainStats.initiators` (array)

  - `stats.regDomainStats.requests` (integer)

  - `stats.regDomainStats.regDomain` (string)

  - `stats.regDomainStats.subDomains` (array)

  - `stats.regDomainStats.subDomains.domain` (string)

  - `stats.regDomainStats.subDomains.country` (string)

  - `stats.secureRequests` (integer)

  - `stats.securePercentage` (integer)

  - `stats.IPv6Percentage` (integer)

  - `stats.uniqCountries` (integer)

  - `stats.totalLinks` (integer)

  - `stats.maliciousRequests` (integer)

  - `stats.adBlocked` (integer)

  - `stats.malicious` (integer)

  - `stats.ipStats` (array)

  - `stats.ipStats.requests` (integer)

  - `stats.ipStats.domains` (array)

  - `stats.ipStats.ips` (array)

  - `stats.ipStats.countries` (array)

  - `stats.ipStats.asns` (array)

  - `stats.ipStats.asns.asn` (string)

  - `stats.ipStats.asns.country` (string)

  - `stats.ipStats.asns.organisation` (string)

  - `stats.ipStats.encoded_size` (integer)

  - `stats.ipStats.size` (integer)

  - `stats.ipStats.redirects` (integer)

  - `stats.ipStats.ip` (string)

  - `stats.ipStats.asn` (object)

  - `stats.ipStats.asn.ip` (string)

  - `stats.ipStats.asn.asn` (string)

  - `stats.ipStats.asn.country` (string)

  - `stats.ipStats.asn.registrar` (string)

  - `stats.ipStats.asn.date` (string)

  - `stats.ipStats.asn.description` (string)

  - `stats.ipStats.asn.route` (string)

  - `stats.ipStats.asn.name` (string)

  - `stats.ipStats.dns` (object)

  - `stats.ipStats.geoip` (object)

  - `stats.ipStats.geoip.country` (string)

  - `stats.ipStats.geoip.region` (string)

  - `stats.ipStats.geoip.timezone` (string)

  - `stats.ipStats.geoip.city` (string)

  - `stats.ipStats.geoip.ll` (array)

  - `stats.ipStats.geoip.country_name` (string)

  - `stats.ipStats.geoip.metro` (integer)

  - `stats.ipStats.geoip.area` (integer)

  - `stats.ipStats.encodedSize` (integer)

  - `stats.ipStats.index` (integer)

  - `stats.ipStats.ipv6` (boolean)

  - `stats.ipStats.count` (integer,null)

  - `stats.ipStats.rdns` (object)

  - `stats.ipStats.rdns.ip` (string)

  - `stats.ipStats.rdns.ptr` (string)

  - `meta` (object)
    Enriched metadata from external processors including domain rankings, geolocation, DNS records, and ASN information

  - `meta.processors` (object)

  - `meta.processors.umbrella` (object)

  - `meta.processors.umbrella.data` (array)

  - `meta.processors.umbrella.data.hostname` (string)

  - `meta.processors.umbrella.data.rank` (integer)

  - `meta.processors.geoip` (object)

  - `meta.processors.geoip.data` (array)

  - `meta.processors.geoip.data.ip` (string)

  - `meta.processors.geoip.data.geoip` (object)

  - `meta.processors.geoip.data.geoip.country` (string)

  - `meta.processors.geoip.data.geoip.country_name` (string)

  - `meta.processors.geoip.data.geoip.region` (string)

  - `meta.processors.geoip.data.geoip.timezone` (string)

  - `meta.processors.geoip.data.geoip.city` (string)

  - `meta.processors.geoip.data.geoip.ll` (array)

  - `meta.processors.geoip.data.geoip.metro` (integer)

  - `meta.processors.geoip.data.geoip.area` (integer)

  - `meta.processors.rdns` (object)

  - `meta.processors.rdns.data` (array)

  - `meta.processors.rdns.data.ip` (string)

  - `meta.processors.rdns.data.ptr` (string)

  - `meta.processors.asn` (object)

  - `meta.processors.asn.data` (array)

  - `meta.processors.asn.data.ip` (string)

  - `meta.processors.asn.data.asn` (string)

  - `meta.processors.asn.data.country` (string)

  - `meta.processors.asn.data.organisation` (string)

  - `meta.processors.asn.data.registrar` (string)

  - `meta.processors.asn.data.date` (string)

  - `meta.processors.asn.data.description` (string)

  - `meta.processors.asn.data.route` (string)

  - `meta.processors.asn.data.name` (string)

  - `meta.processors.wappa` (object)

  - `meta.processors.wappa.data` (array)

  - `meta.processors.wappa.data.confidence` (array)

  - `meta.processors.wappa.data.confidence.confidence` (integer)

  - `meta.processors.wappa.data.confidence.pattern` (string)

  - `meta.processors.wappa.data.confidenceTotal` (integer)

  - `meta.processors.wappa.data.app` (string)

  - `meta.processors.wappa.data.icon` (string)

  - `meta.processors.wappa.data.website` (string)

  - `meta.processors.wappa.data.categories` (array)

  - `meta.processors.wappa.data.categories.name` (string)

  - `meta.processors.wappa.data.categories.id` (string)

  - `meta.processors.wappa.data.categories.priority` (integer)

  - `task` (object)
    Information about the scan task including configuration, URLs, and submission details

  - `task.uuid` (string)

  - `task.time` (string)

  - `task.url` (string)

  - `task.visibility` (string)
    Enum: "public", "unlisted", "private"

  - `task.options` (object)

  - `task.method` (string)

  - `task.source` (string)

  - `task.userAgent` (string)

  - `task.reportURL` (string)

  - `task.screenshotURL` (string)

  - `task.domURL` (string)

  - `task.tags` (array)

  - `page` (object)
    Information about the scanned page including server details, location, and network properties

  - `page.country` (string)

  - `page.server` (string)

  - `page.city` (string)

  - `page.domain` (string)

  - `page.ip` (string)

  - `page.asnname` (string)

  - `page.asn` (string)

  - `page.url` (string)

  - `page.ptr` (string)

  - `lists` (object)
    Aggregated lists of unique elements found during the scan including IPs, domains, URLs, and certificates

  - `lists.ips` (array)

  - `lists.countries` (array)

  - `lists.asns` (array)

  - `lists.domains` (array)

  - `lists.servers` (array)

  - `lists.urls` (array)

  - `lists.linkDomains` (array)

  - `lists.certificates` (array)

  - `lists.certificates.subjectName` (string)

  - `lists.certificates.issuer` (string)

  - `lists.certificates.validFrom` (integer)

  - `lists.certificates.validTo` (integer)

  - `lists.hashes` (array)

  - `verdicts` (object)
    Security verdicts and threat analysis from multiple sources including urlscan.io, third-party engines, and community ratings

  - `verdicts.overall` (object)

  - `verdicts.overall.score` (integer)

  - `verdicts.overall.categories` (array)

  - `verdicts.overall.brands` (array)

  - `verdicts.overall.tags` (array)

  - `verdicts.overall.malicious` (boolean)

  - `verdicts.overall.hasVerdicts` (boolean)

  - `verdicts.urlscan` (object)

  - `verdicts.urlscan.score` (integer)

  - `verdicts.urlscan.categories` (array)

  - `verdicts.urlscan.brands` (array)

  - `verdicts.urlscan.tags` (array)

  - `verdicts.urlscan.malicious` (boolean)

  - `verdicts.urlscan.hasVerdicts` (boolean)

  - `verdicts.engines` (object)

  - `verdicts.engines.score` (integer)

  - `verdicts.engines.categories` (array)

  - `verdicts.engines.brands` (array)

  - `verdicts.engines.tags` (array)

  - `verdicts.engines.malicious` (boolean)

  - `verdicts.engines.enginesTotal` (integer)

  - `verdicts.engines.maliciousTotal` (integer)

  - `verdicts.engines.benignTotal` (integer)

  - `verdicts.engines.verdicts` (array)

  - `verdicts.engines.verdicts.engine` (string)

  - `verdicts.engines.verdicts.classification` (string)

  - `verdicts.engines.maliciousVerdicts` (array)

  - `verdicts.engines.benignVerdicts` (array)

  - `verdicts.engines.hasVerdicts` (boolean)

  - `verdicts.community` (object)

  - `verdicts.community.score` (integer)

  - `verdicts.community.categories` (array)

  - `verdicts.community.brands` (array)

  - `verdicts.community.tags` (array)

  - `verdicts.community.malicious` (boolean)

  - `verdicts.community.votesBenign` (integer)

  - `verdicts.community.votesMalicious` (integer)

  - `verdicts.community.votesTotal` (integer)

  - `verdicts.community.hasVerdicts` (boolean)

  - `submitter` (object)
    Information about the entity that submitted the scan request

  - `submitter.country` (string)

  - `scanner` (object)
    Information about the scanner that performed the scan

  - `scanner.country` (string)