Note: Support for this pack moved to the partner on September 21, 2021. Please
contact the partner directly via the support link on the right.
urlscan.io is a free service to scan and analyse third-party websites. When a
URL is submitted to urlscan.io, an automated process will browse to the URL
like a regular user and record the activity that this page navigation creates.
This includes the domains and IPs contacted, the resources (JavaScript, CSS,
etc) requested from those domains, file downloads that were triggered, as well
as additional information about the page itself. urlscan.io will take a
screenshot of the page, record the DOM content, JavaScript global variables,
cookies created by the page, and a myriad of other observations. If the site is
targeting the users one of the more than 660 brands tracked by urlscan.io, it
will be highlighted as potentially malicious in the scan results.
To use the urlscan.io integration, sign up for a free user account and create an API key first.
urlscan.io has a free user tier which will allow you to perform 50 private
scans and 5,000 public scans as well as 1,000 searches on our platform. If you
need to perform more scans you can subscribe to one of our commercial API plans
available on our product page. If you are also
interested in a Threat Intelligence platform subscription you should take a
look at our "urlscan Pro - Threat Hunting"
platform.
The urlscan.io content pack includes commands for:
- Submitting URLs for scanning with different levels of visibility.
- Using the urlscan.io Search API to find scans on the platform by a variety of indicators.
- Retrieves the HTTP transactions made for a given URL using the URLScan integration.
Pack Contributors:
- Ryan McVicar
Contributions are welcome and appreciated. For more info, visit our Contribution Guide.
