Skip to main content

Download With Dependencies Web Threat Intelligence

Note: Support for this pack moved to the partner on September 21, 2021. Please
contact the partner directly via the support link on the right. is a free service to scan and analyse third-party websites. When a
URL is submitted to, an automated process will browse to the URL
like a regular user and record the activity that this page navigation creates.
This includes the domains and IPs contacted, the resources (JavaScript, CSS,
etc) requested from those domains, file downloads that were triggered, as well
as additional information about the page itself. will take a
screenshot of the page, record the DOM content, JavaScript global variables,
cookies created by the page, and a myriad of other observations. If the site is
targeting the users one of the more than 660 brands tracked by, it
will be highlighted as potentially malicious in the scan results.

To use the integration, sign up for a free user account and create an API key first. has a free user tier which will allow you to perform 50 private
scans and 5,000 public scans as well as 1,000 searches on our platform. If you
need to perform more scans you can subscribe to one of our commercial API plans
available on our product page. If you are also
interested in a Threat Intelligence platform subscription you should take a
look at our "urlscan Pro - Threat Hunting" platform.

The content pack includes commands for:

  • Submitting URLs for scanning with different levels of visibility.
  • Using the Search API to find scans on the platform by a variety of indicators.
  • Retrieves the HTTP transactions made for a given URL using the URLScan integration.


urlscan GmbH


Cortex XSOARCortex XSIAM


CertificationRead more
Supported ByPartner
CreatedJuly 23, 2020
Last ReleaseOctober 30, 2023

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.