rakazo
6.2k
Get started

urlscan.io

Submit and retrieve website scans, search urlscan.io data, and manage urlscan Pro resources for threat intelligence and security investigations.

50 actionsAPI key

Connect urlscan.io

What your bot can do in urlscan.io

Looks up

  • Download Captured FileRetrieve a captured binary file by its SHA-256 hash as a password-encrypted ZIP archive.
  • Get Account CapabilitiesGet non-sensitive plan, product, feature, visibility, submission, and limit information for the connected urlscan.io API key.
  • Get API QuotasGet current products, features, query capabilities, and per-action minute, hour, and day quota usage.
  • Get Available BrandsList brand identifiers and metadata tracked by urlscan.io brand and phishing detection.
  • Get Available Scan CountriesList scanner country codes currently accepted by the Scan API.
  • Get Brand SummaryReturn detectable brands with detected-page totals and latest hits.
  • Get Captured Response ContentReturn textual content captured in a scan response, addressed by its SHA-256 hash.
  • Get Data Dump Download LinkGenerate a temporary download URL for a path returned by LIST_DATA_DUMPS.
  • Get Hostname HistoryReturn one page of historical Pro Hostnames observations for a hostname.
  • Get IncidentGet one incident's configuration, source, runtime state, and timestamps.
Show 18 more
  • Get Incident StatesRetrieve the stored state history for an incident.
  • Get Live Scan ResourceRetrieve one temporary result, DOM, screenshot, captured response, or download from the separate urlscan.io Live Scanning product.
  • Get Notification ChannelGet one urlscan Pro notification channel by ID while preserving provider-specific metadata and removing webhook destinations or credentials.
  • Get Saved Search ResultsRun a urlscan Pro saved search and return its current Search API results.
  • Get Scan DOMReturn the plain-text DOM snapshot captured for a completed scan.
  • Get Scan ResultRetrieve the complete metadata and captured request data for a completed scan UUID.
  • Get Scan ScreenshotRetrieve a completed urlscan.io scan screenshot as a downloadable PNG file reference.
  • Get Scan User AgentsList grouped browser user-agent strings available for scan submission.
  • Get Similar Scan ResultsFind one page of scan results structurally similar to a specified scan.
  • Get Subscription ResultsResolve a urlscan Pro alert subscription and datasource to its current Search API results.
  • Get Watchable Incident AttributesList attribute values accepted when configuring incident change monitoring.
  • List Alert SubscriptionsList alert subscriptions configured for the current user.
  • List Data DumpsList available urlscan.io data-dump files for a time window, file type, and date.
  • List Live ScannersList Live Scanning nodes available to the connected account and their current metadata.
  • List Notification ChannelsList email and webhook notification channels for the current user without returning webhook URLs or embedded credentials.
  • List Saved SearchesList saved searches owned by or shared with the current user.
  • Lookup Malicious ObservableLook up malicious-scan occurrence counts and first/last seen timestamps for an IP, hostname, domain, or exact URL.
  • Search ScansSearch urlscan.io data with Elasticsearch Query String syntax and return one controllable page of results.

Takes action

  • Close IncidentStop ongoing scans for an active urlscan Pro incident and transition it to the closed state.
  • Copy IncidentCreate a separate urlscan Pro incident from an existing incident's configuration.
  • Create Alert SubscriptionCreate a persistent scheduled or live alert subscription for saved searches.
  • Create IncidentCreate a Pro incident that persistently monitors an observable.
  • Create Live Scan TaskStart a non-blocking temporary Live Scan on a selected scanner and return its UUID immediately without waiting for completion.
  • Create Notification ChannelCreate a Pro notification channel.
  • Create Saved SearchCreate a reusable scans or hostnames search definition.
  • Delete Alert SubscriptionPermanently delete an alert subscription by ID.
  • Delete Saved SearchPermanently delete a saved search by ID.
  • Delete Scan ResultPermanently delete a scan owned by the connected user or team.
Show 12 more
  • Fork IncidentCreate a new Pro incident by copying an existing incident's configuration and complete stored state history.
  • Purge Live Scan ResultPermanently delete a temporary result from the separate urlscan.io Live Scanning product before its normal expiration.
  • Reset Scan VisibilityRemove an owned scan's visibility override and restore the visibility originally assigned at submission.
  • Restart IncidentRestart a closed urlscan Pro incident and extend its expiry.
  • Run Blocking Live ScanRun a temporary Live Scan synchronously and return only after the provider finishes the scan.
  • Store Live Scan ResultPermanently store an existing temporary Live Scan result with the selected visibility.
  • Submit ScanSubmit a URL for asynchronous external scanning, creating persistent result state and consuming quota.
  • Update Alert SubscriptionReplace the complete configuration of an existing alert subscription.
  • Update IncidentReplace an existing incident's monitoring configuration and runtime options.
  • Update Notification ChannelReplace the complete configuration of an existing Pro notification channel.
  • Update Saved SearchReplace the complete definition and metadata of an existing saved search.
  • Update Scan VisibilityChange the visibility of a scan owned by the connected user or team.

More security & ops apps