URLScan.io

API

Scan and analyze URLs for malware, phishing, and threats

Overview

The URLScan.io API enables developers to submit URLs for security analysis, retrieve detailed scan results, and search past scans. Key endpoints include POST /api/v1/scan (submit URLs for scanning), GET /api/v1/result/{uuid} (fetch results by scan UUID), and GET /api/v1/search/ (query historical scans). Responses are JSON-formatted, providing insights like domain reputation, malware detection, phishing indicators, network traffic, and page content analysis. Use cases include integrating threat detection into apps, automating suspicious link checks, monitoring phishing campaigns, and enhancing enterprise security workflows.

Example Integration (JavaScript)

script.js JS


fetch('https://urlscan.io/about-api/')
  .then(res => res.json())
  .then(data => console.log(data))
  .catch(err => console.error(err));

Key Features

RESTful API
JSON Responses
URL Submission & Analysis
Search Past Scans
Public/Private Scan Options
Detailed Threat Insights

Frequently Asked Questions

? Is URLScan.io API free to use?

Yes, URLScan.io offers a free tier for public scans with rate limits. Private scans and advanced features (like higher rate limits) require a paid subscription.

? Does it require an API Key?

Yes, an API key is required for most endpoints (e.g., submitting scans). You can obtain it from your URLScan.io account settings.

? What is the response format?

All API responses are in JSON format, including scan results, search outputs, and error messages.

Top Alternatives

VirusTotal API Search Google

Google Safe Browsing API Search Google

Hybrid Analysis API Search Google

Tool Info

Pricing Freemium

Category Anti-Malware

Platform Public API

Pros

⊕ Easy to Integrate
⊕ Comprehensive Scan Reports
⊕ Free Tier Available
⊕ Automation-Friendly
⊕ Supports Advanced Search

Cons

⊖ Rate Limits on Free Tier
⊖ Private Scans Require Paid Plan
⊖ No SLA for Free Users
⊖ Limited Advanced Features in Free Tier