Skip to main content
Introducing Polarity Intel Edition: Streamlining Intel Distribution for SecOps
Polarity Intel Edition
Request a Demo

UrlScan.io

urlscan.io is a free service to scan and analyse websites. When a URL is submitted to urlscan.io, an automated process will browse to the URL like a regular user and record the activity that this page navigation creates. This includes the domains and IPs contacted, the resources (JavaScript, CSS, etc) requested from those domains, as well as additional information about the page itself. urlscan.io will take a screenshot of the page, record the DOM content, JavaScript global variables, cookies created by the page, and a myriad of other observations. If the site is targeting the users one of the more than 400 brands tracked by urlscan.io, it will be highlighted as potentially malicious in the scan results.

Integrations

urlscan.io

With this integration, you have the ability to submit a url for analysis and retrieve results for the submitted URL.

The following actions are available:

  • Submit URL: Submit a single URL to urlscan.io for analysis
  • Get Results: Retrieve results for a previously submitted URL.
  • Advanced Request: Users may access the full urlscan.io API.

This listing can be found in the ThreatConnect App Catalog under the name urlscan.io.

Keep Reading

Related Resources

dark orange ThreatConnect TC logo

Built By ThreatConnect

urlscan.io with Polarity

The Polarity - urlscan.io integration enables users to quickly understand if the community thinks a domain/url or ip is potentially related to malicious behavior, while also getting screenshots of the site, and site information.

Examples

urlscan.io Data Overview

  • Summary Tags: Quickly get an understanding of what the domain/url or ip might be related, its maliciousness level, urlscan's score, and what it is associated with.
  • Domain/Url Image: See a snapshot of the site to get an idea of what is occurring with the domain or url.
  • Verdicts: The verdicts are what urlscan.io deems an indicator to be and what it might be associated with. Here you can get an idea of the score, any brands it might be associated with and the category.
  • Tags: Quickly get an understanding of the different tags that have been applied to an indicator such as phishing.
  • Scan Information: Get the information from the scan that urlscan.io performed. Such as when it was, how the scan was executed and the visibility of the scan.
  • Site Statistics: Information about the site scanned. Such as: number of associated IPs, data length and site information.
Keep Reading

Related Resources

Built By Polarity

Looking for an
integration not shown?