urlscan.io
Operator: urlscan GmbH, Germany
Analyses web pages in a browser sandbox and searches stored scans by technical characteristics.
Technical Infrastructure
Product
urlscan.io, a web sandbox with stored scan search and an API. Paid Pro research and API allowances have different plans.
Availability and source date
Active
As of: 16 October 2026.
No functionality test has been performed.
Use in OSINT research
Links domains and IPs to observed web pages, screen captures and loaded resources. Existing scans can be searched without triggering a new scan.
Queries
| Input | Result | Result type |
|---|---|---|
| Domain / website | Existing scans containing the domain, IP, ASN, file hash or filename. | Retrieved |
| IP address | Existing scans containing the domain, IP, ASN, file hash or filename. | Retrieved |
| ASN | Existing scans containing the domain, IP, ASN, file hash or filename. | Retrieved |
| File hash | Existing scans containing the domain, IP, ASN, file hash or filename. | Retrieved |
| Keyword / free text | Existing scans containing the domain, IP, ASN, file hash or filename. | Retrieved |
| URL | Browser capture of the submitted web page, with a screen capture, network requests and technical findings. | Technical check according to provider |
Features
- Search existing web scans by domain, IP, ASN, file hash or filename.
- Examine web pages in a browser sandbox.
- Capture screen captures, DOM content and loaded resources.
- Trace contacted domains, IPs and redirects.
- Store scans as public, unlisted or private.
- Process scans and results through the API.
Categories
- Technical Infrastructure
- Internet scanning
- Threat intelligence
Coverage
Dataset
Its own collection of web scans with screen captures, DOM, network requests and derived technical characteristics. Country coverage is not specified; comprehensive coverage of websites is not promised.
Access
Requirements
Public search and web analysis without an account, with lower limits. An account and API key are required for regular API allowances; additional search features depend on the plan.
Export
Structured scan results as JSON, screen captures as PNG and stored DOM content through the documented download endpoints.
Provider
urlscan GmbH
Country of establishment
Germany
Interfaces
API
Available. API for submitting scans, retrieving results and searching. An API key is recommended; lower allowances apply without signing in. All calls are subject to plan-dependent limits.
MCP
Not documented. Not specified on the product and API pages reviewed.
AI agents
Available. The provider lists the third-party integration Imperum as an agentic AI SecOps integration. Development and maintenance are the third party’s responsibility.
Usage note
The public terms permit your own personal use; commercial use requires the provider’s consent and separate terms.
Legal note
Limitations
- Public scans are publicly discoverable. Authorised Pro users can view unlisted scans; only private scans are restricted to the user and those with shared scan IDs.
- A scan is a snapshot at a particular time. Without an account and on the free plan, searches may be limited to more recent scans.
- Automate increases API allowances. The Pro research interface is included only in Professional and higher plans.
Guides and practical reports
Official · urlscan.io: API quick start
urlscan GmbH · EN
Explains API keys, scan submission and retrieval of JSON, screen captures and DOM.
Sources
- urlscan.io: website analysis
- urlscan.io: search existing scans
- urlscan.io: API introduction
- urlscan.io: scope of website analysis
- urlscan.io: changelog
- urlscan.io: scan visibility
- urlscan.io: API quick start
- urlscan.io: pricing and allowances
- urlscan.io: legal notice
- urlscan.io: terms of use
- urlscan.io: integrations