urlscan.io
Connector Category: Enrichment Tool
About Integration
CTIX integrates with urlscan.io to enrich URLs and domains to provide you insights into their safety, reputation, and potential security risks.
Configure urlscan.io as an Enrichment Tool
Configure urlscan.io to enrich domains and URLs.
Before you Start
You must have the view, update, and create enrichment tools permissions in CTIX.
Steps
To configure urlscan.io as an enrichment tool in CTIX, do the following:
Sign in to CTIX and go to Administration > Enrichment Management > Enrichment Tools.
Search and select the urlscan.io enrichment tool.
Click Add Account and enter the following details:
Account Name: Enter a unique account name to identify the instance. For example, urlscan.
Base URL: Enter the base URL of your urlscan.io instance. The default base URL is
https://urlscan.io/api/v1/search/.(Optional) API Key: Enter the API key of your urlscan.io account to authenticate communication between the CTIX and urlscan.io servers.
Note
urlscan.io allows a limited number of scans per day for the free tier and does not require an API key. For more information, see https://urlscan.io/pricing/.
Click Save.
After successfully adding an account, you can view and enable the domain and URL feed enrichment types. You can also configure quota to define a limit to the number of enrichment requests CTIX makes to urlscan.io. After the quota expires, you cannot make enrichment requests until the quota resets for the next quota duration. For more information, see Define Quota in Configure Enrichment Tools.
To understand the number of API calls and quota units consumed by the urlscan.io enrichment tool per polling, refer to the following table.
Enrichment Tool | Feed Enrichment Type | No. of API calls | Quota Consumed |
|---|---|---|---|
urlscan.io | Domain | 1 | 1 |
URL | 1 | 1 |
You can configure an enrichment policy to automatically enrich threat data objects using the urlscan.io enrichment tool. For more information, see Configure Enrichment Policy.