urlscan.io

urlscan.io is a free service to scan and analyse websites. When a URL is submitted to urlscan.io, an automated process will browse to the URL like a regular user and record the activity that this page navigation creates. This includes the domains and IPs contacted, the resources (JavaScript, CSS, etc) requested from those domains, as well as additional information about the page itself. urlscan.io will take a screenshot of the page, record the DOM content, JavaScript global variables, cookies created by the page, and a myriad of other observations. If the site is targeting the users one of the more than 400 brands tracked by urlscan.io, it will be highlighted as potentially malicious in the scan results.

urlscan.io itself is a free service, but we also offer commercial products for heavy users and organisations that need additional insight.

Our Mission Our mission is to allow anyone to easily and confidently analyse unknown and potentially malicious websites. We realised early on that even for battle-hardened web developers and security researchers its a frustrating experience to record page interactions and additional metadata from websites, on the off chance of finding the needle in the haystack. Even worse, a single observation is often meaningless without the necessary context. Is this domain something that websites usually load third-party JavaScript from? Are any other reputable websites talking to this weird IP address on the Cayman Islands?

We created urlscan.io in late 2016 to solve these problems. Our focus has always been to break down the vast amount of data from a website page navigation into digestible chunks. We're analyst-first, we always strive to understand and anticipate the pieces of information that would be helpful during an investigation and the attributes that allow pivoting. Just like you would use a malware sandbox to analyse suspicious files, you can use urlscan.io to do the same thing but with URLs.