Publisher: Splunk
Connector Version: 2.3.0
Product Vendor: urlscan.io
Product Name: urlscan.io
Product Version Supported (regex): ".*"
Minimum Product Version: 5.3.3
This app supports investigative actions on urlscan.io
The api_key field is not required to use this app, as urlscan.io does not require an API key for querying its database. However, if you wish to start a scan with detonate url , then you will need an API key configured.
The app uses HTTP/ HTTPS protocol for communicating with the Urlscan server. Below are the default ports used by Splunk SOAR.
| Service Name | Transport Protocol | Port |
|---|---|---|
| http | tcp | 80 |
| https | tcp | 443 |
The below configuration variables are required for this Connector to operate. These variables are specified when configuring a urlscan.io asset in SOAR.
| VARIABLE | REQUIRED | TYPE | DESCRIPTION |
|---|---|---|---|
| api_key | optional | password | API key for urlscan.io |
| timeout | optional | numeric | Timeout period for action (seconds) |
test connectivity - Validate the asset configuration for connectivity using supplied configuration
get report - Query for results of an already completed detonation
lookup domain - Find information about a domain at urlscan.io
lookup ip - Find information about an IP address at urlscan.io
detonate url - Detonate a URL at urlscan.io
Validate the asset configuration for connectivity using supplied configuration
Type: test
Read only: True
This will attempt to connect by running an action which would require usage of the API key. If there is no API key set, it will still run a query to make sure the urlscan.io API can be queried.
No parameters are required for this action
No Output
Query for results of an already completed detonation
Type: investigate
Read only: True
| PARAMETER | REQUIRED | DESCRIPTION | TYPE | CONTAINS |
|---|---|---|---|---|
| id | required | Detonation ID for the desired report | string | urlscan submission id |
| DATA PATH | TYPE | CONTAINS |
|---|---|---|
| action_result.status | string | |
| action_result.parameter.id | string | urlscan submission id |
| action_result.data.*.data.console.*.message.column | numeric | |
| action_result.data.*.data.console.*.message.level | string | |
| action_result.data.*.data.console.*.message.line | numeric | |
| action_result.data.*.data.console.*.message.source | string | |
| action_result.data.*.data.console.*.message.text | string | |
| action_result.data.*.data.console.*.message.url | string | url |
| action_result.data.*.data.cookies.*.domain | string | domain |
| action_result.data.*.data.cookies.*.expires | numeric | |
| action_result.data.*.data.cookies.*.httpOnly | boolean | |
| action_result.data.*.data.cookies.*.name | string | |
| action_result.data.*.data.cookies.*.path | string | |
| action_result.data.*.data.cookies.*.priority | string | |
| action_result.data.*.data.cookies.*.sameParty | boolean | |
| action_result.data.*.data.cookies.*.sameSite | string | |
| action_result.data.*.data.cookies.*.secure | boolean | |
| action_result.data.*.data.cookies.*.session | boolean | |
| action_result.data.*.data.cookies.*.size | numeric | |
| action_result.data.*.data.cookies.*.sourcePort | numeric | |
| action_result.data.*.data.cookies.*.sourceScheme | string | |
| action_result.data.*.data.cookies.*.value | string | |
| action_result.data.*.data.globals.*.prop | string | |
| action_result.data.*.data.globals.*.type | string | |
| action_result.data.*.data.links.*.href | string | url |
| action_result.data.*.data.links.*.text | string | |
| action_result.data.*.data.requests.*.initiatorInfo.host | string | |
| action_result.data.*.data.requests.*.initiatorInfo.type | string | |
| action_result.data.*.data.requests.*.initiatorInfo.url | string | url |
| action_result.data.*.data.requests.*.request.documentURL | string | url |
| action_result.data.*.data.requests.*.request.frameId | string | |
| action_result.data.*.data.requests.*.request.hasUserGesture | boolean | |
| action_result.data.*.data.requests.*.request.initiator.columnNumber | numeric | |
| action_result.data.*.data.requests.*.request.initiator.lineNumber | numeric | |
| action_result.data.*.data.requests.*.request.initiator.stack.callFrames.*.columnNumber | numeric | |
| action_result.data.*.data.requests.*.request.initiator.stack.callFrames.*.functionName | string | |
| action_result.data.*.data.requests.*.request.initiator.stack.callFrames.*.lineNumber | numeric | |
| action_result.data.*.data.requests.*.request.initiator.stack.callFrames.*.scriptId | string | |
| action_result.data.*.data.requests.*.request.initiator.stack.callFrames.*.url | string | url |
| action_result.data.*.data.requests.*.request.initiator.type | string | |
| action_result.data.*.data.requests.*.request.initiator.url | string | url |
| action_result.data.*.data.requests.*.request.loaderId | string | |
| action_result.data.*.data.requests.*.request.primaryRequest | boolean | |
| action_result.data.*.data.requests.*.request.redirectResponse.encodedDataLength | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.fromPrefetchCache | boolean | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.* | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.Connection | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.Content-Length | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.Date | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.Location | string | url |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.Server | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.Strict-Transport-Security | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.mimeType | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.protocol | string | url |
| action_result.data.*.data.requests.*.request.redirectResponse.remoteIPAddress | string | ip ipv6 |
| action_result.data.*.data.requests.*.request.redirectResponse.remotePort | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Accept | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Accept-Encoding | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Accept-Language | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Cache-Control | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Connection | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Cookie | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Host | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Pragma | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Sec-Fetch-Dest | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Sec-Fetch-Mode | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Sec-Fetch-Site | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Sec-Fetch-User | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Upgrade-Insecure-Requests | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.User-Agent | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.responseTime | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.certificateId | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.certificateTransparencyCompliance | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.cipher | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.issuer | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.keyExchange | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.keyExchangeGroup | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.protocol | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.sanList | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.subjectName | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.validFrom | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.validTo | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityState | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.status | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.statusText | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.connectEnd | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.connectStart | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.dnsEnd | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.dnsStart | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.proxyEnd | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.proxyStart | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.pushEnd | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.pushStart | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.receiveHeadersEnd | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.requestTime | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.sendEnd | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.sendStart | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.sslEnd | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.sslStart | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.workerFetchStart | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.workerReady | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.workerRespondWithSettled | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.workerStart | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.url | string | url |
| action_result.data.*.data.requests.*.request.request.hasPostData | boolean | |
| action_result.data.*.data.requests.*.request.request.headers.* | string | |
| action_result.data.*.data.requests.*.request.request.headers.Content-Type | string | |
| action_result.data.*.data.requests.*.request.request.headers.Origin | string | url |
| action_result.data.*.data.requests.*.request.request.headers.Referer | string | url |
| action_result.data.*.data.requests.*.request.request.headers.Upgrade-Insecure-Requests | string | |
| action_result.data.*.data.requests.*.request.request.headers.User-Agent | string | |
| action_result.data.*.data.requests.*.request.request.initialPriority | string | |
| action_result.data.*.data.requests.*.request.request.method | string | |
| action_result.data.*.data.requests.*.request.request.mixedContentType | string | |
| action_result.data.*.data.requests.*.request.request.postData | string | |
| action_result.data.*.data.requests.*.request.request.postDataEntries.*.bytes | string | |
| action_result.data.*.data.requests.*.request.request.referrerPolicy | string | |
| action_result.data.*.data.requests.*.request.request.url | string | url |
| action_result.data.*.data.requests.*.request.requestId | string | |
| action_result.data.*.data.requests.*.request.timestamp | numeric | |
| action_result.data.*.data.requests.*.request.type | string | |
| action_result.data.*.data.requests.*.request.wallTime | numeric | |
| action_result.data.*.data.requests.*.requests.*.documentURL | string | url |
| action_result.data.*.data.requests.*.requests.*.frameId | string | md5 |
| action_result.data.*.data.requests.*.requests.*.hasUserGesture | boolean | |
| action_result.data.*.data.requests.*.requests.*.initiator.type | string | |
| action_result.data.*.data.requests.*.requests.*.loaderId | string | md5 |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.asn.asn | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.asn.country | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.asn.date | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.asn.description | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.asn.ip | string | ip ipv6 |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.asn.name | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.asn.registrar | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.asn.route | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.encodedDataLength | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.fromPrefetchCache | boolean | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.geoip.area | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.geoip.city | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.geoip.country | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.geoip.country_name | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.geoip.eu | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.geoip.ll | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.geoip.metro | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.geoip.range | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.geoip.region | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.geoip.timezone | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Cache-Control | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Connection | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Content-Language | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Content-Length | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Content-Security-Policy | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Content-Type | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Date | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Location | string | url |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Server | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Set-Cookie | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Strict-Transport-Security | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.X-Frame-Options | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.X-XSS-Protection | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.cache-control | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.content-language | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.content-length | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.content-security-policy | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.content-type | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.date | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.expect-ct | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.location | string | url |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.referrer-policy | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.server | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.set-cookie | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.strict-transport-security | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.x-content-type-options | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.x-frame-options | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.x-xss-protection | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.mimeType | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.protocol | string | url |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.rdns.ip | string | ip ipv6 |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.rdns.ptr | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.remoteIPAddress | string | ip ipv6 |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.remotePort | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.:authority | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.:method | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.:path | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.:scheme | string | url |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Accept | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Accept-Encoding | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Accept-Language | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Cache-Control | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Connection | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Cookie | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Host | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Pragma | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Sec-Fetch-Dest | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Sec-Fetch-Mode | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Sec-Fetch-Site | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Sec-Fetch-User | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Upgrade-Insecure-Requests | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.User-Agent | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.accept | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.accept-encoding | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.accept-language | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.cache-control | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.cookie | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.pragma | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.sec-fetch-dest | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.sec-fetch-mode | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.sec-fetch-site | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.sec-fetch-user | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.upgrade-insecure-requests | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.user-agent | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.responseTime | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.certificateId | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.certificateTransparencyCompliance | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.cipher | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.issuer | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.keyExchange | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.keyExchangeGroup | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.protocol | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.sanList | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.subjectName | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.validFrom | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.validTo | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityState | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.status | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.statusText | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.connectEnd | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.connectStart | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.dnsEnd | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.dnsStart | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.proxyEnd | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.proxyStart | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.pushEnd | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.pushStart | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.receiveHeadersEnd | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.requestTime | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.sendEnd | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.sendStart | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.sslEnd | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.sslStart | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.workerFetchStart | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.workerReady | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.workerRespondWithSettled | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.workerStart | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.url | string | url |
| action_result.data.*.data.requests.*.requests.*.request.headers.Upgrade-Insecure-Requests | string | |
| action_result.data.*.data.requests.*.requests.*.request.headers.User-Agent | string | |
| action_result.data.*.data.requests.*.requests.*.request.initialPriority | string | |
| action_result.data.*.data.requests.*.requests.*.request.method | string | |
| action_result.data.*.data.requests.*.requests.*.request.mixedContentType | string | |
| action_result.data.*.data.requests.*.requests.*.request.referrerPolicy | string | |
| action_result.data.*.data.requests.*.requests.*.request.url | string | url |
| action_result.data.*.data.requests.*.requests.*.requestId | string | md5 |
| action_result.data.*.data.requests.*.requests.*.timestamp | numeric | |
| action_result.data.*.data.requests.*.requests.*.type | string | |
| action_result.data.*.data.requests.*.requests.*.wallTime | numeric | |
| action_result.data.*.data.requests.*.response.abp.source | string | |
| action_result.data.*.data.requests.*.response.abp.type | string | |
| action_result.data.*.data.requests.*.response.abp.url | string | url |
| action_result.data.*.data.requests.*.response.asn.asn | string | |
| action_result.data.*.data.requests.*.response.asn.country | string | |
| action_result.data.*.data.requests.*.response.asn.date | string | |
| action_result.data.*.data.requests.*.response.asn.description | string | |
| action_result.data.*.data.requests.*.response.asn.ip | string | ip ipv6 |
| action_result.data.*.data.requests.*.response.asn.name | string | |
| action_result.data.*.data.requests.*.response.asn.registrar | string | |
| action_result.data.*.data.requests.*.response.asn.route | string | |
| action_result.data.*.data.requests.*.response.dataLength | numeric | |
| action_result.data.*.data.requests.*.response.encodedDataLength | numeric | |
| action_result.data.*.data.requests.*.response.failed.blockedReason | string | |
| action_result.data.*.data.requests.*.response.failed.canceled | boolean | |
| action_result.data.*.data.requests.*.response.failed.errorText | string | |
| action_result.data.*.data.requests.*.response.failed.requestId | string | |
| action_result.data.*.data.requests.*.response.failed.timestamp | numeric | |
| action_result.data.*.data.requests.*.response.failed.type | string | |
| action_result.data.*.data.requests.*.response.geoip.area | numeric | |
| action_result.data.*.data.requests.*.response.geoip.city | string | |
| action_result.data.*.data.requests.*.response.geoip.country | string | |
| action_result.data.*.data.requests.*.response.geoip.country_name | string | |
| action_result.data.*.data.requests.*.response.geoip.eu | string | |
| action_result.data.*.data.requests.*.response.geoip.ll | numeric | |
| action_result.data.*.data.requests.*.response.geoip.metro | numeric | |
| action_result.data.*.data.requests.*.response.geoip.range | numeric | |
| action_result.data.*.data.requests.*.response.geoip.region | string | |
| action_result.data.*.data.requests.*.response.geoip.timezone | string | |
| action_result.data.*.data.requests.*.response.geoip.zip | numeric | |
| action_result.data.*.data.requests.*.response.hash | string | sha256 |
| action_result.data.*.data.requests.*.response.hashmatches.*.file | string | |
| action_result.data.*.data.requests.*.response.hashmatches.*.project | string | |
| action_result.data.*.data.requests.*.response.hashmatches.*.project_url | string | url |
| action_result.data.*.data.requests.*.response.hashmatches.*.source | string | |
| action_result.data.*.data.requests.*.response.hashmatches.*.url | string | url |
| action_result.data.*.data.requests.*.response.rdns.ip | string | ip ipv6 |
| action_result.data.*.data.requests.*.response.rdns.ptr | string | |
| action_result.data.*.data.requests.*.response.requestId | string | |
| action_result.data.*.data.requests.*.response.response.encodedDataLength | numeric | |
| action_result.data.*.data.requests.*.response.response.fromPrefetchCache | boolean | |
| action_result.data.*.data.requests.*.response.response.headers.* | string | |
| action_result.data.*.data.requests.*.response.response.headers.Accept-Ranges | string | |
| action_result.data.*.data.requests.*.response.response.headers.Access-Control-Allow-Credentials | string | |
| action_result.data.*.data.requests.*.response.response.headers.Access-Control-Allow-Headers | string | |
| action_result.data.*.data.requests.*.response.response.headers.Access-Control-Allow-Methods | string | |
| action_result.data.*.data.requests.*.response.response.headers.Access-Control-Allow-Origin | string | |
| action_result.data.*.data.requests.*.response.response.headers.Access-Control-Expose-Headers | string | |
| action_result.data.*.data.requests.*.response.response.headers.Access-Control-Max-Age | string | |
| action_result.data.*.data.requests.*.response.response.headers.Age | string | |
| action_result.data.*.data.requests.*.response.response.headers.Alt-Svc | string | |
| action_result.data.*.data.requests.*.response.response.headers.Cache-Control | string | |
| action_result.data.*.data.requests.*.response.response.headers.Connection | string | |
| action_result.data.*.data.requests.*.response.response.headers.Content-Encoding | string | |
| action_result.data.*.data.requests.*.response.response.headers.Content-Length | string | |
| action_result.data.*.data.requests.*.response.response.headers.Content-Security-Policy-Report-Only | string | |
| action_result.data.*.data.requests.*.response.response.headers.Content-Type | string | |
| action_result.data.*.data.requests.*.response.response.headers.Date | string | |
| action_result.data.*.data.requests.*.response.response.headers.ETag | string | |
| action_result.data.*.data.requests.*.response.response.headers.Etag | string | |
| action_result.data.*.data.requests.*.response.response.headers.Expect-CT | string | |
| action_result.data.*.data.requests.*.response.response.headers.Expires | string | |
| action_result.data.*.data.requests.*.response.response.headers.Keep-Alive | string | |
| action_result.data.*.data.requests.*.response.response.headers.Last-Modified | string | |
| action_result.data.*.data.requests.*.response.response.headers.Pragma | string | |
| action_result.data.*.data.requests.*.response.response.headers.Public-Key-Pins-Report-Only | string | |
| action_result.data.*.data.requests.*.response.response.headers.Referrer-Policy | string | |
| action_result.data.*.data.requests.*.response.response.headers.Server | string | |
| action_result.data.*.data.requests.*.response.response.headers.Strict-Transport-Security | string | |
| action_result.data.*.data.requests.*.response.response.headers.Timing-Allow-Origin | string | |
| action_result.data.*.data.requests.*.response.response.headers.Upgrade | string | |
| action_result.data.*.data.requests.*.response.response.headers.Via | string | |
| action_result.data.*.data.requests.*.response.response.headers.X-Amz-Cf-Id | string | |
| action_result.data.*.data.requests.*.response.response.headers.X-Amz-Cf-Pop | string | |
| action_result.data.*.data.requests.*.response.response.headers.X-Cache | string | |
| action_result.data.*.data.requests.*.response.response.headers.X-Content-Type-Options | string | |
| action_result.data.*.data.requests.*.response.response.headers.X-Frame-Options | string | |
| action_result.data.*.data.requests.*.response.response.headers.X-LLID | string | md5 |
| action_result.data.*.data.requests.*.response.response.headers.X-Powered-By | string | |
| action_result.data.*.data.requests.*.response.response.headers.X-XSS-Protection | string | |
| action_result.data.*.data.requests.*.response.response.headers.accept-ranges | string | |
| action_result.data.*.data.requests.*.response.response.headers.access-control-allow-methods | string | |
| action_result.data.*.data.requests.*.response.response.headers.access-control-allow-origin | string | |
| action_result.data.*.data.requests.*.response.response.headers.age | string | |
| action_result.data.*.data.requests.*.response.response.headers.alt-svc | string | |
| action_result.data.*.data.requests.*.response.response.headers.ats-carp-promotion | string | |
| action_result.data.*.data.requests.*.response.response.headers.cache-control | string | |
| action_result.data.*.data.requests.*.response.response.headers.content-encoding | string | |
| action_result.data.*.data.requests.*.response.response.headers.content-length | string | |
| action_result.data.*.data.requests.*.response.response.headers.content-security-policy-report-only | string | |
| action_result.data.*.data.requests.*.response.response.headers.content-type | string | |
| action_result.data.*.data.requests.*.response.response.headers.date | string | |
| action_result.data.*.data.requests.*.response.response.headers.etag | string | |
| action_result.data.*.data.requests.*.response.response.headers.expect-ct | string | |
| action_result.data.*.data.requests.*.response.response.headers.expires | string | |
| action_result.data.*.data.requests.*.response.response.headers.last-modified | string | |
| action_result.data.*.data.requests.*.response.response.headers.link | string | |
| action_result.data.*.data.requests.*.response.response.headers.referrer-policy | string | |
| action_result.data.*.data.requests.*.response.response.headers.server | string | |
| action_result.data.*.data.requests.*.response.response.headers.status | string | |
| action_result.data.*.data.requests.*.response.response.headers.strict-transport-security | string | |
| action_result.data.*.data.requests.*.response.response.headers.timing-allow-origin | string | |
| action_result.data.*.data.requests.*.response.response.headers.vary | string | |
| action_result.data.*.data.requests.*.response.response.headers.via | string | |
| action_result.data.*.data.requests.*.response.response.headers.x-amz-cf-id | string | |
| action_result.data.*.data.requests.*.response.response.headers.x-amz-cf-pop | string | |
| action_result.data.*.data.requests.*.response.response.headers.x-amz-id-2 | string | |
| action_result.data.*.data.requests.*.response.response.headers.x-amz-request-id | string | |
| action_result.data.*.data.requests.*.response.response.headers.x-amz-server-side-encryption | string | |
| action_result.data.*.data.requests.*.response.response.headers.x-cache | string | |
| action_result.data.*.data.requests.*.response.response.headers.x-content-type-options | string | |
| action_result.data.*.data.requests.*.response.response.headers.x-frame-options | string | |
| action_result.data.*.data.requests.*.response.response.headers.x-xss-protection | string | |
| action_result.data.*.data.requests.*.response.response.mimeType | string | |
| action_result.data.*.data.requests.*.response.response.protocol | string | url |
| action_result.data.*.data.requests.*.response.response.remoteIPAddress | string | ip ipv6 |
| action_result.data.*.data.requests.*.response.response.remotePort | numeric | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.* | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Accept | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Accept-Encoding | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Accept-Language | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Cache-Control | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Connection | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Cookie | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Host | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Pragma | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Sec-Fetch-Dest | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Sec-Fetch-Mode | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Sec-Fetch-Site | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Sec-Fetch-User | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Upgrade-Insecure-Requests | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.User-Agent | string | |
| action_result.data.*.data.requests.*.response.response.responseTime | numeric | |
| action_result.data.*.data.requests.*.response.response.securityDetails.certificateId | numeric | |
| action_result.data.*.data.requests.*.response.response.securityDetails.certificateTransparencyCompliance | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.cipher | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.issuer | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.keyExchange | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.keyExchangeGroup | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.protocol | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.sanList | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.signedCertificateTimestampList.*.hashAlgorithm | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.signedCertificateTimestampList.*.logDescription | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.signedCertificateTimestampList.*.logId | string | sha256 |
| action_result.data.*.data.requests.*.response.response.securityDetails.signedCertificateTimestampList.*.origin | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.signedCertificateTimestampList.*.signatureAlgorithm | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.signedCertificateTimestampList.*.signatureData | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.signedCertificateTimestampList.*.status | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.signedCertificateTimestampList.*.timestamp | numeric | |
| action_result.data.*.data.requests.*.response.response.securityDetails.subjectName | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.validFrom | numeric | |
| action_result.data.*.data.requests.*.response.response.securityDetails.validTo | numeric | |
| action_result.data.*.data.requests.*.response.response.securityHeaders.*.name | string | |
| action_result.data.*.data.requests.*.response.response.securityHeaders.*.value | string | |
| action_result.data.*.data.requests.*.response.response.securityState | string | |
| action_result.data.*.data.requests.*.response.response.status | numeric | |
| action_result.data.*.data.requests.*.response.response.statusText | string | |
| action_result.data.*.data.requests.*.response.response.timing.connectEnd | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.connectStart | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.dnsEnd | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.dnsStart | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.proxyEnd | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.proxyStart | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.pushEnd | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.pushStart | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.receiveHeadersEnd | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.requestTime | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.sendEnd | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.sendStart | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.sslEnd | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.sslStart | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.workerFetchStart | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.workerReady | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.workerRespondWithSettled | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.workerStart | numeric | |
| action_result.data.*.data.requests.*.response.response.url | string | url |
| action_result.data.*.data.requests.*.response.size | numeric | |
| action_result.data.*.data.requests.*.response.type | string | |
| action_result.data.*.data.timing.beginNavigation | string | |
| action_result.data.*.data.timing.domContentEventFired | string | |
| action_result.data.*.data.timing.frameNavigated | string | |
| action_result.data.*.data.timing.frameStartedLoading | string | |
| action_result.data.*.data.timing.frameStoppedLoading | string | |
| action_result.data.*.data.timing.loadEventFired | string | |
| action_result.data.*.lists.asns | string | |
| action_result.data.*.lists.certificates.*.issuer | string | |
| action_result.data.*.lists.certificates.*.sanList | string | |
| action_result.data.*.lists.certificates.*.subjectName | string | |
| action_result.data.*.lists.certificates.*.validFrom | numeric | |
| action_result.data.*.lists.certificates.*.validTo | numeric | |
| action_result.data.*.lists.countries | string | |
| action_result.data.*.lists.domains | string | |
| action_result.data.*.lists.hashes | string | sha256 |
| action_result.data.*.lists.ips | string | |
| action_result.data.*.lists.linkDomains | string | |
| action_result.data.*.lists.servers | string | |
| action_result.data.*.lists.urls | string | url |
| action_result.data.*.meta.processors.abp.data.*.source | string | |
| action_result.data.*.meta.processors.abp.data.*.type | string | |
| action_result.data.*.meta.processors.abp.data.*.url | string | url |
| action_result.data.*.meta.processors.abp.state | string | |
| action_result.data.*.meta.processors.asn.data.*.asn | string | |
| action_result.data.*.meta.processors.asn.data.*.country | string | |
| action_result.data.*.meta.processors.asn.data.*.date | string | |
| action_result.data.*.meta.processors.asn.data.*.description | string | |
| action_result.data.*.meta.processors.asn.data.*.ip | string | ip ipv6 |
| action_result.data.*.meta.processors.asn.data.*.name | string | |
| action_result.data.*.meta.processors.asn.data.*.registrar | string | |
| action_result.data.*.meta.processors.asn.data.*.route | string | |
| action_result.data.*.meta.processors.asn.state | string | |
| action_result.data.*.meta.processors.cdnjs.data.*.hash | string | sha256 |
| action_result.data.*.meta.processors.cdnjs.data.*.matches | string | |
| action_result.data.*.meta.processors.cdnjs.state | string | |
| action_result.data.*.meta.processors.done.data.state | string | |
| action_result.data.*.meta.processors.done.state | string | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.area | numeric | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.city | string | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.country | string | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.country_name | string | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.eu | string | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.ll | numeric | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.metro | numeric | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.range | numeric | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.region | string | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.timezone | string | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.zip | numeric | |
| action_result.data.*.meta.processors.geoip.data.*.ip | string | ip ipv6 |
| action_result.data.*.meta.processors.geoip.state | string | |
| action_result.data.*.meta.processors.gsb.data.matches.*.cacheDuration | string | |
| action_result.data.*.meta.processors.gsb.data.matches.*.platformType | string | |
| action_result.data.*.meta.processors.gsb.data.matches.*.threat.url | string | url |
| action_result.data.*.meta.processors.gsb.data.matches.*.threatEntryType | string | |
| action_result.data.*.meta.processors.gsb.data.matches.*.threatType | string | |
| action_result.data.*.meta.processors.gsb.state | string | |
| action_result.data.*.meta.processors.rdns.data.*.ip | string | ip ipv6 |
| action_result.data.*.meta.processors.rdns.data.*.ptr | string | |
| action_result.data.*.meta.processors.rdns.state | string | |
| action_result.data.*.meta.processors.wappa.state | string | |
| action_result.data.*.page.asn | string | |
| action_result.data.*.page.asnname | string | |
| action_result.data.*.page.city | string | |
| action_result.data.*.page.country | string | |
| action_result.data.*.page.domain | string | domain |
| action_result.data.*.page.ip | string | ip ipv6 |
| action_result.data.*.page.ptr | string | |
| action_result.data.*.page.server | string | |
| action_result.data.*.page.url | string | url |
| action_result.data.*.stats.IPv6Percentage | numeric | |
| action_result.data.*.stats.adBlocked | numeric | |
| action_result.data.*.stats.domainStats.*.count | numeric | |
| action_result.data.*.stats.domainStats.*.countries | string | |
| action_result.data.*.stats.domainStats.*.domain | string | domain |
| action_result.data.*.stats.domainStats.*.encodedSize | numeric | |
| action_result.data.*.stats.domainStats.*.index | numeric | |
| action_result.data.*.stats.domainStats.*.initiators | string | |
| action_result.data.*.stats.domainStats.*.ips | string | |
| action_result.data.*.stats.domainStats.*.redirects | numeric | |
| action_result.data.*.stats.domainStats.*.size | numeric | |
| action_result.data.*.stats.ipStats.*.asn.asn | string | |
| action_result.data.*.stats.ipStats.*.asn.country | string | |
| action_result.data.*.stats.ipStats.*.asn.date | string | |
| action_result.data.*.stats.ipStats.*.asn.description | string | |
| action_result.data.*.stats.ipStats.*.asn.ip | string | |
| action_result.data.*.stats.ipStats.*.asn.name | string | |
| action_result.data.*.stats.ipStats.*.asn.registrar | string | |
| action_result.data.*.stats.ipStats.*.asn.route | string | |
| action_result.data.*.stats.ipStats.*.count | string | |
| action_result.data.*.stats.ipStats.*.countries | string | |
| action_result.data.*.stats.ipStats.*.domains | string | |
| action_result.data.*.stats.ipStats.*.encodedSize | numeric | |
| action_result.data.*.stats.ipStats.*.geoip.area | numeric | |
| action_result.data.*.stats.ipStats.*.geoip.city | string | |
| action_result.data.*.stats.ipStats.*.geoip.country | string | |
| action_result.data.*.stats.ipStats.*.geoip.country_name | string | |
| action_result.data.*.stats.ipStats.*.geoip.eu | string | |
| action_result.data.*.stats.ipStats.*.geoip.ll | numeric | |
| action_result.data.*.stats.ipStats.*.geoip.metro | numeric | |
| action_result.data.*.stats.ipStats.*.geoip.range | numeric | |
| action_result.data.*.stats.ipStats.*.geoip.region | string | |
| action_result.data.*.stats.ipStats.*.geoip.timezone | string | |
| action_result.data.*.stats.ipStats.*.geoip.zip | numeric | |
| action_result.data.*.stats.ipStats.*.index | numeric | |
| action_result.data.*.stats.ipStats.*.ip | string | ip ipv6 |
| action_result.data.*.stats.ipStats.*.ipv6 | boolean | |
| action_result.data.*.stats.ipStats.*.rdns.ip | string | ip ipv6 |
| action_result.data.*.stats.ipStats.*.rdns.ptr | string | |
| action_result.data.*.stats.ipStats.*.redirects | numeric | |
| action_result.data.*.stats.ipStats.*.requests | numeric | |
| action_result.data.*.stats.ipStats.*.size | numeric | |
| action_result.data.*.stats.malicious | numeric | |
| action_result.data.*.stats.protocolStats.*.count | numeric | |
| action_result.data.*.stats.protocolStats.*.countries | string | |
| action_result.data.*.stats.protocolStats.*.encodedSize | numeric | |
| action_result.data.*.stats.protocolStats.*.ips | string | ip ipv6 |
| action_result.data.*.stats.protocolStats.*.protocol | string | url |
| action_result.data.*.stats.protocolStats.*.size | numeric | |
| action_result.data.*.stats.regDomainStats.*.count | numeric | |
| action_result.data.*.stats.regDomainStats.*.encodedSize | numeric | |
| action_result.data.*.stats.regDomainStats.*.index | numeric | |
| action_result.data.*.stats.regDomainStats.*.ips | string | |
| action_result.data.*.stats.regDomainStats.*.redirects | numeric | |
| action_result.data.*.stats.regDomainStats.*.regDomain | string | domain |
| action_result.data.*.stats.regDomainStats.*.size | numeric | |
| action_result.data.*.stats.regDomainStats.*.subDomains.*.country | string | |
| action_result.data.*.stats.regDomainStats.*.subDomains.*.domain | string | domain |
| action_result.data.*.stats.regDomainStats.*.subDomains.*.failed | boolean | |
| action_result.data.*.stats.resourceStats.*.compression | string | |
| action_result.data.*.stats.resourceStats.*.count | numeric | |
| action_result.data.*.stats.resourceStats.*.countries | string | |
| action_result.data.*.stats.resourceStats.*.encodedSize | numeric | |
| action_result.data.*.stats.resourceStats.*.ips | string | ip ipv6 |
| action_result.data.*.stats.resourceStats.*.latency | numeric | |
| action_result.data.*.stats.resourceStats.*.percentage | numeric | |
| action_result.data.*.stats.resourceStats.*.size | numeric | |
| action_result.data.*.stats.resourceStats.*.type | string | |
| action_result.data.*.stats.securePercentage | numeric | |
| action_result.data.*.stats.secureRequests | numeric | |
| action_result.data.*.stats.serverStats.*.count | numeric | |
| action_result.data.*.stats.serverStats.*.countries | string | |
| action_result.data.*.stats.serverStats.*.encodedSize | numeric | |
| action_result.data.*.stats.serverStats.*.ips | string | |
| action_result.data.*.stats.serverStats.*.server | string | |
| action_result.data.*.stats.serverStats.*.size | numeric | |
| action_result.data.*.stats.tlsStats.*.count | numeric | |
| action_result.data.*.stats.tlsStats.*.countries | string | |
| action_result.data.*.stats.tlsStats.*.encodedSize | numeric | |
| action_result.data.*.stats.tlsStats.*.ips | string | ip ipv6 |
| action_result.data.*.stats.tlsStats.*.protocols.TLS 1.2 / ECDHE_ECDSA / AES_128_GCM | numeric | |
| action_result.data.*.stats.tlsStats.*.protocols.TLS 1.2 / ECDHE_RSA / AES_128_GCM | numeric | |
| action_result.data.*.stats.tlsStats.*.protocols.TLS 1.3 / / AES_128_GCM | numeric | |
| action_result.data.*.stats.tlsStats.*.protocols.TLS 1.3 / / AES_256_GCM | numeric | |
| action_result.data.*.stats.tlsStats.*.securityState | string | |
| action_result.data.*.stats.tlsStats.*.size | numeric | |
| action_result.data.*.stats.totalLinks | numeric | |
| action_result.data.*.stats.uniqCountries | numeric | |
| action_result.data.*.submitter.country | string | |
| action_result.data.*.task.domURL | string | url |
| action_result.data.*.task.method | string | |
| action_result.data.*.task.options.useragent | string | |
| action_result.data.*.task.reportURL | string | url |
| action_result.data.*.task.screenshotURL | string | url |
| action_result.data.*.task.source | string | |
| action_result.data.*.task.time | string | |
| action_result.data.*.task.url | string | url |
| action_result.data.*.task.userAgent | string | |
| action_result.data.*.task.uuid | string | urlscan submission id |
| action_result.data.*.task.visibility | string | |
| action_result.data.*.verdicts.community.score | numeric | |
| action_result.data.*.verdicts.community.votesBenign | numeric | |
| action_result.data.*.verdicts.community.votesMalicious | numeric | |
| action_result.data.*.verdicts.community.votesTotal | numeric | |
| action_result.data.*.verdicts.engines.benignTotal | numeric | |
| action_result.data.*.verdicts.engines.enginesTotal | numeric | |
| action_result.data.*.verdicts.engines.maliciousTotal | numeric | |
| action_result.data.*.verdicts.engines.score | numeric | |
| action_result.data.*.verdicts.overall.hasVerdicts | numeric | |
| action_result.data.*.verdicts.overall.malicious | boolean | |
| action_result.data.*.verdicts.overall.score | numeric | |
| action_result.data.*.verdicts.urlscan.malicious | boolean | |
| action_result.data.*.verdicts.urlscan.score | numeric | |
| action_result.summary.added_tags_num | numeric | |
| action_result.summary.report_uuid | string | urlscan submission id |
| action_result.message | string | |
| summary.total_objects | numeric | |
| summary.total_objects_successful | numeric |
Find information about a domain at urlscan.io
Type: investigate
Read only: True
| PARAMETER | REQUIRED | DESCRIPTION | TYPE | CONTAINS |
|---|---|---|---|---|
| domain | required | Domain to lookup | string | domain |
| DATA PATH | TYPE | CONTAINS |
|---|---|---|
| action_result.status | string | |
| action_result.parameter.domain | string | domain |
| action_result.data.*.has_more | boolean | |
| action_result.data.*.results.*._id | string | |
| action_result.data.*.results.*.indexedAt | string | |
| action_result.data.*.results.*.page.asn | string | |
| action_result.data.*.results.*.page.asnname | string | |
| action_result.data.*.results.*.page.city | string | |
| action_result.data.*.results.*.page.country | string | |
| action_result.data.*.results.*.page.domain | string | domain |
| action_result.data.*.results.*.page.ip | string | ip ipv6 |
| action_result.data.*.results.*.page.mimeType | string | |
| action_result.data.*.results.*.page.ptr | string | |
| action_result.data.*.results.*.page.server | string | |
| action_result.data.*.results.*.page.status | string | |
| action_result.data.*.results.*.page.url | string | url |
| action_result.data.*.results.*.result | string | url |
| action_result.data.*.results.*.screenshot | string | url |
| action_result.data.*.results.*.stats.consoleMsgs | numeric | |
| action_result.data.*.results.*.stats.dataLength | numeric | |
| action_result.data.*.results.*.stats.encodedDataLength | numeric | |
| action_result.data.*.results.*.stats.requests | numeric | |
| action_result.data.*.results.*.stats.uniqCountries | numeric | |
| action_result.data.*.results.*.stats.uniqIPs | numeric | |
| action_result.data.*.results.*.task.domain | string | |
| action_result.data.*.results.*.task.method | string | |
| action_result.data.*.results.*.task.source | string | |
| action_result.data.*.results.*.task.time | string | |
| action_result.data.*.results.*.task.url | string | url |
| action_result.data.*.results.*.task.uuid | string | |
| action_result.data.*.results.*.task.visibility | string | |
| action_result.data.*.results.*.uniq_countries | numeric | |
| action_result.data.*.took | numeric | |
| action_result.data.*.total | numeric | |
| action_result.summary | string | |
| action_result.message | string | |
| summary.total_objects | numeric | |
| summary.total_objects_successful | numeric |
Find information about an IP address at urlscan.io
Type: investigate
Read only: True
| PARAMETER | REQUIRED | DESCRIPTION | TYPE | CONTAINS |
|---|---|---|---|---|
| ip | required | IP to lookup | string | ip ipv6 |
| DATA PATH | TYPE | CONTAINS |
|---|---|---|
| action_result.status | string | |
| action_result.parameter.ip | string | ip ipv6 |
| action_result.data.*.has_more | boolean | |
| action_result.data.*.results.*._id | string | |
| action_result.data.*.results.*.indexedAt | string | |
| action_result.data.*.results.*.page.asn | string | |
| action_result.data.*.results.*.page.asnname | string | |
| action_result.data.*.results.*.page.city | string | |
| action_result.data.*.results.*.page.country | string | |
| action_result.data.*.results.*.page.domain | string | domain |
| action_result.data.*.results.*.page.ip | string | ip ipv6 |
| action_result.data.*.results.*.page.mimeType | string | |
| action_result.data.*.results.*.page.ptr | string | |
| action_result.data.*.results.*.page.server | string | |
| action_result.data.*.results.*.page.status | string | |
| action_result.data.*.results.*.page.url | string | url |
| action_result.data.*.results.*.result | string | url |
| action_result.data.*.results.*.screenshot | string | url |
| action_result.data.*.results.*.stats.consoleMsgs | numeric | |
| action_result.data.*.results.*.stats.dataLength | numeric | |
| action_result.data.*.results.*.stats.encodedDataLength | numeric | |
| action_result.data.*.results.*.stats.requests | numeric | |
| action_result.data.*.results.*.stats.uniqCountries | numeric | |
| action_result.data.*.results.*.stats.uniqIPs | numeric | |
| action_result.data.*.results.*.task.domain | string | |
| action_result.data.*.results.*.task.method | string | |
| action_result.data.*.results.*.task.source | string | |
| action_result.data.*.results.*.task.time | string | |
| action_result.data.*.results.*.task.url | string | url |
| action_result.data.*.results.*.task.uuid | string | |
| action_result.data.*.results.*.task.visibility | string | |
| action_result.data.*.results.*.uniq_countries | numeric | |
| action_result.data.*.took | numeric | |
| action_result.data.*.total | numeric | |
| action_result.summary | string | |
| action_result.message | string | |
| summary.total_objects | numeric | |
| summary.total_objects_successful | numeric |
Detonate a URL at urlscan.io
Type: investigate
Read only: False
If the get_result parameter is set to true, then the action may take up to 2-3 minutes to execute because the action will poll for the results in the same call.
| PARAMETER | REQUIRED | DESCRIPTION | TYPE | CONTAINS |
|---|---|---|---|---|
| url | required | URL to detonate | string | url domain |
| tags | optional | Comma-separated list of tags to annotate this scan. Limited to 10 tags. Tags with lengths longer than 29 will be omitted. | string | |
| private | optional | Run a private scan | boolean | |
| custom_agent | optional | Override User-Agent for this scan | string | |
| get_result | optional | Get scan result in same call | boolean |
| DATA PATH | TYPE | CONTAINS |
|---|---|---|
| action_result.status | string | |
| action_result.parameter.custom_agent | string | |
| action_result.parameter.get_result | boolean | |
| action_result.parameter.private | boolean | |
| action_result.parameter.tags | string | |
| action_result.parameter.url | string | url domain |
| action_result.data.*.api | string | url |
| action_result.data.*.data.console.*.message.column | numeric | |
| action_result.data.*.data.console.*.message.level | string | |
| action_result.data.*.data.console.*.message.line | numeric | |
| action_result.data.*.data.console.*.message.source | string | |
| action_result.data.*.data.console.*.message.text | string | |
| action_result.data.*.data.console.*.message.url | string | |
| action_result.data.*.data.cookies.*.domain | string | domain |
| action_result.data.*.data.cookies.*.expires | numeric | |
| action_result.data.*.data.cookies.*.httpOnly | boolean | |
| action_result.data.*.data.cookies.*.name | string | |
| action_result.data.*.data.cookies.*.path | string | |
| action_result.data.*.data.cookies.*.priority | string | |
| action_result.data.*.data.cookies.*.sameParty | boolean | |
| action_result.data.*.data.cookies.*.sameSite | string | |
| action_result.data.*.data.cookies.*.secure | boolean | |
| action_result.data.*.data.cookies.*.session | boolean | |
| action_result.data.*.data.cookies.*.size | numeric | |
| action_result.data.*.data.cookies.*.sourcePort | numeric | |
| action_result.data.*.data.cookies.*.sourceScheme | string | |
| action_result.data.*.data.cookies.*.value | string | |
| action_result.data.*.data.globals.*.prop | string | |
| action_result.data.*.data.globals.*.type | string | |
| action_result.data.*.data.links.*.href | string | url |
| action_result.data.*.data.links.*.text | string | |
| action_result.data.*.data.requests.*.initiatorInfo.host | string | |
| action_result.data.*.data.requests.*.initiatorInfo.type | string | |
| action_result.data.*.data.requests.*.initiatorInfo.url | string | url |
| action_result.data.*.data.requests.*.request.documentURL | string | url |
| action_result.data.*.data.requests.*.request.frameId | string | |
| action_result.data.*.data.requests.*.request.hasUserGesture | boolean | |
| action_result.data.*.data.requests.*.request.initiator.columnNumber | numeric | |
| action_result.data.*.data.requests.*.request.initiator.lineNumber | numeric | |
| action_result.data.*.data.requests.*.request.initiator.stack.callFrames.*.columnNumber | numeric | |
| action_result.data.*.data.requests.*.request.initiator.stack.callFrames.*.functionName | string | |
| action_result.data.*.data.requests.*.request.initiator.stack.callFrames.*.lineNumber | numeric | |
| action_result.data.*.data.requests.*.request.initiator.stack.callFrames.*.scriptId | string | |
| action_result.data.*.data.requests.*.request.initiator.stack.callFrames.*.url | string | url |
| action_result.data.*.data.requests.*.request.initiator.type | string | |
| action_result.data.*.data.requests.*.request.initiator.url | string | url |
| action_result.data.*.data.requests.*.request.loaderId | string | |
| action_result.data.*.data.requests.*.request.primaryRequest | boolean | |
| action_result.data.*.data.requests.*.request.redirectResponse.encodedDataLength | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.fromPrefetchCache | boolean | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.* | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.Connection | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.Content-Length | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.Content-Type | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.Date | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.Keep-Alive | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.Location | string | url |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.Non-Authoritative-Reason | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.Server | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.Strict-Transport-Security | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.Transfer-Encoding | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.X-DIS-Request-ID | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.access-control-allow-credentials | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.access-control-allow-origin | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.alt-svc | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.cache-control | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.content-length | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.content-type | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.cross-origin-resource-policy | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.date | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.expires | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.location | string | url |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.p3p | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.permissions-policy | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.pragma | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.server | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.set-cookie | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.strict-transport-security | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.timing-allow-origin | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.x-content-type-options | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.x-frame-options | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.headers.x-xss-protection | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.mimeType | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.protocol | string | url |
| action_result.data.*.data.requests.*.request.redirectResponse.remoteIPAddress | string | ip ipv6 |
| action_result.data.*.data.requests.*.request.redirectResponse.remotePort | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.:authority | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.:method | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.:path | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.:scheme | string | url |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Accept | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Accept-Encoding | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Accept-Language | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Cache-Control | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Connection | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Cookie | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Host | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Pragma | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Sec-Fetch-Dest | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Sec-Fetch-Mode | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Sec-Fetch-Site | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Sec-Fetch-User | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.Upgrade-Insecure-Requests | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.User-Agent | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.accept | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.accept-encoding | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.accept-language | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.cache-control | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.pragma | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.sec-fetch-dest | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.sec-fetch-mode | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.sec-fetch-site | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.sec-fetch-user | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.upgrade-insecure-requests | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.requestHeaders.user-agent | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.responseTime | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.certificateId | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.certificateTransparencyCompliance | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.cipher | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.issuer | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.keyExchange | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.keyExchangeGroup | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.protocol | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.sanList | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.subjectName | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.validFrom | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityDetails.validTo | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.securityState | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.status | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.statusText | string | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.connectEnd | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.connectStart | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.dnsEnd | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.dnsStart | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.proxyEnd | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.proxyStart | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.pushEnd | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.pushStart | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.receiveHeadersEnd | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.requestTime | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.sendEnd | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.sendStart | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.sslEnd | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.sslStart | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.workerFetchStart | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.workerReady | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.workerRespondWithSettled | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.timing.workerStart | numeric | |
| action_result.data.*.data.requests.*.request.redirectResponse.url | string | url |
| action_result.data.*.data.requests.*.request.request.hasPostData | boolean | |
| action_result.data.*.data.requests.*.request.request.headers.* | string | |
| action_result.data.*.data.requests.*.request.request.headers.Content-Type | string | |
| action_result.data.*.data.requests.*.request.request.headers.Origin | string | url |
| action_result.data.*.data.requests.*.request.request.headers.Referer | string | url |
| action_result.data.*.data.requests.*.request.request.headers.Upgrade-Insecure-Requests | string | |
| action_result.data.*.data.requests.*.request.request.headers.User-Agent | string | |
| action_result.data.*.data.requests.*.request.request.headers.X-Same-Domain | string | domain |
| action_result.data.*.data.requests.*.request.request.initialPriority | string | |
| action_result.data.*.data.requests.*.request.request.method | string | |
| action_result.data.*.data.requests.*.request.request.mixedContentType | string | |
| action_result.data.*.data.requests.*.request.request.postData | string | |
| action_result.data.*.data.requests.*.request.request.postDataEntries.*.bytes | string | |
| action_result.data.*.data.requests.*.request.request.referrerPolicy | string | |
| action_result.data.*.data.requests.*.request.request.url | string | url |
| action_result.data.*.data.requests.*.request.requestId | string | |
| action_result.data.*.data.requests.*.request.timestamp | numeric | |
| action_result.data.*.data.requests.*.request.type | string | |
| action_result.data.*.data.requests.*.request.wallTime | numeric | |
| action_result.data.*.data.requests.*.requests.*.documentURL | string | url |
| action_result.data.*.data.requests.*.requests.*.frameId | string | md5 |
| action_result.data.*.data.requests.*.requests.*.hasUserGesture | boolean | |
| action_result.data.*.data.requests.*.requests.*.initiator.columnNumber | numeric | |
| action_result.data.*.data.requests.*.requests.*.initiator.lineNumber | numeric | |
| action_result.data.*.data.requests.*.requests.*.initiator.stack.callFrames.*.columnNumber | numeric | |
| action_result.data.*.data.requests.*.requests.*.initiator.stack.callFrames.*.functionName | string | |
| action_result.data.*.data.requests.*.requests.*.initiator.stack.callFrames.*.lineNumber | numeric | |
| action_result.data.*.data.requests.*.requests.*.initiator.stack.callFrames.*.scriptId | string | |
| action_result.data.*.data.requests.*.requests.*.initiator.stack.callFrames.*.url | string | |
| action_result.data.*.data.requests.*.requests.*.initiator.type | string | |
| action_result.data.*.data.requests.*.requests.*.initiator.url | string | |
| action_result.data.*.data.requests.*.requests.*.loaderId | string | md5 |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.asn.asn | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.asn.country | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.asn.date | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.asn.description | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.asn.ip | string | ip ipv6 |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.asn.name | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.asn.registrar | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.asn.route | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.encodedDataLength | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.fromPrefetchCache | boolean | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.geoip.area | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.geoip.city | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.geoip.country | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.geoip.country_name | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.geoip.eu | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.geoip.ll | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.geoip.metro | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.geoip.range | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.geoip.region | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.geoip.timezone | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Cache-Control | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Connection | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Content-Language | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Content-Length | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Content-Security-Policy | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Content-Type | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Date | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Keep-Alive | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Location | string | url |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Non-Authoritative-Reason | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Server | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Set-Cookie | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Strict-Transport-Security | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.Transfer-Encoding | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.X-DIS-Request-ID | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.X-Frame-Options | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.X-XSS-Protection | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.access-control-allow-credentials | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.access-control-allow-origin | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.alt-svc | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.cache-control | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.content-language | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.content-length | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.content-security-policy | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.content-type | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.cross-origin-resource-policy | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.date | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.expect-ct | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.expires | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.location | string | url |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.p3p | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.permissions-policy | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.pragma | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.referrer-policy | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.server | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.set-cookie | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.strict-transport-security | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.timing-allow-origin | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.x-content-type-options | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.x-frame-options | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.headers.x-xss-protection | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.mimeType | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.protocol | string | url |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.rdns.ip | string | ip ipv6 |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.rdns.ptr | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.remoteIPAddress | string | ip ipv6 |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.remotePort | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.:authority | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.:method | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.:path | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.:scheme | string | url |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Accept | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Accept-Encoding | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Accept-Language | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Cache-Control | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Connection | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Cookie | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Host | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Pragma | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Sec-Fetch-Dest | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Sec-Fetch-Mode | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Sec-Fetch-Site | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Sec-Fetch-User | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.Upgrade-Insecure-Requests | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.User-Agent | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.accept | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.accept-encoding | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.accept-language | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.cache-control | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.cookie | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.pragma | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.sec-fetch-dest | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.sec-fetch-mode | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.sec-fetch-site | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.sec-fetch-user | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.upgrade-insecure-requests | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.requestHeaders.user-agent | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.responseTime | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.certificateId | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.certificateTransparencyCompliance | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.cipher | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.issuer | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.keyExchange | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.keyExchangeGroup | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.protocol | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.sanList | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.subjectName | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.validFrom | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityDetails.validTo | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.securityState | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.status | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.statusText | string | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.connectEnd | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.connectStart | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.dnsEnd | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.dnsStart | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.proxyEnd | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.proxyStart | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.pushEnd | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.pushStart | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.receiveHeadersEnd | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.requestTime | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.sendEnd | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.sendStart | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.sslEnd | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.sslStart | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.workerFetchStart | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.workerReady | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.workerRespondWithSettled | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.timing.workerStart | numeric | |
| action_result.data.*.data.requests.*.requests.*.redirectResponse.url | string | url |
| action_result.data.*.data.requests.*.requests.*.request.headers.Referer | string | |
| action_result.data.*.data.requests.*.requests.*.request.headers.Upgrade-Insecure-Requests | string | |
| action_result.data.*.data.requests.*.requests.*.request.headers.User-Agent | string | |
| action_result.data.*.data.requests.*.requests.*.request.initialPriority | string | |
| action_result.data.*.data.requests.*.requests.*.request.method | string | |
| action_result.data.*.data.requests.*.requests.*.request.mixedContentType | string | |
| action_result.data.*.data.requests.*.requests.*.request.referrerPolicy | string | |
| action_result.data.*.data.requests.*.requests.*.request.url | string | url |
| action_result.data.*.data.requests.*.requests.*.requestId | string | md5 |
| action_result.data.*.data.requests.*.requests.*.timestamp | numeric | |
| action_result.data.*.data.requests.*.requests.*.type | string | |
| action_result.data.*.data.requests.*.requests.*.wallTime | numeric | |
| action_result.data.*.data.requests.*.response.abp.source | string | |
| action_result.data.*.data.requests.*.response.abp.type | string | |
| action_result.data.*.data.requests.*.response.abp.url | string | url |
| action_result.data.*.data.requests.*.response.asn.asn | string | |
| action_result.data.*.data.requests.*.response.asn.country | string | |
| action_result.data.*.data.requests.*.response.asn.date | string | |
| action_result.data.*.data.requests.*.response.asn.description | string | |
| action_result.data.*.data.requests.*.response.asn.ip | string | ip ipv6 |
| action_result.data.*.data.requests.*.response.asn.name | string | |
| action_result.data.*.data.requests.*.response.asn.registrar | string | |
| action_result.data.*.data.requests.*.response.asn.route | string | |
| action_result.data.*.data.requests.*.response.dataLength | numeric | |
| action_result.data.*.data.requests.*.response.encodedDataLength | numeric | |
| action_result.data.*.data.requests.*.response.failed.canceled | boolean | |
| action_result.data.*.data.requests.*.response.failed.errorText | string | |
| action_result.data.*.data.requests.*.response.failed.requestId | string | |
| action_result.data.*.data.requests.*.response.failed.timestamp | numeric | |
| action_result.data.*.data.requests.*.response.failed.type | string | |
| action_result.data.*.data.requests.*.response.geoip.area | numeric | |
| action_result.data.*.data.requests.*.response.geoip.city | string | |
| action_result.data.*.data.requests.*.response.geoip.country | string | |
| action_result.data.*.data.requests.*.response.geoip.country_name | string | |
| action_result.data.*.data.requests.*.response.geoip.eu | string | |
| action_result.data.*.data.requests.*.response.geoip.ll | numeric | |
| action_result.data.*.data.requests.*.response.geoip.metro | numeric | |
| action_result.data.*.data.requests.*.response.geoip.range | numeric | |
| action_result.data.*.data.requests.*.response.geoip.region | string | |
| action_result.data.*.data.requests.*.response.geoip.timezone | string | |
| action_result.data.*.data.requests.*.response.geoip.zip | numeric | |
| action_result.data.*.data.requests.*.response.hash | string | sha256 |
| action_result.data.*.data.requests.*.response.hashmatches.*.file | string | |
| action_result.data.*.data.requests.*.response.hashmatches.*.project | string | |
| action_result.data.*.data.requests.*.response.hashmatches.*.project_url | string | url |
| action_result.data.*.data.requests.*.response.hashmatches.*.source | string | |
| action_result.data.*.data.requests.*.response.hashmatches.*.url | string | url |
| action_result.data.*.data.requests.*.response.rdns.ip | string | ip ipv6 |
| action_result.data.*.data.requests.*.response.rdns.ptr | string | |
| action_result.data.*.data.requests.*.response.requestId | string | |
| action_result.data.*.data.requests.*.response.response.encodedDataLength | numeric | |
| action_result.data.*.data.requests.*.response.response.fromPrefetchCache | boolean | |
| action_result.data.*.data.requests.*.response.response.headers.* | string | |
| action_result.data.*.data.requests.*.response.response.headers.Accept-Ranges | string | |
| action_result.data.*.data.requests.*.response.response.headers.Access-Control-Allow-Credentials | string | |
| action_result.data.*.data.requests.*.response.response.headers.Access-Control-Allow-Headers | string | |
| action_result.data.*.data.requests.*.response.response.headers.Access-Control-Allow-Methods | string | |
| action_result.data.*.data.requests.*.response.response.headers.Access-Control-Allow-Origin | string | |
| action_result.data.*.data.requests.*.response.response.headers.Access-Control-Expose-Headers | string | |
| action_result.data.*.data.requests.*.response.response.headers.Access-Control-Max-Age | string | |
| action_result.data.*.data.requests.*.response.response.headers.Age | string | |
| action_result.data.*.data.requests.*.response.response.headers.Alt-Svc | string | |
| action_result.data.*.data.requests.*.response.response.headers.Cache-Control | string | |
| action_result.data.*.data.requests.*.response.response.headers.Connection | string | |
| action_result.data.*.data.requests.*.response.response.headers.Content-Encoding | string | |
| action_result.data.*.data.requests.*.response.response.headers.Content-Length | string | |
| action_result.data.*.data.requests.*.response.response.headers.Content-Security-Policy-Report-Only | string | |
| action_result.data.*.data.requests.*.response.response.headers.Content-Type | string | |
| action_result.data.*.data.requests.*.response.response.headers.Date | string | |
| action_result.data.*.data.requests.*.response.response.headers.ETag | string | |
| action_result.data.*.data.requests.*.response.response.headers.Etag | string | |
| action_result.data.*.data.requests.*.response.response.headers.Expect-CT | string | |
| action_result.data.*.data.requests.*.response.response.headers.Expires | string | |
| action_result.data.*.data.requests.*.response.response.headers.Keep-Alive | string | |
| action_result.data.*.data.requests.*.response.response.headers.Last-Modified | string | |
| action_result.data.*.data.requests.*.response.response.headers.P3P | string | |
| action_result.data.*.data.requests.*.response.response.headers.Pragma | string | |
| action_result.data.*.data.requests.*.response.response.headers.Public-Key-Pins-Report-Only | string | |
| action_result.data.*.data.requests.*.response.response.headers.Referrer-Policy | string | |
| action_result.data.*.data.requests.*.response.response.headers.Server | string | |
| action_result.data.*.data.requests.*.response.response.headers.Strict-Transport-Security | string | |
| action_result.data.*.data.requests.*.response.response.headers.Timing-Allow-Origin | string | |
| action_result.data.*.data.requests.*.response.response.headers.Transfer-Encoding | string | |
| action_result.data.*.data.requests.*.response.response.headers.Vary | string | |
| action_result.data.*.data.requests.*.response.response.headers.Via | string | |
| action_result.data.*.data.requests.*.response.response.headers.X-Amz-Cf-Id | string | |
| action_result.data.*.data.requests.*.response.response.headers.X-Amz-Cf-Pop | string | |
| action_result.data.*.data.requests.*.response.response.headers.X-Cache | string | |
| action_result.data.*.data.requests.*.response.response.headers.X-Content-Type-Options | string | |
| action_result.data.*.data.requests.*.response.response.headers.X-DIS-Request-ID | string | |
| action_result.data.*.data.requests.*.response.response.headers.X-Frame-Options | string | |
| action_result.data.*.data.requests.*.response.response.headers.X-LLID | string | md5 |
| action_result.data.*.data.requests.*.response.response.headers.X-Powered-By | string | |
| action_result.data.*.data.requests.*.response.response.headers.X-XSS-Protection | string | |
| action_result.data.*.data.requests.*.response.response.headers.accept-ranges | string | |
| action_result.data.*.data.requests.*.response.response.headers.access-control-allow-credentials | string | |
| action_result.data.*.data.requests.*.response.response.headers.access-control-allow-headers | string | |
| action_result.data.*.data.requests.*.response.response.headers.access-control-allow-method | string | |
| action_result.data.*.data.requests.*.response.response.headers.access-control-allow-methods | string | |
| action_result.data.*.data.requests.*.response.response.headers.access-control-allow-origin | string | url |
| action_result.data.*.data.requests.*.response.response.headers.access-control-expose-headers | string | |
| action_result.data.*.data.requests.*.response.response.headers.age | string | |
| action_result.data.*.data.requests.*.response.response.headers.alt-svc | string | |
| action_result.data.*.data.requests.*.response.response.headers.ats-carp-promotion | string | |
| action_result.data.*.data.requests.*.response.response.headers.cache-control | string | |
| action_result.data.*.data.requests.*.response.response.headers.content-disposition | string | |
| action_result.data.*.data.requests.*.response.response.headers.content-encoding | string | |
| action_result.data.*.data.requests.*.response.response.headers.content-length | string | |
| action_result.data.*.data.requests.*.response.response.headers.content-md5 | string | |
| action_result.data.*.data.requests.*.response.response.headers.content-security-policy | string | |
| action_result.data.*.data.requests.*.response.response.headers.content-security-policy-report-only | string | |
| action_result.data.*.data.requests.*.response.response.headers.content-type | string | |
| action_result.data.*.data.requests.*.response.response.headers.cross-origin-opener-policy-report-only | string | |
| action_result.data.*.data.requests.*.response.response.headers.cross-origin-resource-policy | string | |
| action_result.data.*.data.requests.*.response.response.headers.date | string | |
| action_result.data.*.data.requests.*.response.response.headers.etag | string | |
| action_result.data.*.data.requests.*.response.response.headers.expect-ct | string | |
| action_result.data.*.data.requests.*.response.response.headers.expires | string | |
| action_result.data.*.data.requests.*.response.response.headers.last-modified | string | |
| action_result.data.*.data.requests.*.response.response.headers.link | string | |
| action_result.data.*.data.requests.*.response.response.headers.p3p | string | |
| action_result.data.*.data.requests.*.response.response.headers.pragma | string | |
| action_result.data.*.data.requests.*.response.response.headers.public-key-pins-report-only | string | |
| action_result.data.*.data.requests.*.response.response.headers.referrer-policy | string | |
| action_result.data.*.data.requests.*.response.response.headers.report-to | string | |
| action_result.data.*.data.requests.*.response.response.headers.server | string | |
| action_result.data.*.data.requests.*.response.response.headers.set-cookie | string | |
| action_result.data.*.data.requests.*.response.response.headers.status | string | |
| action_result.data.*.data.requests.*.response.response.headers.strict-transport-security | string | |
| action_result.data.*.data.requests.*.response.response.headers.timing-allow-origin | string | |
| action_result.data.*.data.requests.*.response.response.headers.vary | string | |
| action_result.data.*.data.requests.*.response.response.headers.via | string | |
| action_result.data.*.data.requests.*.response.response.headers.x-amz-cf-id | string | |
| action_result.data.*.data.requests.*.response.response.headers.x-amz-cf-pop | string | |
| action_result.data.*.data.requests.*.response.response.headers.x-amz-id-2 | string | |
| action_result.data.*.data.requests.*.response.response.headers.x-amz-request-id | string | |
| action_result.data.*.data.requests.*.response.response.headers.x-amz-server-side-encryption | string | |
| action_result.data.*.data.requests.*.response.response.headers.x-cache | string | |
| action_result.data.*.data.requests.*.response.response.headers.x-content-type-options | string | |
| action_result.data.*.data.requests.*.response.response.headers.x-fb-content-md5 | string | md5 |
| action_result.data.*.data.requests.*.response.response.headers.x-fb-debug | string | |
| action_result.data.*.data.requests.*.response.response.headers.x-frame-options | string | |
| action_result.data.*.data.requests.*.response.response.headers.x-ua-compatible | string | |
| action_result.data.*.data.requests.*.response.response.headers.x-xss-protection | string | |
| action_result.data.*.data.requests.*.response.response.mimeType | string | |
| action_result.data.*.data.requests.*.response.response.protocol | string | url |
| action_result.data.*.data.requests.*.response.response.remoteIPAddress | string | ip ipv6 |
| action_result.data.*.data.requests.*.response.response.remotePort | numeric | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.* | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.:authority | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.:method | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.:path | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.:scheme | string | url |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Accept | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Accept-Encoding | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Accept-Language | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Cache-Control | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Connection | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Cookie | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Host | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Pragma | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Referer | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Sec-Fetch-Dest | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Sec-Fetch-Mode | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Sec-Fetch-Site | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Sec-Fetch-User | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.Upgrade-Insecure-Requests | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.User-Agent | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.accept | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.accept-encoding | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.accept-language | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.cache-control | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.content-length | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.content-type | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.cookie | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.origin | string | url |
| action_result.data.*.data.requests.*.response.response.requestHeaders.pragma | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.referer | string | url |
| action_result.data.*.data.requests.*.response.response.requestHeaders.sec-fetch-dest | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.sec-fetch-mode | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.sec-fetch-site | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.sec-fetch-user | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.upgrade-insecure-requests | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.user-agent | string | |
| action_result.data.*.data.requests.*.response.response.requestHeaders.x-same-domain | string | domain |
| action_result.data.*.data.requests.*.response.response.responseTime | numeric | |
| action_result.data.*.data.requests.*.response.response.securityDetails.certificateId | numeric | |
| action_result.data.*.data.requests.*.response.response.securityDetails.certificateTransparencyCompliance | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.cipher | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.issuer | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.keyExchange | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.keyExchangeGroup | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.protocol | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.sanList | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.signedCertificateTimestampList.*.hashAlgorithm | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.signedCertificateTimestampList.*.logDescription | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.signedCertificateTimestampList.*.logId | string | sha256 |
| action_result.data.*.data.requests.*.response.response.securityDetails.signedCertificateTimestampList.*.origin | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.signedCertificateTimestampList.*.signatureAlgorithm | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.signedCertificateTimestampList.*.signatureData | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.signedCertificateTimestampList.*.status | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.signedCertificateTimestampList.*.timestamp | numeric | |
| action_result.data.*.data.requests.*.response.response.securityDetails.subjectName | string | |
| action_result.data.*.data.requests.*.response.response.securityDetails.validFrom | numeric | |
| action_result.data.*.data.requests.*.response.response.securityDetails.validTo | numeric | |
| action_result.data.*.data.requests.*.response.response.securityHeaders.*.name | string | |
| action_result.data.*.data.requests.*.response.response.securityHeaders.*.value | string | |
| action_result.data.*.data.requests.*.response.response.securityState | string | |
| action_result.data.*.data.requests.*.response.response.status | numeric | |
| action_result.data.*.data.requests.*.response.response.statusText | string | |
| action_result.data.*.data.requests.*.response.response.timing.connectEnd | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.connectStart | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.dnsEnd | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.dnsStart | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.proxyEnd | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.proxyStart | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.pushEnd | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.pushStart | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.receiveHeadersEnd | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.requestTime | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.sendEnd | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.sendStart | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.sslEnd | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.sslStart | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.workerFetchStart | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.workerReady | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.workerRespondWithSettled | numeric | |
| action_result.data.*.data.requests.*.response.response.timing.workerStart | numeric | |
| action_result.data.*.data.requests.*.response.response.url | string | url |
| action_result.data.*.data.requests.*.response.size | numeric | |
| action_result.data.*.data.requests.*.response.type | string | |
| action_result.data.*.data.timing.beginNavigation | string | |
| action_result.data.*.data.timing.domContentEventFired | string | |
| action_result.data.*.data.timing.frameNavigated | string | |
| action_result.data.*.data.timing.frameStartedLoading | string | |
| action_result.data.*.data.timing.frameStoppedLoading | string | |
| action_result.data.*.data.timing.loadEventFired | string | |
| action_result.data.*.description | string | |
| action_result.data.*.fieldErrors.*.location | string | |
| action_result.data.*.fieldErrors.*.msg | string | |
| action_result.data.*.fieldErrors.*.param | string | |
| action_result.data.*.fieldErrors.*.value | string | |
| action_result.data.*.lists.asns | string | |
| action_result.data.*.lists.certificates.*.issuer | string | |
| action_result.data.*.lists.certificates.*.sanList | string | |
| action_result.data.*.lists.certificates.*.subjectName | string | |
| action_result.data.*.lists.certificates.*.validFrom | numeric | |
| action_result.data.*.lists.certificates.*.validTo | numeric | |
| action_result.data.*.lists.countries | string | |
| action_result.data.*.lists.domains | string | |
| action_result.data.*.lists.hashes | string | sha256 |
| action_result.data.*.lists.ips | string | |
| action_result.data.*.lists.linkDomains | string | |
| action_result.data.*.lists.servers | string | |
| action_result.data.*.lists.urls | string | url |
| action_result.data.*.message | string | |
| action_result.data.*.meta.processors.abp.data.*.source | string | |
| action_result.data.*.meta.processors.abp.data.*.type | string | |
| action_result.data.*.meta.processors.abp.data.*.url | string | url |
| action_result.data.*.meta.processors.abp.state | string | |
| action_result.data.*.meta.processors.asn.data.*.asn | string | |
| action_result.data.*.meta.processors.asn.data.*.country | string | |
| action_result.data.*.meta.processors.asn.data.*.date | string | |
| action_result.data.*.meta.processors.asn.data.*.description | string | |
| action_result.data.*.meta.processors.asn.data.*.ip | string | ip ipv6 |
| action_result.data.*.meta.processors.asn.data.*.name | string | |
| action_result.data.*.meta.processors.asn.data.*.registrar | string | |
| action_result.data.*.meta.processors.asn.data.*.route | string | |
| action_result.data.*.meta.processors.asn.state | string | |
| action_result.data.*.meta.processors.cdnjs.data.*.hash | string | sha256 |
| action_result.data.*.meta.processors.cdnjs.data.*.matches | string | |
| action_result.data.*.meta.processors.cdnjs.state | string | |
| action_result.data.*.meta.processors.done.data.state | string | |
| action_result.data.*.meta.processors.done.state | string | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.area | numeric | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.city | string | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.country | string | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.country_name | string | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.eu | string | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.ll | numeric | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.metro | numeric | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.range | numeric | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.region | string | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.timezone | string | |
| action_result.data.*.meta.processors.geoip.data.*.geoip.zip | numeric | |
| action_result.data.*.meta.processors.geoip.data.*.ip | string | ip ipv6 |
| action_result.data.*.meta.processors.geoip.state | string | |
| action_result.data.*.meta.processors.gsb.state | string | |
| action_result.data.*.meta.processors.rdns.data.*.ip | string | ip ipv6 |
| action_result.data.*.meta.processors.rdns.data.*.ptr | string | |
| action_result.data.*.meta.processors.rdns.state | string | |
| action_result.data.*.meta.processors.wappa.state | string | |
| action_result.data.*.options.useragent | string | |
| action_result.data.*.page.asn | string | |
| action_result.data.*.page.asnname | string | |
| action_result.data.*.page.city | string | |
| action_result.data.*.page.country | string | |
| action_result.data.*.page.domain | string | domain |
| action_result.data.*.page.ip | string | ip ipv6 |
| action_result.data.*.page.ptr | string | |
| action_result.data.*.page.server | string | |
| action_result.data.*.page.url | string | url |
| action_result.data.*.result | string | url |
| action_result.data.*.stats.IPv6Percentage | numeric | |
| action_result.data.*.stats.adBlocked | numeric | |
| action_result.data.*.stats.domainStats.*.count | numeric | |
| action_result.data.*.stats.domainStats.*.countries | string | |
| action_result.data.*.stats.domainStats.*.domain | string | domain |
| action_result.data.*.stats.domainStats.*.encodedSize | numeric | |
| action_result.data.*.stats.domainStats.*.index | numeric | |
| action_result.data.*.stats.domainStats.*.initiators | string | |
| action_result.data.*.stats.domainStats.*.ips | string | |
| action_result.data.*.stats.domainStats.*.redirects | numeric | |
| action_result.data.*.stats.domainStats.*.size | numeric | |
| action_result.data.*.stats.ipStats.*.asn.asn | string | |
| action_result.data.*.stats.ipStats.*.asn.country | string | |
| action_result.data.*.stats.ipStats.*.asn.date | string | |
| action_result.data.*.stats.ipStats.*.asn.description | string | |
| action_result.data.*.stats.ipStats.*.asn.ip | string | ip ipv6 |
| action_result.data.*.stats.ipStats.*.asn.name | string | |
| action_result.data.*.stats.ipStats.*.asn.registrar | string | |
| action_result.data.*.stats.ipStats.*.asn.route | string | |
| action_result.data.*.stats.ipStats.*.count | string | |
| action_result.data.*.stats.ipStats.*.countries | string | |
| action_result.data.*.stats.ipStats.*.domains | string | |
| action_result.data.*.stats.ipStats.*.encodedSize | numeric | |
| action_result.data.*.stats.ipStats.*.geoip.area | numeric | |
| action_result.data.*.stats.ipStats.*.geoip.city | string | |
| action_result.data.*.stats.ipStats.*.geoip.country | string | |
| action_result.data.*.stats.ipStats.*.geoip.country_name | string | |
| action_result.data.*.stats.ipStats.*.geoip.eu | string | |
| action_result.data.*.stats.ipStats.*.geoip.ll | numeric | |
| action_result.data.*.stats.ipStats.*.geoip.metro | numeric | |
| action_result.data.*.stats.ipStats.*.geoip.range | numeric | |
| action_result.data.*.stats.ipStats.*.geoip.region | string | |
| action_result.data.*.stats.ipStats.*.geoip.timezone | string | |
| action_result.data.*.stats.ipStats.*.geoip.zip | numeric | |
| action_result.data.*.stats.ipStats.*.index | numeric | |
| action_result.data.*.stats.ipStats.*.ip | string | ip ipv6 |
| action_result.data.*.stats.ipStats.*.ipv6 | boolean | |
| action_result.data.*.stats.ipStats.*.rdns.ip | string | ip ipv6 |
| action_result.data.*.stats.ipStats.*.rdns.ptr | string | |
| action_result.data.*.stats.ipStats.*.redirects | numeric | |
| action_result.data.*.stats.ipStats.*.requests | numeric | |
| action_result.data.*.stats.ipStats.*.size | numeric | |
| action_result.data.*.stats.malicious | numeric | |
| action_result.data.*.stats.protocolStats.*.count | numeric | |
| action_result.data.*.stats.protocolStats.*.countries | string | |
| action_result.data.*.stats.protocolStats.*.encodedSize | numeric | |
| action_result.data.*.stats.protocolStats.*.ips | string | |
| action_result.data.*.stats.protocolStats.*.protocol | string | url |
| action_result.data.*.stats.protocolStats.*.size | numeric | |
| action_result.data.*.stats.regDomainStats.*.count | numeric | |
| action_result.data.*.stats.regDomainStats.*.encodedSize | numeric | |
| action_result.data.*.stats.regDomainStats.*.index | numeric | |
| action_result.data.*.stats.regDomainStats.*.ips | string | |
| action_result.data.*.stats.regDomainStats.*.redirects | numeric | |
| action_result.data.*.stats.regDomainStats.*.regDomain | string | domain |
| action_result.data.*.stats.regDomainStats.*.size | numeric | |
| action_result.data.*.stats.regDomainStats.*.subDomains.*.country | string | |
| action_result.data.*.stats.regDomainStats.*.subDomains.*.domain | string | domain |
| action_result.data.*.stats.regDomainStats.*.subDomains.*.failed | boolean | |
| action_result.data.*.stats.resourceStats.*.compression | string | |
| action_result.data.*.stats.resourceStats.*.count | numeric | |
| action_result.data.*.stats.resourceStats.*.countries | string | |
| action_result.data.*.stats.resourceStats.*.encodedSize | numeric | |
| action_result.data.*.stats.resourceStats.*.ips | string | ip ipv6 |
| action_result.data.*.stats.resourceStats.*.latency | numeric | |
| action_result.data.*.stats.resourceStats.*.percentage | numeric | |
| action_result.data.*.stats.resourceStats.*.size | numeric | |
| action_result.data.*.stats.resourceStats.*.type | string | |
| action_result.data.*.stats.securePercentage | numeric | |
| action_result.data.*.stats.secureRequests | numeric | |
| action_result.data.*.stats.serverStats.*.count | numeric | |
| action_result.data.*.stats.serverStats.*.countries | string | |
| action_result.data.*.stats.serverStats.*.encodedSize | numeric | |
| action_result.data.*.stats.serverStats.*.ips | string | |
| action_result.data.*.stats.serverStats.*.server | string | |
| action_result.data.*.stats.serverStats.*.size | numeric | |
| action_result.data.*.stats.tlsStats.*.count | numeric | |
| action_result.data.*.stats.tlsStats.*.countries | string | |
| action_result.data.*.stats.tlsStats.*.encodedSize | numeric | |
| action_result.data.*.stats.tlsStats.*.ips | string | |
| action_result.data.*.stats.tlsStats.*.protocols.QUIC / / AES_128_GCM | numeric | |
| action_result.data.*.stats.tlsStats.*.protocols.TLS 1.2 / ECDHE_ECDSA / AES_128_GCM | numeric | |
| action_result.data.*.stats.tlsStats.*.protocols.TLS 1.2 / ECDHE_RSA / AES_128_GCM | numeric | |
| action_result.data.*.stats.tlsStats.*.protocols.TLS 1.3 / / AES_128_GCM | numeric | |
| action_result.data.*.stats.tlsStats.*.protocols.TLS 1.3 / / AES_256_GCM | numeric | |
| action_result.data.*.stats.tlsStats.*.securityState | string | |
| action_result.data.*.stats.tlsStats.*.size | numeric | |
| action_result.data.*.stats.totalLinks | numeric | |
| action_result.data.*.stats.uniqCountries | numeric | |
| action_result.data.*.status | numeric | |
| action_result.data.*.submitter.country | string | |
| action_result.data.*.task.domURL | string | url |
| action_result.data.*.task.method | string | |
| action_result.data.*.task.options.useragent | string | |
| action_result.data.*.task.reportURL | string | url |
| action_result.data.*.task.screenshotURL | string | url |
| action_result.data.*.task.source | string | |
| action_result.data.*.task.time | string | |
| action_result.data.*.task.url | string | url |
| action_result.data.*.task.userAgent | string | |
| action_result.data.*.task.uuid | string | urlscan submission id |
| action_result.data.*.task.visibility | string | |
| action_result.data.*.url | string | url |
| action_result.data.*.uuid | string | |
| action_result.data.*.verdicts.community.score | numeric | |
| action_result.data.*.verdicts.community.votesBenign | numeric | |
| action_result.data.*.verdicts.community.votesMalicious | numeric | |
| action_result.data.*.verdicts.community.votesTotal | numeric | |
| action_result.data.*.verdicts.engines.benignTotal | numeric | |
| action_result.data.*.verdicts.engines.enginesTotal | numeric | |
| action_result.data.*.verdicts.engines.maliciousTotal | numeric | |
| action_result.data.*.verdicts.engines.score | numeric | |
| action_result.data.*.verdicts.overall.hasVerdicts | numeric | |
| action_result.data.*.verdicts.overall.malicious | boolean | |
| action_result.data.*.verdicts.overall.score | numeric | |
| action_result.data.*.verdicts.urlscan.malicious | boolean | |
| action_result.data.*.verdicts.urlscan.score | numeric | |
| action_result.data.*.visibility | string | |
| action_result.summary | string | |
| action_result.message | string | |
| summary.total_objects | numeric | |
| summary.total_objects_successful | numeric |