URLScan

URLScan is a free online service that scans URLs for malicious content.

Overview

URLScan is a powerful website scanner that allows you to analyze and investigate URLs for potential security threats. By integrating URLScan with Qevlar AI, you can enhance your security investigations with automated URL analysis, screenshot capture, and comprehensive threat detection capabilities.

How to integrate URLScan with Qevlar

Step 1: Navigate to Integrations

1. Log in to your Qevlar AI platform
2. In the left sidebar, click on Integrations
3. Browse or search for the URLScan integration
4. Click on the URLScan integration card

Step 2: Choose Your Integration Method

Qevlar offers two options for integrating URLScan.

• Option 1: Use Qevlar's Account (Recommended for Quick Start)

  If you want to start using URLScan immediately without setting up your own API key:

  1. Check the box "I want to use Qevlar's account" (marked as 1 in the image)
  2. Click Save

  This option allows you to use URLScan's features through Qevlar's shared account. No additional configuration is required.

  info

  Using Qevlar's account may have usage limitations. Using your own API key is recommended to overcome the potential rate limits.

• Option 2: Use Your Personal URLScan API Key

  For unlimited access and personalized usage tracking:

  1. Leave the "I want to use Qevlar's account" checkbox unchecked
  2. Enter your URLScan API key in the API Key field (marked as 2 in the image)
  3. Click Test connection to verify your API key is valid (marked as 3 in the image)
  4. Once the connection test passes, click Save

Step 3: Obtain Your URLScan API Key

If you choose to use your personal API key, follow these steps to obtain it:

1. Go to URLScan.io and sign in to your account
2. The main URLScan interface will appear:

3. Click on Your Account in the top navigation bar
4. In your account dashboard, click on Settings & API in the left sidebar:

5. On the API Keys page, click the New API key button:

6. In the New API key dialog:
   • Enter a description for your API key (e.g., "Qevlar AI")
   • Click Create API key

7. Copy your newly generated API key
8. Return to Qevlar and paste the API key in the integration dialog

Step 4: Test and Save

1. After entering your API key, click Test connection
2. Wait for the connection test to complete
3. If successful, click Save to finalize the integration
4. If the test fails, verify your API key is correct and try again

Using URLScan in Qevlar

Once integrated, you can use URLScan features within your Qevlar investigations:

• URL Analysis: Submit URLs for comprehensive security scanning
• Screenshot Capture: View visual representations of scanned websites
• DOM Analysis: Examine the Document Object Model of web pages
• Network Requests: Review all network connections made by the URL
• Threat Detection: Identify malicious scripts, phishing attempts, and other threats
• Historical Data: Access previously scanned results and trends

Scan Types

URLScan offers three visibility levels for scans:

1. Public Scans: Results are publicly visible and searchable
2. Unlisted Scans: Results have a secret URL but aren't indexed
3. Private Scans: Results are only visible to your account (limited on free accounts)

Troubleshooting

1. Connection Test Failed

• Verify your API key is correctly copied without extra spaces
• Ensure your URLScan account is active and verified
• Check if your API key has the necessary permissions

2. Rate Limiting

• If using Qevlar's account, you may encounter rate limits during peak usage
• Consider using your personal API key for higher rate limits
• URLScan free accounts have different limits based on scan type:
  • Public scans: 5000 per day
  • Unlisted scans: 1000 per day
  • Private scans: 50 per day

3. API Key Not Working

• Log in to URLScan and check if your API key is active
• Regenerate your API key if necessary
• Ensure you're copying the entire key
• Check if your URLScan account requires email verification

4. Scan Results Not Appearing

• Some scans may take time to process, especially for complex websites
• Check if the URL is accessible and not blocking automated scanners
• Verify that the URL format is correct (include http:// or https://)

Best Practices

1. Security: Keep your API key confidential and rotate it periodically
2. Usage: Monitor your API usage to stay within daily limits
3. Privacy: Be aware that URLScan results are public by default unless you have a paid account
4. Integration: Test the integration regularly to ensure it's working properly
5. Scanning: Always scan suspicious URLs before accessing them directly

API Limits & Quotas

Daily quotas are reset at 12:00 AM local time (Midnight UTC).

1. Free Account Limits

• Additional Free Account Features:
  • Public scan results by default
  • Basic API features
  • Standard processing priority

2. Paid Account

• Higher rate limits for all actions
• More private scan options
• Advanced API features
• Priority processing
• Custom quotas available

Support

If you encounter any issues with the URLScan integration:

• Contact Qevlar support
• Visit the URLScan documentation