The detection ratio, represented as detected engines / total engines.
Example: "1/12" means 1 engine detected the URL out of 12 engines in total.
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"ThreatBook CTI Documentation","colors":{"primary":"#CC0000","light":"#eb2d17","dark":"#15803D"},"logo":{"light":"https://mintcdn.com/secai-a5d02ac5/R6uyh1S1hrTJxXQ_/logo/logo_light.svg?fit=max\u0026auto=format\u0026n=R6uyh1S1hrTJxXQ_\u0026q=85\u0026s=c467c47ec081583290c17e11c5d34135","dark":"https://mintcdn.com/secai-a5d02ac5/R6uyh1S1hrTJxXQ_/logo/logo_dark.svg?fit=max\u0026auto=format\u0026n=R6uyh1S1hrTJxXQ_\u0026q=85\u0026s=ee156437cceb28ed4624144adaa33d04","href":"https://docs.threatbook.io/"},"favicon":"https://mintcdn.com/secai-a5d02ac5/zTkhlyUlQIO0Fe8R/favicon.ico?fit=max\u0026auto=format\u0026n=zTkhlyUlQIO0Fe8R\u0026q=85\u0026s=72ad6b570c62b69bbf882e317b3f8b86","api":{"params":{"expanded":"all"},"playground":{"display":"interactive","proxy":false}},"navbar":{"links":[{"href":"https://i.threatbook.io/research","label":"Try Investigator"},{"href":"https://ati.threatbook.io/","label":"Login to ATI"}],"primary":{"type":"button","label":"Contact us","href":"https://i.threatbook.io/contactus"}},"footer":{"socials":{"x":"https://x.com/ThreatBookLabs","linkedin":"https://www.linkedin.com/company/threatbook"}},"styling":{"latex":false},"navigation":{"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"secai-a5d02ac5","hasAudioNarration":false,"actualSubdomain":"secai-a5d02ac5","customDomains":["docs.threatbook.io"],"gitSource":{"type":"github","owner":"qilei-booker","repo":"docs","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6ac9d31150d8f4d6aeeb03ad","collectionId":"35312225-3107-4208-9227-53b5e6ca59b7","schemaVersion":"v3","latestBuiltDeploymentHistoryId":"6ac9d31150d8f4d6aeeb03ad"},"entitlements":{},"buildId":"6ac9d31150d8f4d6aeeb03ad","clientVersion":"0.0.3964","searchFilterCounts":[{"language":"default","tag":"API Reference","count":21},{"language":"default","tag":"Guides","count":12},{"language":"default","tag":"Enrichment","count":9},{"language":"default","tag":"Feeds","count":6},{"language":"default","tag":"Deprecated","count":3},{"language":"default","tag":"Reports","count":3},{"language":"default","tag":"Quick Start","count":3},{"language":"default","tag":"Use Cases","count":3},{"language":"default","tag":"Our CTI Data","count":3},{"language":"default","tag":"Knowledge Hub","count":2}]},"assistantConfig":{},"hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-v7-file-tree","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"pause-universal-search-reconcile","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"per-site-search-delta","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-private-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-nav-generations","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"byok-sep-25","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"vite-origin","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-agent-model-picker","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-updated-9-15","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"isAtlas":false,"googleFontsInlined":false},"customCss":[{"filePath":"style.css","content":".threatBook-download-btn{color:#fff;background-color:#1a1a1a;border-radius:40px;cursor:pointer;display:inline-flex;padding:8px 20px;justify-content:center;align-items:center;gap:8px;font-size:12px;font-weight:500;line-height:16px}.threatBook-download-btn:hover{background-color:#4d4d4d}.threatBook-download-btn svg{width:14px;height:14px;fill:#fff}a[href=\"https://threatbook.ai/contactus\"]{display:none}#topbar-cta-button{--primary-light:26 26 26;--primary-dark:26 26 26}table th{text-align:left}"}],"page":{"pagePath":"api-reference/enrichment/url-intelligence-v2","slug":"/api-reference/enrichment/url-intelligence-v2","pageMetadata":{"title":"URL Intelligence","openapi":"api-reference/enrichment/url-intelligence-v2.openapi.json POST /v2/url/query","description":"Retrieve URL scan engine detection results and the analysis results of downloaded files.","href":"/api-reference/enrichment/url-intelligence-v2"},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Retrieve URL scan engine detection results and the analysis results of downloaded files.\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){return _jsx(_Fragment,{})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"URL Intelligence","openapi":"api-reference/enrichment/url-intelligence-v2.openapi.json POST /v2/url/query","description":"Retrieve URL scan engine detection results and the analysis results of downloaded files.","href":"/api-reference/enrichment/url-intelligence-v2"}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":["/_mintlify/custom/secai-a5d02ac5/5dcccf5574296389/custom.js"],"openApiReferenceData":{"operation":{"summary":"URL Intelligence (V2)","deprecated":false,"description":"Retrieve URL scan engine detection results and the analysis results of downloaded files.","tags":[],"parameters":["93f387ab-3975-4ec0-af2e-87f8df6e6941","e2d25e91-7abb-4aff-926e-617a1644c10b"],"responses":{"200":"ff228b65-d808-4b15-b4fb-e2f4edfdaef0","202":"ecb6ef73-9127-4352-8213-488f8648cf16","400":"7c400fb1-94e7-476c-b564-5f9b7126c1b0","401":"9ad5e9e9-ecd3-40ca-b656-98ddd38c58c5","405":"11c5f141-8314-4086-8db2-185b20c73b20","429":"0d165c56-5429-4dc3-9622-b169892f48aa","500":"554e622f-bcfe-4634-9b09-54f8a5304d85"},"security":[],"method":"post","type":"path","servers":["64a7aa74-56a5-4178-8a4f-cdd035ca93f4"],"path":"/v2/url/query","baseUrlOptions":["https://api.threatbook.io"],"title":"URL Intelligence (V2)","codeSamples":[],"requiredOnlyExamples":false,"requestExampleType":"generated","responseExampleType":"generated","disableProxy":true},"dependencies":{"parameters":{"93f387ab-3975-4ec0-af2e-87f8df6e6941":{"name":"apikey","in":"query","description":"Your API key. For details on how to obtain and manage your API key, please refer to the [Authentication](https://docs.threatbook.io/api-reference/authentication) page.\n\n**Kindly note:**\n\nPlease check if you have bound your access IP to the key and have the authority quotas to access this API before you interact with it.","required":false,"example":"87720c1af3ee4acc947630c31e3c53af6f1bfda4d44f423f9e7c130e91479be8","schema":{"type":"string","isRequired":false,"description":"Your API key. For details on how to obtain and manage your API key, please refer to the [Authentication](https://docs.threatbook.io/api-reference/authentication) page.\n\n**Kindly note:**\n\nPlease check if you have bound your access IP to the key and have the authority quotas to access this API before you interact with it.","uniqueKey":"","typeLabel":"string"}},"e2d25e91-7abb-4aff-926e-617a1644c10b":{"name":"url","in":"query","description":"The URL to be scanned. The URL must be encoded.","required":true,"example":"http://bing.com/edgepinning/allowlist","schema":{"type":"string","isRequired":true,"description":"The URL to be scanned. The URL must be encoded.","uniqueKey":"","typeLabel":"string"}}},"responses":{"ff228b65-d808-4b15-b4fb-e2f4edfdaef0":{"description":"","content":{"application/json":{"schema":{"type":"object","properties":{"msg":{"type":"string","isRequired":true,"uniqueKey":"msg","typeLabel":"string"},"response_code":{"type":"integer","isRequired":true,"uniqueKey":"response_code","typeLabel":"integer"},"data":{"type":"object","properties":{"multiengines":{"type":"object","properties":{},"description":"**URL Scan Engine Detection Results** \nThe following engines are included:\n\n- threatbook \n- threatcrowd.com \n- squidblacklist.org \n- osint.bambenekconsulting.com \n- malwaredomains.com \n- malwareconfig.com \n- cymon.io \n- cybercrime-tracker.net \n- circl.lu-misp \n- alienvault.com \n- AlienVault-OTX \n- Google Safebrowsing \n\n**Detection Result Definitions**\n\n- **No Detection**: Displayed as safe \n\n- **Detected**: \n - **malware**: Malicious software \n - **c2**: Command and Control \n - **phishing**: Phishing \n - **suspicious_miningpool**: Public mining pool \n - **suspicious_coinminer**: Private mining pool \n - **compromised**: Compromised website \n\n- **Whitelist**: \n - **whitelist**: Whitelisted ","isRequired":true,"uniqueKey":"data.multiengines","typeLabel":"object"},"threat_level":{"type":"string","description":"**URL Threat Level** \nThis field includes the following types:\n\n- **malicious** \n- **suspicious** \n- **unknown** \n- **clean** ","isRequired":true,"uniqueKey":"data.threat_level","typeLabel":"string"},"sandbox":{"type":"object","properties":{},"description":"**Sandbox Analysis Report** \nA JSON object that includes the following fields:\n\n- **threat_level**: Threat level (`malicious`, `suspicious`, `unknown`, `clean`) \n- **submit_time**: Submission time \n- **file_name**: File name \n- **file_type**: File type \n- **sample_sha256**: File SHA256 \n- **tag**: File detection tags \n- **sb_status**: Task status \n- **sandbox_type**: The last successful sandbox environment used for analysis \n- **sandbox_type_list**: List of all sandbox environments in which the sample was successfully analyzed ","isRequired":true,"uniqueKey":"data.sandbox","typeLabel":"object"},"details":{"type":"object","properties":{},"description":"**HTTP Response Information** \nA JSON object that includes the following fields:\n\n- **headers**: Response headers \n- **lastSeen**: Last scan time \n- **ip**: Resolved IP address \n- **historyScan**: Historical detection results of downloaded files \n- **finalUrl**: Final URL after redirection \n- **url**: Original URL address \n- **sha256s**: Hash values (SHA256) of historically downloaded files \n- **status**: Status code \n- **httpStatusCode**: HTTP response code ","isRequired":true,"uniqueKey":"data.details","typeLabel":"object"},"me_positives":{"type":"integer","description":"The number of multi-engines that detected the URL as malicious.","isRequired":true,"uniqueKey":"data.me_positives","typeLabel":"integer"},"me_ratio":{"type":"string","description":" The detection ratio, represented as *detected engines / total engines*. \n - Example: `\"1/12\"` means 1 engine detected the URL out of 12 engines in total.","isRequired":true,"uniqueKey":"data.me_ratio","typeLabel":"string"}},"required":["sandbox","details","multiengines","me_positives","me_ratio","threat_level"],"isRequired":true,"uniqueKey":"data","typeLabel":"object"}},"required":["data","response_code","msg"],"uniqueKey":"","typeLabel":"object"},"example":{"response_code":200,"msg":"Success","data":{"multiengines":{"threatbook":"whitelist","threatcrowd.com":"safe","squidblacklist.org":"safe","osint.bambenekconsulting.com":"safe","malwaredomains.com":"safe","malwareconfig.com":"safe","cymon.io":"safe","cybercrime-tracker.net":"safe","circl.lu-misp":"malware","alienvault.com":"safe","AlienVault-OTX":"safe","Google Safebrowsing":"safe"},"threat_level":"unknown","sandbox":{"threat_level":"unknown","submit_time":"2021-02-04 06:12:03","file_name":"allowlist","sample_sha256":"c707737d9b33b1c3f97c58c16557fe522d72d2a787fe3904f3e15853bcdc6187","sb_status":"OK","sandbox_type":"win10_1903_enx64_office2016","tag":{"s":["json"],"x":["",""]},"sandbox_type_list":["win7_sp1_enx86_office2013","win7_sp1_enx64_office2013","win10_1903_enx64_office2016"]},"details":{"headers":{"X-CDN-TraceID":"0.df2dc017.1758892677.32052bfa","X-EventID":"68d6928658de47418e6664d5720929ec","Permissions-Policy":"unload=()","Connection":"keep-alive","P3P":"CP=\"NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND\"","X-MSEdge-Ref":"Ref A: 03CF8523D6C7499D93664520AC6F5B41 Ref B: TYO201151004060 Ref C: 2025-09-26T13:17:58Z","Date":"Fri, 26 Sep 2025 13:17:58 GMT","UserAgentReductionOptOut":"A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=","Cache-Control":"public, max-age=3600","ETag":"DpuVz2peupDazmhHdjK3mg==","Report-To":"{\"group\":\"csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingcsp\"}]}","Content-Security-Policy":"script-src https: 'strict-dynamic' 'report-sample' 'wasm-unsafe-eval' 'nonce-g64bSCNlxMpRWgFmG+SaCfJW+j9m5j1IfL0M6CaWuVU='; base-uri 'self';report-to csp-endpoint","Vary":"Accept-Encoding","Accept-CH":"Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version","Content-Type":"application/json"},"lastSeen":"2025-09-26 05:17:57","ip":"150.171.27.10","finalUrl":"http://www.bing.com/edgepinning/allowlist","url":"http://bing.com/edgepinning/allowlist","sha256s":["c707737d9b33b1c3f97c58c16557fe522d72d2a787fe3904f3e15853bcdc6187"],"status":3,"httpStatusCode":200,"historyScans":[{"fileName":"allowlist","sha256":"c707737d9b33b1c3f97c58c16557fe522d72d2a787fe3904f3e15853bcdc6187","multiEngines":"0/28","fileType":"json"},{"fileName":"allowlist","sha256":"c707737d9b33b1c3f97c58c16557fe522d72d2a787fe3904f3e15853bcdc6187","multiEngines":"0/28","fileType":"json"},{"fileName":"allowlist","sha256":"c707737d9b33b1c3f97c58c16557fe522d72d2a787fe3904f3e15853bcdc6187","multiEngines":"0/28","fileType":"json"},{"fileName":"allowlist","sha256":"c707737d9b33b1c3f97c58c16557fe522d72d2a787fe3904f3e15853bcdc6187","multiEngines":"0/28","fileType":"json"},{"fileName":"allowlist","sha256":"c707737d9b33b1c3f97c58c16557fe522d72d2a787fe3904f3e15853bcdc6187","multiEngines":"0/28","fileType":"json"}]},"me_positives":1,"me_ratio":"1/12"}},"examples":{"Example":{"title":"Example","value":{"response_code":200,"msg":"Success","data":{"multiengines":{"threatbook":"whitelist","threatcrowd.com":"safe","squidblacklist.org":"safe","osint.bambenekconsulting.com":"safe","malwaredomains.com":"safe","malwareconfig.com":"safe","cymon.io":"safe","cybercrime-tracker.net":"safe","circl.lu-misp":"malware","alienvault.com":"safe","AlienVault-OTX":"safe","Google Safebrowsing":"safe"},"threat_level":"unknown","sandbox":{"threat_level":"unknown","submit_time":"2021-02-04 06:12:03","file_name":"allowlist","sample_sha256":"c707737d9b33b1c3f97c58c16557fe522d72d2a787fe3904f3e15853bcdc6187","sb_status":"OK","sandbox_type":"win10_1903_enx64_office2016","tag":{"s":["json"],"x":["",""]},"sandbox_type_list":["win7_sp1_enx86_office2013","win7_sp1_enx64_office2013","win10_1903_enx64_office2016"]},"details":{"headers":{"X-CDN-TraceID":"0.df2dc017.1758892677.32052bfa","X-EventID":"68d6928658de47418e6664d5720929ec","Permissions-Policy":"unload=()","Connection":"keep-alive","P3P":"CP=\"NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND\"","X-MSEdge-Ref":"Ref A: 03CF8523D6C7499D93664520AC6F5B41 Ref B: TYO201151004060 Ref C: 2025-09-26T13:17:58Z","Date":"Fri, 26 Sep 2025 13:17:58 GMT","UserAgentReductionOptOut":"A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=","Cache-Control":"public, max-age=3600","ETag":"DpuVz2peupDazmhHdjK3mg==","Report-To":"{\"group\":\"csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://aefd.nelreports.net/api/report?cat=bingcsp\"}]}","Content-Security-Policy":"script-src https: 'strict-dynamic' 'report-sample' 'wasm-unsafe-eval' 'nonce-g64bSCNlxMpRWgFmG+SaCfJW+j9m5j1IfL0M6CaWuVU='; base-uri 'self';report-to csp-endpoint","Vary":"Accept-Encoding","Accept-CH":"Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version","Content-Type":"application/json"},"lastSeen":"2025-09-26 05:17:57","ip":"150.171.27.10","finalUrl":"http://www.bing.com/edgepinning/allowlist","url":"http://bing.com/edgepinning/allowlist","sha256s":["c707737d9b33b1c3f97c58c16557fe522d72d2a787fe3904f3e15853bcdc6187"],"status":3,"httpStatusCode":200,"historyScans":[{"fileName":"allowlist","sha256":"c707737d9b33b1c3f97c58c16557fe522d72d2a787fe3904f3e15853bcdc6187","multiEngines":"0/28","fileType":"json"},{"fileName":"allowlist","sha256":"c707737d9b33b1c3f97c58c16557fe522d72d2a787fe3904f3e15853bcdc6187","multiEngines":"0/28","fileType":"json"},{"fileName":"allowlist","sha256":"c707737d9b33b1c3f97c58c16557fe522d72d2a787fe3904f3e15853bcdc6187","multiEngines":"0/28","fileType":"json"},{"fileName":"allowlist","sha256":"c707737d9b33b1c3f97c58c16557fe522d72d2a787fe3904f3e15853bcdc6187","multiEngines":"0/28","fileType":"json"},{"fileName":"allowlist","sha256":"c707737d9b33b1c3f97c58c16557fe522d72d2a787fe3904f3e15853bcdc6187","multiEngines":"0/28","fileType":"json"}]},"me_positives":1,"me_ratio":"1/12"}}}},"exampleType":"examples"}},"headers":{},"exampleType":"examples"},"ecb6ef73-9127-4352-8213-488f8648cf16":{"description":"","content":{"application/json":{"schema":{"title":"","type":"object","properties":{"msg":{"type":"string","enum":[" In Progress"],"isRequired":true,"uniqueKey":"msg","typeLabel":"enum\u003cstring>"},"response_code":{"type":"integer","const":202,"isRequired":true,"uniqueKey":"response_code","typeLabel":"integer"}},"required":["msg","response_code"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example 1":{"title":"Example 1","value":{"msg":" In Progress","response_code":202}}},"exampleType":"examples"}},"exampleType":"examples"},"7c400fb1-94e7-476c-b564-5f9b7126c1b0":{"description":"","content":{"application/json":{"schema":{"type":"object","properties":{"msg":{"type":"string","enum":["Required:{resource/apikey}","Invalid parameter:{parameter}"],"isRequired":true,"uniqueKey":"msg","typeLabel":"enum\u003cstring>"},"response_code":{"type":"integer","const":400,"isRequired":true,"uniqueKey":"response_code","typeLabel":"integer"}},"required":["msg","response_code"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example 1":{"title":"Example 1","value":{"msg":"Required:{resource/apikey}","response_code":400}}},"exampleType":"examples"}},"exampleType":"examples"},"9ad5e9e9-ecd3-40ca-b656-98ddd38c58c5":{"description":"","content":{"application/json":{"schema":{"type":"object","properties":{"msg":{"type":"string","enum":["Invalid account status","Invalid access IP: {actual IP address}","Invalid API key","Invalid key status","No access to the API","Expired API key","No access to the requested resource","No access to: {parameter}"],"isRequired":true,"uniqueKey":"msg","typeLabel":"enum\u003cstring>"},"response_code":{"type":"integer","const":401,"isRequired":true,"uniqueKey":"response_code","typeLabel":"integer"}},"required":["msg","response_code"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example 1":{"title":"Example 1","value":{"msg":"Invalid account status","response_code":401}}},"exampleType":"examples"}},"exampleType":"examples"},"11c5f141-8314-4086-8db2-185b20c73b20":{"description":"","content":{"application/json":{"schema":{"type":"object","properties":{"msg":{"type":"string","const":"Invalid API method","isRequired":true,"uniqueKey":"msg","typeLabel":"string"},"response_code":{"type":"integer","const":405,"isRequired":true,"uniqueKey":"response_code","typeLabel":"integer"}},"required":["msg","response_code"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example 1":{"title":"Example 1","value":{"msg":"Invalid API method","response_code":405}}},"exampleType":"examples"}},"exampleType":"examples"},"0d165c56-5429-4dc3-9622-b169892f48aa":{"description":"","content":{"application/json":{"schema":{"type":"object","properties":{"msg":{"type":"string","enum":["Request rate limitation","Beyond {daily/monthly/total} quotas limitation"],"isRequired":true,"uniqueKey":"msg","typeLabel":"enum\u003cstring>"},"response_code":{"type":"integer","const":429,"isRequired":true,"uniqueKey":"response_code","typeLabel":"integer"}},"required":["msg","response_code"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example 1":{"title":"Example 1","value":{"msg":"Request rate limitation","response_code":429}}},"exampleType":"examples"}},"exampleType":"examples"},"554e622f-bcfe-4634-9b09-54f8a5304d85":{"description":"","content":{"application/json":{"schema":{"type":"object","properties":{"msg":{"type":"string","enum":["System error","URL Download Fail"],"isRequired":true,"uniqueKey":"msg","typeLabel":"enum\u003cstring>"},"response_code":{"type":"integer","const":500,"isRequired":true,"uniqueKey":"response_code","typeLabel":"integer"}},"required":["msg","response_code"],"uniqueKey":"","typeLabel":"object"},"examples":{"Example 1":{"title":"Example 1","value":{"msg":"System error","response_code":500}}},"exampleType":"examples"}},"exampleType":"examples"}},"security":{},"servers":{"64a7aa74-56a5-4178-8a4f-cdd035ca93f4":{"url":"https://api.threatbook.io"}}},"originalFileLocation":"api-reference/enrichment/url-intelligence-v2.openapi.json"},"subdomain":"secai-a5d02ac5","siteName":"ThreatBook CTI Documentation","title":"URL Intelligence - ThreatBook CTI Documentation","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-01-28T06:06:02.485Z","originalFileLocation":"api-reference/enrichment/url-intelligence-v2.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Retrieve URL scan engine detection results and the analysis results of downloaded files.\">\u003cmeta data-mint-head name=\"application-name\" content=\"ThreatBook CTI Documentation\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/secai-a5d02ac5/FIkeW9BxQq6Kwlsn/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/secai-a5d02ac5/FIkeW9BxQq6Kwlsn/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/secai-a5d02ac5/FIkeW9BxQq6Kwlsn/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/secai-a5d02ac5/FIkeW9BxQq6Kwlsn/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/secai-a5d02ac5/FIkeW9BxQq6Kwlsn/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/secai-a5d02ac5/FIkeW9BxQq6Kwlsn/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/secai-a5d02ac5/FIkeW9BxQq6Kwlsn/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/secai-a5d02ac5/FIkeW9BxQq6Kwlsn/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/secai-a5d02ac5/FIkeW9BxQq6Kwlsn/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"URL Intelligence - ThreatBook CTI Documentation\">\u003cmeta data-mint-head property=\"og:description\" content=\"Retrieve URL scan engine detection results and the analysis results of downloaded files.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"ThreatBook CTI Documentation\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.threatbook.io/api-reference/enrichment/url-intelligence-v2\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://secai-a5d02ac5.mintlify.app/_mintlify/api/og/v2?division=Enrichment\u0026amp;title=URL+Intelligence\u0026amp;description=Retrieve+URL+scan+engine+detection+results+and+the+analysis+results+of+downloaded+files.\u0026amp;theme=cc96c7d1e94e3382abfd5738\u0026amp;signature=a62a7863e95c0660e29f2f13c11c8d7e3d0bdc7e56cb842a64939dd5174b5397\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"URL Intelligence - ThreatBook CTI Documentation\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Retrieve URL scan engine detection results and the analysis results of downloaded files.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://secai-a5d02ac5.mintlify.app/_mintlify/api/og/v2?division=Enrichment\u0026amp;title=URL+Intelligence\u0026amp;description=Retrieve+URL+scan+engine+detection+results+and+the+analysis+results+of+downloaded+files.\u0026amp;theme=cc96c7d1e94e3382abfd5738\u0026amp;signature=a62a7863e95c0660e29f2f13c11c8d7e3d0bdc7e56cb842a64939dd5174b5397\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/secai-a5d02ac5/FIkeW9BxQq6Kwlsn/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"ThreatBook CTI Documentation\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#CC0000\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.threatbook.io/api-reference/enrichment/url-intelligence-v2\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/api-reference/enrichment/url-intelligence-v2.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.threatbook.io/#organization\",\"name\":\"ThreatBook CTI Documentation\",\"url\":\"https://docs.threatbook.io\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/secai-a5d02ac5/R6uyh1S1hrTJxXQ_/logo/logo_light.svg?fit=max\u0026auto=format\u0026n=R6uyh1S1hrTJxXQ_\u0026q=85\u0026s=c467c47ec081583290c17e11c5d34135\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.threatbook.io#website\",\"name\":\"ThreatBook CTI Documentation\",\"url\":\"https://docs.threatbook.io\",\"publisher\":{\"@id\":\"https://docs.threatbook.io/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.threatbook.io/api-reference/enrichment/url-intelligence-v2#webpage\",\"url\":\"https://docs.threatbook.io/api-reference/enrichment/url-intelligence-v2\",\"name\":\"URL Intelligence\",\"description\":\"Retrieve URL scan engine detection results and the analysis results of downloaded files.\",\"dateModified\":\"2026-01-28T06:06:02.485Z\",\"isPartOf\":{\"@id\":\"https://docs.threatbook.io#website\"},\"breadcrumb\":{\"@id\":\"https://docs.threatbook.io/api-reference/enrichment/url-intelligence-v2#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.threatbook.io/api-reference/enrichment/url-intelligence-v2#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Enrichment\",\"item\":\"https://docs.threatbook.io/api-reference/enrichment/ip-report-v1\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"URL Intelligence\",\"item\":\"https://docs.threatbook.io/api-reference/enrichment/url-intelligence-v2\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://docs.threatbook.io/api-reference/enrichment/url-intelligence-v2#apireference\",\"headline\":\"URL Intelligence\",\"name\":\"URL Intelligence\",\"description\":\"Retrieve URL scan engine detection results and the analysis results of downloaded files.\",\"url\":\"https://docs.threatbook.io/api-reference/enrichment/url-intelligence-v2\",\"mainEntityOfPage\":{\"@id\":\"https://docs.threatbook.io/api-reference/enrichment/url-intelligence-v2#webpage\"},\"dateModified\":\"2026-01-28T06:06:02.485Z\",\"publisher\":{\"@id\":\"https://docs.threatbook.io/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.threatbook.io#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"ThreatBook CTI Documentation\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"ThreatBook CTI Documentation","nav":{"global":null,"tabs":[{"tab":"Guides","pages":[{"title":"Guides","href":"/guide/introduction"}]},{"tab":"API Reference","groups":[{"group":"API Documentation","pages":[{"title":"Authentication","href":"/api-reference/authentication"}]},{"group":"Enrichment","pages":[{"title":"IP Report(Community)","openapi":"api-reference/enrichment/ip-report-v1.openapi.json POST /v1/community/ip","href":"/api-reference/enrichment/ip-report-v1"},{"title":"Compromise Detection","openapi":"api-reference/enrichment/compromise-detection-v1.openapi.json POST /v1/ioc/query","href":"/api-reference/enrichment/compromise-detection-v1"},{"title":"IP Intelligence","openapi":"api-reference/enrichment/ip-intelligence-v2.openapi.json POST /v2/ip/query","href":"/api-reference/enrichment/ip-intelligence-v2"},{"title":"Domain Intelligence","openapi":"api-reference/enrichment/domain-intelligence-v2.openapi.json POST /v2/domain/query","href":"/api-reference/enrichment/domain-intelligence-v2"},{"title":"File Intelligence","openapi":"api-reference/enrichment/file-intelligence-v2.openapi.json POST /v2/file/query","href":"/api-reference/enrichment/file-intelligence-v2"},{"title":"File Upload","openapi":"api-reference/enrichment/file-upload-v2.openapi.json POST /v2/file/upload","description":"For potentially malicious files from office endpoints, Web/FTP/email attachments, or suspicious files on endpoints/servers, the system performs rapid detection using **22 antivirus scanning engines**. Based on the file type, the system automatically selects an appropriate sandbox environment for dynamic analysis.","href":"/api-reference/enrichment/file-upload-v2"},{"title":"URL Intelligence","openapi":"api-reference/enrichment/url-intelligence-v2.openapi.json POST /v2/url/query","href":"/api-reference/enrichment/url-intelligence-v2"},{"group":"Deprecated","pages":[{"title":"IP Intelligence(v1)","openapi":"api-reference/enrichment/ip-intelligence-v1.openapi.json POST /v1/ip/query","description":"IP Intelligence(V1) API provides intelligence labels(intelligence type), relevant threat actors, virus/trojan family, complete original intelligence, as well as associated internet asset and contextual data for each IP address.","href":"/api-reference/enrichment/ip-intelligence-v1"},{"title":"Domain Intelligence(v1)","openapi":"api-reference/enrichment/domain-intelligence-v1.openapi.json POST /v1/domain/query","href":"/api-reference/enrichment/domain-intelligence-v1"}]}]},{"group":"Vulnerabilities","pages":[{"title":"Vulnerability Intelligence","openapi":"api-reference/vulnerabilities/vulnerability-intelligence-v2.openapi.json POST /v2/vulnerability/query","href":"/api-reference/vulnerabilities/vulnerability-intelligence-v2"}]},{"group":"Reports","pages":[{"title":"Report List","openapi":"api-reference/reports/report-list.openapi.json POST /v3/reports/list","href":"/api-reference/reports/report-list-v3"},{"title":"Report Detail","openapi":"api-reference/reports/report-detail.openapi.json GET /v2/reports/{id}","href":"/api-reference/reports/report-detail"},{"group":"Deprecated","pages":[{"title":"Report List (v2)","openapi":"api-reference/reports/report-list.openapi.json GET /v2/reports/list","href":"/api-reference/reports/report-list-v2"}]}]},{"group":"Feeds","pages":[{"title":"IP Reputation","openapi":"api-reference/feeds/ip-reputation.openapi.json GET /v2/feeds/stix/ip-reputation","playground":"simple","href":"/api-reference/feeds/ip-reputation"},{"title":"IOC","openapi":"api-reference/feeds/ioc.openapi.json GET /v2/feeds/stix/ioc","playground":"simple","href":"/api-reference/feeds/ioc"},{"title":"Reports","openapi":"api-reference/feeds/reports.openapi.json GET /v2/feeds/stix/reports","playground":"simple","href":"/api-reference/feeds/reports"},{"title":"Actors","openapi":"api-reference/feeds/actors.openapi.json GET /v2/feeds/stix/actor","playground":"simple","href":"/api-reference/feeds/actors"},{"title":"Hash","openapi":"api-reference/feeds/hash.openapi.json GET /v2/feeds/stix/hash","playground":"simple","href":"/api-reference/feeds/hash"},{"title":"URL","openapi":"api-reference/feeds/url.openapi.json GET /v2/feeds/stix/url","playground":"simple","href":"/api-reference/feeds/url"}]},{"group":"Third-party Integration","pages":[{"title":"Splunk APP - ThreatBook TI","href":"/api-reference/integration/splunk-app-api"}]}]}]},"title":"URL Intelligence - ThreatBook CTI Documentation","buildId":"dpl_HcHmUS6i3UwswnTHJUEdcTtwfdTQ","deploymentId":"dpl_HcHmUS6i3UwswnTHJUEdcTtwfdTQ","dynamics":["c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["OpenApiReferenceProvider-BRm_l__d.js","utils-f1l1Oc-G.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-BlhqDhJO.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-DHCB7rsC.js","snippetPresets-CYXLx6Hv.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","ApiExamples-B78P2dEq.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-C4YLPVAh.js","shallow-vlLnTDkQ.js","getApiPlaygroundDisplay-D_98hhvf.js","CodeSnippet-DtnZHGqq.js","CodeSnippets-CLFb8KJt.js","Page-kQh739Uz.js","getPastedJson-Cq-zlbnU.js","icon-sN3t983t.js","MethodPill-P_YQ2s09.js","DuplicateIcon-BVzyNsGJ.js","createIcon-B3jqgqC6.js","DynamicMarkdown-Crwq6WG_.js","SectionHeading-C7pGS2Bb.js","axios-vUo_bRtp.js","Markdown-BuPH8yuW.js","clsx-CCOYKgaU.js","lib--scc4DXi.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-BnkC_6oA.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-BM4S31-f.js"]}