virustotal-url-report-batch
Retrieve URL reputation information from VirusTotal for the url
value passed as the input record.
virustotal-url-report-batch [profile=PROFILE]
- profile=PROFILE
- Comma seperated VirusTotal profile names
Input Field
- url (String): URL or domain
Output Fields
Field | Type | Name | Description |
---|---|---|---|
url | String | URL | |
tld | String | TLD | e.g. com, net |
title | String | Browser Title | |
threat_names | List | Threat names | e.g. Mal/HTMLGen-A |
targeted_brands | List | Targeted brands | |
malicious_reports | Integer | Malicious reports | Number of reports saying that is malicious. |
suspicious_reports | Integer | Suspicious reports | Number of reports saying that is suspicious. |
harmless_reports | Integer | Harmless reports | Number of reports saying that is suspicious. |
undetected_reports | Integer | Undetected reports | Number of reports saying that is undetected. |
timeout_reports | Integer | Timeout reports | Number of timeouts when analysing this file. |
failure_reports | Integer | Failure reports | Number of AV engines that fail when analysing that file. |
reputation | Integer | Reputation | File's score by community votes |
harmless_votes | Integer | Harmless votes | Number of positive votes. |
malicious_votes | Integer | Malicious votes | Number of negative votes. |
tags | List | Tags | e.g. executable, windows, pe, pedll |
last_http_response_code | Integer | Last HTTP response code | e.g. 200 |
last_http_response_content_length | Long | Last HTTP response content length | |
last_http_response_content_sha256 | String | Last HTTP response content SHA256 | |
outgoing_links | List | Outgoing links | |
redirection_chain | List | Redirection chain | |
first_submission | Date | First submission time | |
last_submission | Date | Last submission time | |
last_modified | Date | Last modified time | |
last_analysis | Date | Last analysis time | |
last_analysis_results | List | Analysis results | engine_name, method, category, result properties. |