Hello,
starting On May 4th urlscan.io modified his API usage as announced here:
urlscan API: Mandatory authentication starting May 4th
| Urlscan |
remove preview |
|
| urlscan API: Mandatory authentication starting May 4th |
| Starting May 4th, 2026 some of the publicly accessible API endpoints onurlscan.io will only respond to authenticated requests. An authenticatedrequest is a r... |
| View this on Urlscan > |
|
|
So, the SOAR app "fn_urlscanio" has to be updated.
I applied this patch (that adds the headers to all "http GET") and now it's working:
98c98
< urlscanio_get = req_common.execute_call_v2("GET", urlscanio_result_url, self.timeout, callback=report_callback)
---
> urlscanio_get = req_common.execute_call_v2("GET", urlscanio_result_url, self.timeout, callback=report_callback, headers=urlscanio_headers)
105c105
< urlscanio_report_get = req_common.execute_call_v2("GET", urlscanio_report_url, self.timeout)
---
> urlscanio_report_get = req_common.execute_call_v2("GET", urlscanio_report_url, self.timeout, headers=urlscanio_headers)
111c111
< urlscanio_png_get = req_common.execute_call_v2("GET", urlscanio_png_url, self.timeout, callback=report_callback)
---
> urlscanio_png_get = req_common.execute_call_v2("GET", urlscanio_png_url, self.timeout, callback=report_callback, headers=urlscanio_headers)
Hope this helps,
Manuel
------------------------------
___________________
Manuel Marchese
------------------------------