Hello,

starting On May 4th urlscan.io modified his API usage as announced here:

urlscan API: Mandatory authentication starting May 4th

Urlscan		remove preview
urlscan API: Mandatory authentication starting May 4th Starting May 4th, 2026 some of the publicly accessible API endpoints onurlscan.io will only respond to authenticated requests. An authenticatedrequest is a r... View this on Urlscan >

So, the SOAR app "fn_urlscanio" has to be updated.

I applied this patch (that adds the headers to all "http GET") and now it's working:

98c98
<                     urlscanio_get = req_common.execute_call_v2("GET", urlscanio_result_url, self.timeout, callback=report_callback)
---
>                     urlscanio_get = req_common.execute_call_v2("GET", urlscanio_result_url, self.timeout, callback=report_callback, headers=urlscanio_headers)
105c105
<                 urlscanio_report_get = req_common.execute_call_v2("GET", urlscanio_report_url, self.timeout)
---
>                 urlscanio_report_get = req_common.execute_call_v2("GET", urlscanio_report_url, self.timeout, headers=urlscanio_headers)
111c111
<                 urlscanio_png_get = req_common.execute_call_v2("GET", urlscanio_png_url, self.timeout, callback=report_callback)
---
>                 urlscanio_png_get = req_common.execute_call_v2("GET", urlscanio_png_url, self.timeout, callback=report_callback, headers=urlscanio_headers)

Hope this helps,

Manuel

------------------------------
___________________
Manuel Marchese
------------------------------

Hi Manuel,

Thank you for flagging this! We've created a ticket to validate & implement a fix in a new version.

All  the best

------------------------------
Elle Kelleher
Python Developer
IBM QRadar SOAR
Dublin, Ireland
------------------------------

Hi Manuel,

Thanks for flagging this! We have created a ticket to validate & work on a fix for a new version.

All the best

------------------------------
Elle Kelleher
Python Developer
IBM QRadar SOAR
Dublin, Ireland
------------------------------

Hi Manuel,

As a follow-up, we have implemented this above fix in a new version 1.2.0 of the URLScan.io app. 

We have also taken the opportunity to modernize this application by including a playbook to mimic the existing deprecated workflow and updating to the SOAR compatibility to our latest supported versions.

All the best,

Elle

------------------------------
Elle Kelleher
Python Developer
IBM QRadar SOAR
Dublin, Ireland
------------------------------