IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

urlscan.io app update needed due to API usage modification

  • 1.  urlscan.io app update needed due to API usage modification

    Posted 7 hours ago

    Hello,

    starting On May 4th urlscan.io modified his API usage as announced here:

    urlscan API: Mandatory authentication starting May 4th

    Urlscan remove preview
    urlscan API: Mandatory authentication starting May 4th
    Starting May 4th, 2026 some of the publicly accessible API endpoints onurlscan.io will only respond to authenticated requests. An authenticatedrequest is a r...
    View this on Urlscan >

    So, the SOAR app "fn_urlscanio" has to be updated.

    I applied this patch (that adds the headers to all "http GET") and now it's working:

    98c98
    <                     urlscanio_get = req_common.execute_call_v2("GET", urlscanio_result_url, self.timeout, callback=report_callback)
    ---
    >                     urlscanio_get = req_common.execute_call_v2("GET", urlscanio_result_url, self.timeout, callback=report_callback, headers=urlscanio_headers)
    105c105
    <                 urlscanio_report_get = req_common.execute_call_v2("GET", urlscanio_report_url, self.timeout)
    ---
    >                 urlscanio_report_get = req_common.execute_call_v2("GET", urlscanio_report_url, self.timeout, headers=urlscanio_headers)
    111c111
    <                 urlscanio_png_get = req_common.execute_call_v2("GET", urlscanio_png_url, self.timeout, callback=report_callback)
    ---
    >                 urlscanio_png_get = req_common.execute_call_v2("GET", urlscanio_png_url, self.timeout, callback=report_callback, headers=urlscanio_headers)

    Hope this helps,

    Manuel



    ------------------------------
    ___________________
    Manuel Marchese
    ------------------------------