๐Ÿ”’ Private URLs

Information about private URLs

๐Ÿšง

Special privileges required

Private Scanning endpoints are only available to users with Private Scanning license.

Private URLs are similar to URLs, but they are only visible to the user who uploads the URL.

Object attributes

Most URL's attributes are present in private URLs.

{
    "data": {
        "id": <string>,
        "type": "private_url",
        "links": {
            "self": "https://www.virustotal.com/api/v3/private/urls/<id>"
        },
        "attributes": {
            "tags": [
                <string>,
                ...
            ],
            "html_meta": {
                "<str:tag_name>": ["<tag_value:string>"]
            },
            "favicon": {
                "raw_md5": <string>,
                "dhash": <string>
            },
            "title": <string>,
            "redirection_chain": [
                <string>,
                ...
            ],
            "tld": <string>,
            "url": <string>,
            "last_final_url": <string>,
            "last_analysis_results": {
                "Google Safebrowsing": {
                    "method": <string>,
                    "engine_name": <string>,
                    "category": <string>,
                    "result": <string>
                }
            },
            "last_http_response_content_length": <int>,
            "trackers": {
        		"<str:tracker_name>": [
          			{
            			"id": "<string>",
            			"timestamp": <int:timestamp>,
            			"url": "<string>"
          			},...
        		],....
            },
            "outgoing_links": [
                <string>,
                ...
            ],
            "last_http_response_content_sha256": <string>
            "last_http_response_code": <int>,
            "expiration": <int>,
            "last_analysis_stats": {
                "malicious": <int>,
                "suspicious": <int>,
                "undetected": <int>,
                "harmless": <int>,
                "timeout": <int>
            },
            "last_http_response_headers": {
                <string>,
                ...
            }
        }
    }
}
{
    "data": {
        "id": "7f182b8f63e6709a54645053736825e4c487e434239557ca197ae2cabe75feec",
        "type": "private_url",
        "links": {
            "self": "https://www.virustotal.com/api/v3/private/urls/7f182b8f63e6709a54645053736825e4c487e434239557ca197ae2cabe75feec"
        },
        "attributes": {
            "html_meta": {},
            "redirection_chain": [
                "http://masmetodo.com/"
            ],
            "last_http_response_content_length": 57,
            "last_http_response_code": 200,
            "tags": [],
            "title": "",
            "tld": "com",
            "last_http_response_content_sha256": "7c80d872930ea719369314ee88eefa05181d758fc87e0a0a5cccbf9d36456966",
            "url": "http://masmetodo.com/",
            "last_analysis_results": {
                "Google Safebrowsing": {
                    "method": "blacklist",
                    "engine_name": "Google Safebrowsing",
                    "category": "harmless",
                    "result": "clean"
                }
            },
            "expiration": 1723897413,
            "outgoing_links": [],
            "last_analysis_stats": {
                "malicious": 0,
                "suspicious": 0,
                "undetected": 0,
                "harmless": 1,
                "timeout": 0
            },
            "last_http_response_headers": {
                "Connection": "keep-alive",
                "Content-Encoding": "gzip",
                "Content-Type": "text/html",
                "Transfer-Encoding": "chunked",
                "X-Accel-Version": "0.01",
                "X-Powered-By": "PleskLin",
                "Date": "Wed, 07 Aug 2024 12:46:37 GMT",
                "ETag": "W/\"260a46-39-605eeffe33b7a\"",
                "Last-Modified": "Fri, 22 Sep 2023 09:11:53 GMT",
                "Server": "nginx",
                "Vary": "Accept-Encoding"
            },
            "last_final_url": "http://masmetodo.com/",
        }
    }
}

Relationships

Additionally, private URLs objects contain relationships with other objects in our dataset that can be retrieved as explained in the Relationships section.

The following table shows a summary of available relationships.

RelationshipReturn object type
analysesList of Private Analyses
behavioursList of Private URLs Behaviours
last_serving_ip_addressA single IP address
network_locationA single IP address or Domain
downloaded_filesList of downloaded Files