Enter a target
Accepted input: Domain, URL.
fleet module
urlscan.io OSINT search
Looks up public urlscan.io scans for a domain or page. Results land in a Command One case with their source and confidence, alongside the rest of your investigation. Part of Archive OSINT · all tools.
public sources only · free registration
how it works
From domain to evidence
Run the module
The job is sent to a live worker. If no worker can run it, you are not charged.
Review results
Past scans with page structure, requests and screenshots.
Verify and export
Link findings in CommandDeck, add notes and export a PDF or CSV case report.
related modules
Pair urlscan.io with
Combining modules gives independent sources that confirm or rule out a lead.
xnLinkFinder
Extracts links, endpoints and parameters from web pages and scripts.
ExifTool
Reads embedded metadata from images and documents.
waybackurls
Pulls every URL the Wayback Machine has recorded for a domain.
gau
Gathers known URLs for a domain from several archive and crawl indexes.
Wayback CDX
Queries the Internet Archive's capture index for a host.
questions
urlscan.io questions
What does urlscan.io find?
Past scans with page structure, requests and screenshots.
What do I need to start a urlscan.io search?
Domain, URL. Command One only runs a module against targets it accepts.
What are the limits of urlscan.io?
Only scans other users made public are available.
How much does urlscan.io cost?
Registration is free. The module uses credits from your daily allowance or purchased balance. Current costs are listed on the credits page, and you are only charged when the module can actually run.
Try urlscan.io in a case
Create a free account to run available modules. For lawful research and authorised assessments only.