[{"data":1,"prerenderedAt":177},["ShallowReactive",2],{"navigation_docs":3,"-providers-virustotal":68,"-providers-virustotal-surround":172},[4,32],{"title":5,"path":6,"stem":7,"children":8,"icon":31},"Guide","\u002Fguide","1.guide\u002F1.index",[9,11,15,19,23,27],{"title":10,"path":6,"stem":7},"Getting Started",{"title":12,"path":13,"stem":14},"Discovering URLs","\u002Fguide\u002Fdiscover","1.guide\u002F2.discover",{"title":16,"path":17,"stem":18},"Filters and scope","\u002Fguide\u002Ffilters","1.guide\u002F3.filters",{"title":20,"path":21,"stem":22},"CLI","\u002Fguide\u002Fcli","1.guide\u002F4.cli",{"title":24,"path":25,"stem":26},"Agents","\u002Fguide\u002Fagents","1.guide\u002F5.agents",{"title":28,"path":29,"stem":30},"Custom providers","\u002Fguide\u002Fcustom","1.guide\u002F6.custom","i-lucide-book-open",{"title":33,"path":34,"stem":35,"children":36,"icon":67},"Providers","\u002Fproviders","2.providers\u002F0.index",[37,39,43,47,51,55,59,63],{"title":38,"path":34,"stem":35},"Overview",{"title":40,"path":41,"stem":42},"AlienVault OTX","\u002Fproviders\u002Falienvault","2.providers\u002F01.alienvault",{"title":44,"path":45,"stem":46},"Arquivo.pt","\u002Fproviders\u002Farquivo","2.providers\u002F02.arquivo",{"title":48,"path":49,"stem":50},"Common Crawl","\u002Fproviders\u002Fcommoncrawl","2.providers\u002F03.commoncrawl",{"title":52,"path":53,"stem":54},"URLScan","\u002Fproviders\u002Furlscan","2.providers\u002F04.urlscan",{"title":56,"path":57,"stem":58},"Vefsafn","\u002Fproviders\u002Fvefsafn","2.providers\u002F05.vefsafn",{"title":60,"path":61,"stem":62},"VirusTotal","\u002Fproviders\u002Fvirustotal","2.providers\u002F06.virustotal",{"title":64,"path":65,"stem":66},"Wayback Machine","\u002Fproviders\u002Fwayback","2.providers\u002F07.wayback","i-lucide-library",{"id":69,"title":60,"body":70,"description":163,"extension":164,"links":165,"meta":166,"navigation":168,"path":61,"seo":169,"stem":62,"__hash__":171},"docs\u002F2.providers\u002F06.virustotal.md",{"type":71,"value":72,"toc":156},"minimark",[73,77,82,86,90,105,109],[74,75],"provider-facts",{"name":76},"virustotal",[78,79,81],"h2",{"id":80},"what-it-knows","What it knows",[83,84,85],"p",{},"URLs VirusTotal has seen for the domain, mostly ones somebody wanted checked. It skews toward the suspicious, which is sometimes exactly the point. No dates come back.",[78,87,89],{"id":88},"how-it-asks","How it asks",[83,91,92,96,97,100,101,104],{},[93,94,95],"code",{},"GET \u002Fapi\u002Fv3\u002Fdomains\u002F{domain}\u002Furls"," with the key in the ",[93,98,99],{},"x-apikey"," header, never in the URL. Then ",[93,102,103],{},"links.next"," page by page, 50 pages at most.",[78,106,108],{"id":107},"traps","Traps",[110,111,112,132,135,149],"ul",{},[113,114,115,116,119,120,123,124,127,128,131],"li",{},"No key, no answer. ",[93,117,118],{},"create(\"virustotal\")"," without ",[93,121,122],{},"VIRUSTOTAL_API_KEY"," or ",[93,125,126],{},"apiKey"," fails with ",[93,129,130],{},"AuthError",", and the automatic pick moves on to the next source.",[113,133,134],{},"With a key set, the automatic pick tries VirusTotal first. That's the one source that jumps the queue.",[113,136,137,138,140,141,144,145,148],{},"A ",[93,139,103],{}," that points off ",[93,142,143],{},"www.virustotal.com"," isn't followed. The page then ends with ",[93,146,147],{},"truncated",", since VirusTotal advertised more.",[113,150,151,152,155],{},"The legacy v2 ",[93,153,154],{},"domain\u002Freport"," endpoint is dead, it answers 403 HTML. This provider speaks v3 only.",{"title":157,"searchDepth":158,"depth":158,"links":159},"",2,[160,161,162],{"id":80,"depth":158,"text":81},{"id":88,"depth":158,"text":89},{"id":107,"depth":158,"text":108},"The v3 domain URL relationship of VirusTotal. Needs VIRUSTOTAL_API_KEY. Cursor pages up to 50.","md",null,{"icon":167},"i-simple-icons-virustotal",true,{"title":170,"description":163},"VirusTotal v3 URLs of a domain through @agntn\u002Furls","cmcFlGO4r42d_c16x_yin7pZ1U_u9CtrZYX-_KzpI64",[173,175],{"title":56,"path":57,"stem":58,"description":174,"children":-1},"The CDX index of the Icelandic web archive. No key. It ignores limit and sends the whole dump and the collector hangs up when it has enough.",{"title":64,"path":65,"stem":66,"description":176,"children":-1},"The CDX index of the Internet Archive. No key. One streamed text request with dates and subdomains included.",1790685300952]