1(()=>{var e={7132(e,t,s){"use strict";var a,r,i,n,o,c,d,l,u,p=s(4692),m=s(765),y=s(4083),f=s(5338),h=function(e){return e&&e.__esModule?e:{default:e}}(s(6540));r=h.default.createElement,a="",d=null,c=function(){return null==d&&(d=(0,f.createRoot)(document.getElementById("scans"))),d.render(r(m.RootElement,i))},o=function(){var e;i.loading||(e=decodeURIComponent(window.location.hash.replace(/^#/,"")),i.results.length&&(i.search_after=i.results[i.results.length-1].sort.join(",")),l(e,!0))},i={error_message:void 0,search_after:void 0,total:0,took:0,results:[],loading:!1,load_more:o,detail:(screen.width,0),has_more:!1},n=function(){var e,t;i.search_after=void 0,(t=window.location.hash.replace(/^#/,""))===(e=decodeURIComponent(t))&&history.replaceState(void 0,void 0,"#"+encodeURIComponent(t)),l(e),p("input#query").val(e)},l=function(e,t=!1){e.length?(i.error_message=void 0,e!==a&&(a=e),i.loading=!0,p("form").addClass("disabled").addClass("inactive"),c(),p.getJSON({url:"/api/v1/search/",data:{q:e,search_after:i.search_after}}).done(function(e){t||(i.results.length=0),i.total=e.total,i.took=e.took,e.results.forEach(function(e){i.results.push((0,m.propify)(e,{}))}),i.has_more=e.has_more,i.show_more_button=e.has_more||i.results.length<e.total}).fail(function(e){i.loading=!1,i.error_message=e.responseJSON.message}).always(function(e){i.loading=!1,p("form").removeClass("disabled").removeClass("inactive"),c()})):window.location.hash="#*"},p("form").submit(function(e){var t;e.preventDefault(),window.location.hash===(t="#"+encodeURIComponent(p("input#query").val()))&&l(a),window.location.hash=t}),p("#reload").on("click",function(e){l(a)}),p("#clear").on("click",function(){window.location.hash="#*",n()}),(u=document.getElementById("search-assistant-wrapper"))&&(0,f.createRoot)(u).render(r(y.SearchAssistant,{inputId:"query"})),i.results=Array(10).fill(void 0).map(function(e,t){return{key:Math.random(),index:t}}),c(),n(),""===window.location.hash&&(window.location.hash="#*"),window.addEventListener("hashchange",n,!1)},4083(e,t,s){"use strict";var a,r,i,n,o,c,d,l,u,p,m,y=function(e){if("function"==typeof WeakMap){var t=new WeakMap;new WeakMap}return function(e){if(e&&e.__esModule)return e;var s,a,r={__proto__:null,default:e};if(null===e||"object"!=typeof e&&"function"!=typeof e)return r;if(s=t){if(s.has(e))return s.get(e);s.set(e,r)}for(const t in e)"default"!==t&&{}.hasOwnProperty.call(e,t)&&((a=(s=Object.defineProperty)&&Object.getOwnPropertyDescriptor(e,t))&&(a.get||a.set)?s(r,t,a):r[t]=e[t]);return r}(e)}(s(6540));({buildFieldIndex:l,analyzeQuery:d}=s(3712)),({fields:p}=s(9485)),i=l(p,"scans"),a=i.allFieldNames,n=i.fieldMap,u=y.default.createElement,o=function({opt:e,isActive:t,onApply:s}){var a,r,i,o;return r=(i="value"===e.kind)?null:n[e.name],o=e.name,a="search-assistant-option",t&&(a+=" active"),u("div",{className:a,onMouseDown:function(t){return t.preventDefault(),s(e)}},i?u("span",{className:"search-assistant-option-name"},u("span",{className:"text-muted"},`${e.field}:`),e.name):u("span",{className:"search-assistant-option-name"},o),i?e.tag||e.desc?u("span",{className:"search-assistant-option-info"},e.tag?u("span",{className:"badge text-bg-secondary"},e.tag):null,e.desc?u("span",{},e.desc):null):null:r?u("span",{className:"search-assistant-option-info"},u("span",{className:"badge text-bg-secondary"},r.type),r.pro?u("span",{className:"badge text-bg-warning"},"Pro"):null,u("span",{dangerouslySetInnerHTML:{__html:r.desc}})):null)},r=function({diag:e,onApply:t,activeIndex:s,indexOffset:a}){var r,i;return({field:r,suggestions:i}=e),u("div",{className:"search-assistant-item"},i.map(function(e,r){var i;switch(e.type){case"completions":case"valueCompletions":return i="valueCompletions"===e.type,u("div",{key:r},e.options.map(function(r,n){var c;return c=i?{name:r.value,kind:"value",tag:r.type,desc:r.desc,field:e.field}:{name:r,kind:"field"},u(o,{key:n,opt:c,isActive:s===a+n,onApply:t})}));default:return null}}))},m=function(e){var t,s,a,r,i,n,o,c,d,l,u,p,m,y;for(l=[],t=0,a=e.length;t<a;t++)for(s=0,r=(u=e[t].suggestions).length;s<r;s++)switch((y=u[s]).type){case"completions":for(o=0,i=(p=y.options).length;o<i;o++)d=p[o],l.push({name:d,kind:"field"});break;case"valueCompletions":for(c=0,n=(m=y.options).length;c<n;c++)d=m[c],l.push({name:d.value,kind:"value",tag:d.type,desc:d.desc,field:y.field})}return l},c=function({inputId:e,extraOptions:t}){var s,n,o,c,l,p,f,h,b,v,g;return[h,g]=(0,y.useState)(""),[p,v]=(0,y.useState)(!1),[s,b]=(0,y.useState)(-1),n=(0,y.useRef)(-1),c=(0,y.useCallback)(function(t){var s,a,r;if(a=document.getElementById(e))return s=a.value,"value"===t.kind?(r=s.replace(/:("?[^\s:()]*)$/,`:${t.name} `),v(!1)):(r=s.replace(/([\w.]+)$/,`${t.name}:`))===s&&(r=s+`${t.name}:`),a.value=r,g(r),b(-1),n.current=-1,a.focus()},[e]),l=(0,y.useMemo)(function(){return d(h,a,i,{focused:p,extraOptions:t})},[h,p,t]),o=(0,y.useMemo)(function(){return m(l)},[l]),(0,y.useEffect)(function(){b(-1),n.current=-1},[o.length]),(0,y.useEffect)(function(){var t,s,a,r,i;if(t=document.getElementById(e))return r=function(e){return v(!0),g(e.target.value)},a=function(e){return v(!0),g(e.target.value)},s=function(){return v(!1)},i=function(e){var t,s,a;if((a=o.length)>0)switch(e.key){case"ArrowDown":return e.preventDefault(),t=n.current,b(s=t<a-1?t+1:0),n.current=s;case"ArrowUp":return e.preventDefault(),t=n.current,b(s=t>0?t-1:a-1),n.current=s;case"Enter":case"Tab":if((t=n.current)>=0&&t<a)return e.preventDefault(),c(o[t]);break;case"Escape":return v(!1),b(-1),n.current=-1}},t.addEventListener("input",r),t.addEventListener("focus",a),t.addEventListener("blur",s),t.addEventListener("keydown",i),function(){return t.removeEventListener("input",r),t.removeEventListener("focus",a),t.removeEventListener("blur",s),t.removeEventListener("keydown",i)}},[e,o,c]),p&&l.length?(f=0,u("div",{className:"search-assistant"},l.map(function(e,t){var a,i,n,o,d;for(n=f,a=0,i=(o=e.suggestions).length;a<i;a++)"completions"!==(d=o[a]).type&&"valueCompletions"!==d.type||(f+=d.options.length);return u(r,{key:`${e.field}-${t}`,diag:e,onApply:c,activeIndex:s,indexOffset:n})}))):null},e.exports={SearchAssistant:c}},765(e,t,s){"use strict";
1Object.defineProperty(t,"__esModule",{value:!0}),t.tryPuny=t.readableFileSize=t.propify=t.SearchResult=t.RootElement=t.ErrorElement=void 0;var a=d(s(6540)),r=d(s(939)),i=d(s(2555)),n=d(s(128)),o=d(s(14)),c=d(s(8379));function d(e){return e&&e.__esModule?e:{default:e}}var l,u,p,m,y,f,h,b,v,g,w=function(e,t){if(!(e instanceof t))throw new Error("Bound instance method accessed before binding")};f=a.default.createElement,t.tryPuny=v=function(e){try{return c.default.toUnicode(e)}catch(t){return e}},b=function(e,t){return e.length<=t?e:e.slice(0,t)+"..."},t.readableFileSize=h=function(e){var t,s;if(!e)return"";for(s=["B","KB","MB","GB","TB","PB","EB","ZB","YB"],t=0;e>=1024;)e/=1024,++t;return e.toFixed(0)+" "+s[t]},g=function(e){switch(e){case"public":return"text-bg-success";case"private":return"text-bg-warning";case"unlisted":return"text-bg-info";default:return"text-bg-secondary"}},t.propify=function(e,t){var s,a,r,i,n,o;for(a in s={offset:0,new:!1,detail:0})o=s[a],a in t||(t[a]=o);r=t;try{n=e.task.url.replace(/^https?:\/\//,"").split("/").map(function(e){return v(e)}).join("/"),i=e.page.url.replace(/^https?:\/\//,"").split("/").map(function(e){return v(e)}).join("/")}catch(t){n=e.task.url,i=e.page.url}return{url:n,page_url:i,isPunycode:(e.page.domain||"").match(/xn--/),protocol:e.task.url.match(/^https:.*/)?"secure":"insecure",files:e.files||[],time:e.task.time,size:e.stats.encodedDataLength||0,uuid:e._id,key:e._id,method:e.task.method||"manual",task:e.task||{},uniqIPs:e.stats.uniqIPs||0,uniqCountries:e.stats.uniqCountries||0,homeCountry:e.page.country||"",requests:e.stats.requests||0,page:e.page||{},failed:!e.stats.requests,detail:r.detail||0,show_new:r.show_new||!1,visibility:!r.hide_visibility&&e.task.visibility,sort:e.sort,brand:e.brand}},y=function(e){return"secure"===e.protocol?f("span",{className:"glyphicon glyphicon-lock green light"},""):f("span",{className:"glyphicon glyphicon-unchecked light"},"")},p=function(e){return e.requests>100&&e.requests<=200?f("span",{className:"orange"},e.requests):e.requests>200&&e.requests<=300?f("span",{className:"red"},e.requests):e.requests>300?f("span",{className:"red fw-bold"},e.requests):f("span",{className:"green"},e.requests)},u=function(e){var t;switch(t="",e.method){case"manual":t="user";break;case"api":t="qrcode";break;case"automatic":t="globe";break;default:t="question-sign"}return f("span",{title:`Submitted via ${e.method}`,className:`halflight glyphicon glyphicon-${t} float-end d-none d-md-inline`},"")},t.SearchResult=m=function(e){return Object.keys(e).length>2?f("tr",{key:e.uuid,className:e.show_new?"new-result":""},f("td",{className:"text-end d-none d-sm-table-cell"},e.detail>0&&f("span",{className:"text-muted"},e.index,f("span",{},f("br"))),e.page.ip&&f(y,{protocol:e.protocol})),f("td",{className:"break-all url"},e.visibility&&f("span",{className:"float-end text-end capitalize"},e.brand&&f("span",{className:"badge text-bg-danger right5"},"Malicious"),e.failed&&f("span",{},f("span",{className:"badge text-bg-danger halfgray right5"},"Failed")),f("span",{className:"halfgray badge d-none d-sm-inline "+g(e.visibility)},(0,n.default)(e.visibility)),e.detail>0&&f("br",{}),e.detail>0&&e.page.status&&f("span",{className:"badge label-simple text-info"},f("a",{href:`#page.status:${e.page.status}`},e.page.status))),e.detail>0&&f("b",{},"URL: "),f("a",{href:`/result/${e.uuid}/`,title:e.page_url},v(e.page_url).slice(0,79)+(e.page_url.length>80?"...":"")),e.isPunycode&&f("span",{}," ",f("span",{className:"badge text-bg-warning",title:"Internationalized Domain Name"},"IDN")),e.files.length>0&&f("div",{},f("small",{},f("b",{},"Downloaded Files:"),f("small",{},e.files.map(function(e){var t;return t=`${b(e.filename,50)}`,e.filesize&&(t+=` (${h(e.filesize)})`),f("span",{className:"simpletag left5 text-info fw-bold",title:e.filename,key:e.sha256},t)})))),f("small",{},e.detail>0&&e.url&&e.page_url.replace(/\/$/,"")!==e.url.replace(/\/$/,"")&&f("div",{},f("b",{},"Redirect from: "),f("a",{href:`#page.url:%22${e.url}%22`,title:e.url},v(e.url).slice(0,79)+(e.url.length>80?"...":""))),e.detail>0&&f("div",{className:e.additional?"halflight":""},e.page&&e.page.ip&&f("div",{},f("b",{},"IP: "),f("a",{href:'#page.ip:"'+e.page.ip+'"'},e.page.ip),e.page.ptr&&f("span",{},f("b",{}," - PTR: "),f("a",{href:"#page.ptr:"+e.page.ptr},e.page.ptr)),e.page.server&&f("span",{},f("b",{}," - Server: "),f("a",{href:"#page.server:%22"+e.page.server+"%22"},e.page.server.slice(0,39)+(e.page.server.length>40?"...":"")))),e.page.country&&f("div",{},f("b",{},"GeoIP: "),f("span",{className:"flag-icon flag-icon-"+(e.page.country||"").toLowerCase()}),f("span",{}," "),e.page.city&&f("a",{href:"#page.city:"+e.page.city},e.page.city),e.page.city&&f("span",{},", "),f("a",{href:"#page.country:"+e.page.country},e.page.country),f("span",{}," - "),f("a",{href:"#page.asn:"+e.page.asn},e.page.asn),f("span",{}," ("+e.page.asnname+")")),e.task.tags&&e.task.tags.length>0&&f("div",{},f("b",{},"Tags: "),e.task.tags.map(function(e){return f("a",{key:e,href:'#task.tags:"'+e+'"'},f("div",{className:"simpletag right5"},e))})))),e.additional&&f("div",{},f("hr",{className:"tight"}),e.additional)),f("td",{className:"text-nowrap d-none d-sm-table-cell"},(0,r.default)(new Date,(0,i.default)(e.time)),0===e.detail&&f(u,{method:e.task.method}),e.detail>0&&e.task.method&&f("div",{className:"d-none d-sm-block"},f("small",{},f("b",{},"Via: "),f("a",{href:"#task.method:"+e.task.method},e.task.method),e.task.source&&f("span",{},f("br"),f("b",{},"Src: "),f("a",{href:"#task.source:"+e.task.source}
1,b(e.task.source,10)))))),f("td",{className:"text-end text-nowrap d-none d-sm-table-cell"},h(e.size)),f("td",{className:"text-end d-none d-sm-table-cell"},f(p,{requests:e.requests})),f("td",{className:"text-end d-none d-sm-table-cell"},e.uniqIPs),f("td",{className:"text-end d-none d-sm-table-cell"},e.uniqCountries),f("td",{},f("span",{className:"flag-icon flag-icon-"+e.homeCountry.toLowerCase()}))):f("tr",{key:e.index},f("td",{className:"text-end d-none d-sm-table-cell",colSpan:1},f("img",{src:"/img/loading.svg",className:"height1em"})),f("td",{colSpan:7,className:"text-muted"},"Loading..."))},t.ErrorElement=l=function(e){return e.error_message?f("div",{className:"card bg-warning"},f("div",{className:"card-header"},f("h3",{className:"card-title"},"Error executing the search")),f("div",{className:"card-body"},f("p",{},"There was an error executing your search, please adjust your search-term and try again. Message:"),f("tt",{},e.error_message))):null},a.default.Component,t.RootElement=class e extends a.default.Component{constructor(e){var t;super(e),this.componentDidMount=this.componentDidMount.bind(this),this.toggleCollapse=this.toggleCollapse.bind(this),this.toggleDetail=this.toggleDetail.bind(this),this.routeToPro=this.routeToPro.bind(this),t=window.localStorage&&parseInt(window.localStorage.getItem("searchdetail"))||0,this.state={detail
1:e.detail||t,collapse:!1,user:null}}componentDidMount(){return w(this,e),this.setState({user:window.currentUser||null})}toggleCollapse(){return w(this,e),this.setState({collapse:!this.state.collapse})}toggleDetail(){var t;return w(this,e),t=(this.state.detail+1)%2,window.localStorage&&window.localStorage.setItem("searchdetail",t),this.setState({detail:t})}routeToPro(){var t;return w(this,e),t=`https://pro.urlscan.io/search/?query=${window.location.hash.slice(1)}`,window.location.href=t}render(){return f("div",{},f(l,{error_message:this.props.error_message}),f("h3",{},"Search results ",this.props.loading||f("small",{},"("+this.props.results.length+" / "+this.props.total,this.props.has_more&&f("span",{},"+"),f("span",{className:"d-none d-md-inline"},", sorted by date, took "+this.props.took+"ms)")),this.props.loading&&f("small",{},"Loading ... ",f("img",{src:"/img/loading.svg",className:"height1em"})),f("span",{className:"float-end"},this.state.user&&this.state.user.isPro&&"team"!==this.state.user.userType&&f("button",{className:"btn btn-primary btn-sm right5",onClick:this.routeToPro},"Open in ",f("span",{className:"fw-bold"},"urlscan ",f("span",{className:"procolor"},"Pro"))),f("button",{className:"btn btn-info btn-xs right5",onClick:this.toggleCollapse},this.state.collapse&&[f("span",{key:"icon",className:"glyphicon glyphicon-resize-small"}),f("span",{key:"text"}," Collapsed by Hostname")],!this.state.collapse&&[f("span",{key:"icon",className:"glyphicon glyphicon-resize-full"}),f("span",{key:"text"}," Showing All Hits")]),f("button",{className:"btn btn-secondary btn-xs ",onClick:this.toggleDetail},this.state.detail>0&&[f("span",{key:"icon",className:"glyphicon glyphicon-eye-open"}),f("span",{key:"text"}," Details: Visible")],0===this.state.detail&&[f("span",{key:"icon",className:"glyphicon glyphicon-eye-close"}),f("span",{key:"text"}," Details: Hidden")]))),f("table",{className:"table table-striped"},f("thead",{},f("tr",{},f("th",{className:"text-end d-none d-sm-table-cell"},f("span",{className:"light glyphicon glyphicon-lock d-none d-sm-inline"},"")),f("th",{},"URL"),f("th",{className:"d-none d-sm-table-cell"},"Age"),f("th",{className:"text-end d-none d-sm-table-cell"},"Size"),f("th",{className:"text-end d-none d-sm-table-cell"},f("span",{className:"glyphicon glyphicon-transfer"},"")),f("th",{className:"text-end d-none d-sm-table-cell"},"IPs"),f("th",{className:"text-end d-none d-sm-table-cell"},f("span",{className:"glyphicon glyphicon-flag"},"")),f("th",{},f("span",{className:"glyphicon glyphicon-home"},"")))),f("tbody",{},(0,o.default)(this.props.results,this.state.collapse?"page.domain":void 0).map((e,t)=>(e.detail=this.state.detail,e.index=t+1,f(m,e))))),this.props.show_more_button&&!this.props.loading&&f("button",{className:"btn btn-primary text-center mx-auto col col-lg-2"+(this.props.offset>this.props.total-100?" disabled d-none":""),id:"more",onClick:this.props.load_more},"Load more..."),f("p",{className:"float-end"},f("span",{},"("+this.props.total+" results in total, "+this.props.results.length+" shown)")))}}},3712(e){const t=["AND","OR","NOT","(",")"],s=/(-?\w[\w.]*:"[^"]*"|-?\w[\w.]*:'[^']*'|-?\w[\w.]*:[^\s()]+|AND|OR|NOT|\(|\)|\S+)/g;function a(e){const t=[];let a;const r=new RegExp(s.source,"g");for(;a=r.exec(e);)t.push(a[1]);return t}function r(e){const s=[];for(const a of e){if(t.indexOf(a)>=0)continue;const e=a.startsWith("-")?a.substring(1):a,r=e.indexOf(":");if(r>0){const t=e.substring(0,r),i=e.substring(r+1);s.push({field:t,value:i,raw:a})}}return s}function i(e){if(!e||!e.trim())return;const s=e.trimEnd();if(e.length!==s.length)return;const r=a(s);if(!r.length)return;const i=r[r.length-1];if(t.indexOf(i)>=0)return;if(i.indexOf(":")>=0)return;const n=i.startsWith("-")?i.substring(1):i;return/^[A-Z()]+$/.test(n)||"*"===n||n.length<1?void 0:n}function n(e,t){const{allFieldNames:s}=t,a=new Set;for(const t of e)if(t.endsWith(".*")){const e=t.slice(0,-1);for(const t of s)t.startsWith(e)&&a.add(t)}else a.add(t);return Array.from(a)}function o(e,t){const s=e.toLowerCase(),a=t.filter(e=>e.toLowerCase().startsWith(s)),r=s.length>=3?t.filter(e=>e.toLowerCase().includes(s)):[];return Array.from(new Set(a.concat(r)))}function c(e){if(!e||!e.trim())return;const s=e.trimEnd();if(e.length!==s.length)return;const r=a(s);if(!r.length)return;const i=r[r.length-1];if(t.indexOf(i)>=0)return;const n=i.startsWith("-")?i.substring(1):i,o=n.indexOf(":");return o<=0?void 0:{field:n.substring(0,o),value:n.substring(o+1)}}function d(e,t,s){const a=t&&t[e]||[],r=s&&s[e]||[];if(!r.length)return a;const i=a.slice(),n=new Set(a.map(e=>e.value));for(const e of r)n.has(e.value)||(n.add(e.value),i.push(e));return i}function l(e,t){const s=e.replace(/^["']/,"").replace(/["']$/,"");if(!s)return t.slice();const a=s.toLowerCase(),r=t.filter(e=>e.value.toLowerCase().startsWith(a)),i=a.length>=2?t.filter(e=>e.value.toLowerCase().includes(a)):[];return Array.from(new Set(r.concat(i)))}function u(e,t,s){const{allFieldNames:a,parentPrefixes:r}=s,i=[],n=e.toLowerCase();if(a.indexOf(e)>=0&&t.indexOf(e)<0)return i.push({type:"restricted",field:e}),i;if(r.has(e)){const s=t.filter(t=>t.startsWith(e+"."));if(s.length)return i.push({type:"nested",field:e,options:s}),i}let o=t.filter(e=>e.toLowerCase().includes(n)||n.includes(e.toLowerCase().split(".").pop()));return 0===o.length&&(o=t.filter(e=>{const t=e.split("."),s=t[t.length-1].toLowerCase();return p(n,e.toLowerCase())||p(n,s)})),o.length&&i.push({type:"similar",field:e,options:o.slice(0,5)}),i}function p(e,t){return!(Math.abs(e.length-t.length)>2)&&m(e,t)<=2}function m(e,t){const s=[];for(let e=0;e<=t.length;e++)s[e]=[e];for(let t=0;t<=e.length;t++)s[0][t]=t;for(let a=1;a<=t.length;a++)for(let r=1;r<=e.length;r++)t[a-1]===e[r-1]?s[a][r]=s[a-1][r-1]:s[a][r]=Math.min(s[a-1][r-1]+1,s[a][r-1]+1,s[a-1][r]+1);return s[t.length][e.length]}function y(e){let t=0,s=0;
1for(const a of e)"["===a?t++:"]"===a?t=Math.max(0,t-1):"{"===a?s++:"}"===a&&(s=Math.max(0,s-1));return t>0||s>0}e.exports={buildFieldIndex:function(e,t){const s=e.filter(e=>e.datasource===t),a=s.map(e=>e.name),r={},i={};s.forEach(e=>{r[e.name]=e,Array.isArray(e.options)&&e.options.length&&(i[e.name]=e.options)});const n=new Set;for(const e of a){const t=e.split(".");t.length>1&&n.add(t[0])}return{allFieldNames:a,fieldMap:r,parentPrefixes:n,optionMap:i}},resolveAllowedFields:n,parseQueryTokens:a,extractFields:r,getPartialField:i,getPartialValue:c,findCompletions:o,findValueOptions:l,getFieldOptions:d,findSuggestions:u,analyzeQuery:function(e,t,s,p){const{focused:m,extraOptions:f}=p||{},{optionMap:h}=s,b=[],v=n(t,s),g=r(a(e));for(const e of g){const{field:t,value:a}=e;if(v.indexOf(t)<0){const e=u(t,v,s);e.length?b.push({field:t,value:a,suggestions:e}):b.push({field:t,value:a,suggestions:[{type:"unknown",field:t}]})}}const w=!e.trim(),k=e.endsWith(" "),x=!b.length,N=y(e),S=i(e),A=c(e),I=A?d(A.field,h,f):[];if(A&&!N&&I.length){const e=l(A.value,I);e.length&&b.push({field:A.field,value:A.value,suggestions:[{type:"valueCompletions",field:A.field,value:A.value,options:e}]})}else if(S&&!N){const e=o(S,v);e.length&&b.push({field:S,suggestions:[{type:"completions",field:S,options:e}]})}else m&&!N&&x&&(w||k)&&b.push({field:"",suggestions:[{type:"completions",field:"",options:v}]});return b},levenshteinDistance:m,isInsideRangeExpression:y}},9485(e){"use strict";e.exports=JSON.parse('{"fields":[{"name":"authority.key_id","visible":true,"type":"keyword","desc":"Unique identifier of the CA\'s signing key","datasource":"certificates","pro":true},{"name":"ext_key_usage","visible":false,"type":"keyword","desc":"Extended key usage restrictions and permitted applications","datasource":"certificates","pro":true},{"name":"issuer.c","visible":false,"type":"keyword","desc":"ISO 3166-1 2-letter ISO country code of the Certificate Authority","datasource":"certificates","pro":true},{"name":"issuer.cn","visible":true,"type":"keyword","desc":"Common name of the Certificate Authority that issued the certificate","datasource":"certificates","pro":true},{"name":"issuer.dn","visible":false,"type":"text","desc":"Complete distinguished name of the Certificate Authority","datasource":"certificates","pro":true},{"name":"issuer.dn.keyword","visible":false,"type":"keyword","desc":"Complete distinguished name of the Certificate Authority (analyzed as keyword)","datasource":"certificates","pro":true},{"name":"issuer.l","visible":false,"type":"keyword","desc":"Location / City of the Certificate Authority that issued the certificate","datasource":"certificates","pro":true},{"name":"issuer.o","visible":false,"type":"text","desc":"Organization name of the Certificate Authority","datasource":"certificates","pro":true},{"name":"issuer.o.keyword","visible":false,"type":"keyword","desc":"Organization name of the Certificate Authority (analyzed as keyword)","datasource":"certificates","pro":true},{"name":"issuer.ou","visible":false,"type":"text","desc":"Organizational unit within the Certificate Authority","datasource":"certificates","pro":true},{"name":"issuer.ou.keyword","visible":false,"type":"keyword","desc":"Organizational unit within the Certificate Authority (analyzed as keyword)","datasource":"certificates","pro":true},{"name":"issuer.st","visible":false,"type":"keyword","desc":"State / Locality of the Certificate Authority that issued the certificate","datasource":"certificates","pro":true},{"name":"key_usage","visible":false,"type":"keyword","desc":"Permitted cryptographic operations for the certificate\'s key","datasource":"certificates","pro":true},{"name":"pubkey.algo","visible":false,"type":"keyword","desc":"Public key algorithm type (RSA, ECDSA, etc.)","datasource":"certificates","pro":true},{"name":"pubkey.sha256","visible":false,"type":"keyword","desc":"SHA256 fingerprint of the certificate\'s public key","datasource":"certificates","pro":true},{"name":"sans.dns","visible":false,"type":"domain","desc":"DNS names in SAN extension","datasource":"certificates","pro":true},{"name":"sans.dns.keyword","visible":false,"type":"keyword","desc":"DNS names in SAN extension (analyzed as keyword)","datasource":"certificates","pro":true},{"name":"sans.email","visible":false,"type":"keyword","desc":"Email addresses in the SAN extension","datasource":"certificates","pro":true},{"name":"sans.dns_count","visible":true,"type":"integer","desc":"Number of DNS names listed in the Subject Alternative Names extension","datasource":"certificates","pro":true},{"name":"serial","visible":false,"type":"keyword","desc":"Serial number of the certificate","datasource":"certificates","pro":true},{"name":"sha1","visible":false,"type":"keyword","desc":"SHA1 hash fingerprint of the entire certificate","datasource":"certificates","pro":true},{"name":"sha256","visible":true,"type":"keyword","desc":"SHA256 hash fingerprint of the entire certificate","datasource":"certificates","pro":true},{"name":"sha256_tbs_noct","visible":false,"type":"keyword","desc":"SHA256 hash of the certificate\'s To-Be-Signed portion excluding Certificate Transparency extensions","datasource":"certificates","pro":true},{"name":"signature_algo","visible":false,"type":"keyword","desc":"Cryptographic algorithm used to sign the certificate","datasource":"certificates","pro":true},{"name":"source","visible":false,"type":"keyword","desc":"Origin or collection method used to obtain the certificate","datasource":"certificates","pro":true},{"name":"subject.c","visible":false,"type":"keyword","desc":"ISO 3166-1 2-letter country code of the certificate subject","datasource":"certificates","pro":true},{"name":"subject.cn","visible":true,"type":"domain","desc":"Common name, typically the domain name or entity identifier","datasource":"certificates","pro":true},{"name":"subject.cn.keyword","visible":true,"type":"keyword","desc":"Common name, typically the domain name or entity identifier (analyzed as keyword)","datasource":"certificates","pro":true},{"name":"subject.dn","visible":false,"type":"text","desc":"Complete distinguished name containing all subject identity attributes","datasource":"certificates","pro":true},{"name":"subject.dn.keyword","visible":false,"type":"keyword","desc":"Complete distinguished name containing all subject identity attributes (analyzed as keyword)","datasource":"certificates","pro":true},{"name":"subject.key_id","visible":false,"type":"keyword","desc":"Unique identifier for the subject\'s public key","datasource":"certificates","pro":true},{"name":"subject.l","visible":false,"type":"keyword","desc":"Locality or city name of the certificate subject","datasource":"certificates","pro":true},{"name":"subject.o","visible":false,"type":"text","desc":"Organization name that owns the certificate","datasource":"certificates","pro":true},{"name":"subject.o.keyword","visible":false,"type":"keyword","desc":"Organization name that owns the certificate (analyzed as keyword)","datasource":"certificates","pro":true},{"name":"subject.ou","visible":false,"type":"text","desc":"Organizational unit of certificate owner","datasource":"certificates","pro":true},{"name":"subject.ou.keyword","visible":false,"type":"keyword","desc":"Organizational unit of certificate owner (analyzed as keyword)","datasource":"certificates","pro":true},{"name":"subject.st","visible":false,"type":"keyword","desc":"State or province name of the certificate subject","datasource":"certificates","pro":true},{"name":"tags","visible":false,"type":"keyword","desc":"Metadata labels or categories applied to the certificate record (e.g. precert, cn_not_in_sans)","datasource":"certificates","pro":true,"options":[{"value":"cn_not_in_sans","type":"exact"},{"value":"precert","type":"exact"},{"value":"ca","type":"exact"}]}
1,{"name":"valid.days","visible":true,"type":"integer","desc":"Number of days the certificate is valid for","datasource":"certificates","pro":true},{"name":"valid.from","visible":true,"type":"date","desc":"Start date and time when the certificate becomes valid","datasource":"certificates","pro":true},{"name":"valid.seconds","visible":true,"type":"integer","desc":"Number of seconds the certificate remains valid","datasource":"certificates","pro":true},{"name":"valid.to","visible":true,"type":"date","desc":"End date and time when the certificate expires","datasource":"certificates","pro":true},{"name":"asn.asn","visible":true,"type":"keyword","desc":"Any ASN the hostname has been seen on","datasource":"hostnames","pro":true},{"name":"asn.country","visible":true,"type":"keyword","desc":"ISO 3166-1 2-letter country code of the ASN","datasource":"hostnames","pro":true},{"name":"asn.name","visible":true,"type":"text","desc":"Name of the ASN of the hostname","datasource":"hostnames","pro":true},{"name":"asn.name.keyword","visible":true,"type":"keyword","desc":"Name of the ASN of the hostname (analyzed as keyword)","datasource":"hostnames","pro":true},{"name":"cname","visible":true,"type":"domain","desc":"Last observed CNAME records","datasource":"hostnames","pro":true},{"name":"cname.keyword","visible":true,"type":"keyword","desc":"Last observed CNAME records (analyzed as keyword)","datasource":"hostnames","pro":true},{"name":"dns_records","visible":false,"type":"keyword","desc":"Which DNS records were observed for this hostname (A, AAAA, NS, MX)","datasource":"hostnames","pro":true},{"name":"domain","visible":true,"type":"domain","desc":"The root domain","datasource":"hostnames","pro":true},{"name":"domain_words","visible":false,"type":"keyword","desc":"Keywords of the hostname, split by non-letter characters","datasource":"hostnames","pro":true},{"name":"first_seen","visible":true,"type":"date","desc":"Datetime of when hostname was first seen","datasource":"hostnames","pro":true},{"name":"geoip.country","visible":true,"type":"keyword","desc":"ISO 3166-1 2-letter country code of the IP","datasource":"hostnames","pro":true},{"name":"hostname","visible":true,"type":"domain","desc":"The full hostname. <b>Wildcard / Regular Expression supported</b>","regex":true,"datasource":"hostnames","pro":true},{"name":"hostname.keyword","visible":true,"type":"keyword","desc":"The full hostname (analyzed as keyword). <b>Wildcard / Regular Expression supported</b>","regex":true,"datasource":"hostnames","pro":true},{"name":"hostname_dashes","visible":true,"type":"integer","desc":"The number of dashes \'-\' in the hostname","datasource":"hostnames","pro":true},{"name":"hostname_digits","visible":true,"type":"integer","desc":"The number of digits (0-9) in the hostname","datasource":"hostnames","pro":true},{"name":"hostname_length","visible":true,"type":"integer","desc":"The length of the hostname","datasource":"hostnames","pro":true},{"name":"ip","visible":true,"type":"ip","desc":"Last observed IPv4/IPv6 values for A/AAAA records","datasource":"hostnames","pro":true},{"name":"last_seen","visible":true,"type":"date","desc":"Datetime of when the domain was last seen","datasource":"hostnames","pro":true},{"name":"mx","visible":true,"type":"domain","desc":"Last observed MX records","datasource":"hostnames","pro":true},{"name":"mx.keyword","visible":true,"type":"keyword","desc":"Last observed MX records (analyzed as keyword)","datasource":"hostnames","pro":true},{"name":"nameserver","visible":true,"type":"domain","desc":"Last observed NS records","datasource":"hostnames","pro":true},{"name":"nameserver.keyword","visible":true,"type":"keyword","desc":"Last observed NS records (analyzed as keyword)","datasource":"hostnames","pro":true},{"name":"seen_days","visible":true,"type":"integer","desc":"The number of days the hostname has been seen for","datasource":"hostnames","pro":true},{"name":"sources","visible":false,"type":"keyword","desc":"Sources this hostname was observed from (e.g. pdns, ct, zonefile, scan)","datasource":"hostnames","pro":true,"options":[{"value":"pdns","type":"exact"},{"value":"ct","type":"exact"},{"value":"zonefile","type":"exact"},{"value":"scan","type":"exact"},{"value":"scan-link","type":"exact"},{"value":"scan-cert-subject","type":"exact"},{"value":"whois","type":"exact"}]}
1,{"name":"sources_length","visible":true,"type":"integer","desc":"How many sources this has been observed from","datasource":"hostnames","pro":true},{"name":"subdomain_levels","visible":true,"type":"integer","desc":"The number of subdomain levels on the domain","datasource":"hostnames","pro":true},{"name":"tags","visible":false,"type":"keyword","desc":"Classification of hostname (e.g. apexDomain, idn, confusables, wildcard)","datasource":"hostnames","pro":true,"options":[{"value":"apexDomain","type":"exact"},{"value":"idn","type":"exact"},{"value":"confusables","type":"exact"},{"value":"wildcard","type":"exact"}]},{"name":"tld","visible":true,"type":"domain","desc":"The top level domain of the domain","datasource":"hostnames","pro":true},{"name":"labels","visible":true,"type":"keyword","desc":"High-level system labels applied by urlscan","datasource":"hostnames","pro":true},{"name":"allTags","visible":false,"type":"keyword","desc":"Tags from all observation periods","datasource":"incidents","pro":true},{"name":"asn","visible":false,"type":"keyword","desc":"The ASN number of the last observed IP","datasource":"incidents","pro":true},{"name":"asnname","visible":false,"type":"text","desc":"The ASN description of the last observed IP","datasource":"incidents","pro":true},{"name":"asnname.keyword","visible":false,"type":"keyword","desc":"The ASN description of the last observed IP (analyzed as keyword)","datasource":"incidents","pro":true},{"name":"cname","visible":false,"type":"domain","desc":"Last observed CNAME records","datasource":"incidents","pro":true},{"name":"countries","visible":false,"type":"keyword","desc":"Scan location list","datasource":"incidents","pro":true},{"name":"countriesPerInterval","visible":false,"type":"integer","desc":"Numer of countries incident scan was observed from per interval","datasource":"incidents","pro":true},{"name":"createdAt","visible":true,"type":"date","desc":"Datetime of when the incident was created","datasource":"incidents","pro":true},{"name":"domain","visible":true,"type":"domain","desc":"Contains the registered (apex) domain, indexed as individual levels of subdomains. <b>Wildcard / Regular Expression supported</b>","regex":true,"datasource":"incidents","pro":true},{"name":"expireAt","visible":true,"type":"date","desc":"Datetime for when the incident is due to expire","datasource":"incidents","pro":true},{"name":"hostname","visible":true,"type":"domain","desc":"The full hostname. <b>Wildcard / Regular Expression supported</b>","regex":true,"datasource":"incidents","pro":true},{"name":"incidentProfile","visible":true,"type":"keyword","desc":"The ID of the incident profile used to create the incident","regex":true,"datasource":"incidents","pro":true},{"name":"ip","visible":true,"type":"ip","desc":"Last observed IPv4/IPv6 values for A/AAAA records","datasource":"incidents","pro":true},{"name":"mx","visible":false,"type":"domain","desc":"Last observed MX records","datasource":"incidents","pro":true},{"name":"nameserver","visible":false,"type":"domain","desc":"Last observed NS records","datasource":"incidents","pro":true},{"name":"observable","visible":false,"type":"keyword","desc":"The observable of the incident","datasource":"incidents","pro":true},{"name":"scanInterval","visible":false,"type":"integer","desc":"Interval between triggering full website scan (in seconds)","datasource":"incidents","pro":true},{"name":"scanIntervalAfterMalicious","visible":false,"type":"integer","desc":"The scan interval of the incident after the hostname/domain/URL was detected as malicious (in seconds)","datasource":"incidents","pro":true},{"name":"scanIntervalAfterSuspended","visible":false,"type":"integer","desc":"The scan interval of the incident after the site was suspended or taken down (in seconds)","datasource":"incidents","pro":true},{"name":"scanIntervalMode","visible":false,"type":"keyword","desc":"The scan mode type","datasource":"incidents","pro":true},{"name":"sourceId","visible":false,"type":"keyword","desc":"ID of the trigger source","datasource":"incidents","pro":true},{"name":"sourceType","visible":false,"type":"keyword","desc":"Incident source type","datasource":"incidents","pro":true},{"name":"state","visible":true,"type":"keyword","desc":"Current incident state, can be <code>active</code> or <code>closed</code>","datasource":"incidents","pro":true,"options":[{"value":"active","type":"exact"},{"value":"closed","type":"exact"}]}
1,{"name":"stateCount","visible":true,"type":"integer","desc":"How many intervals we have stored for the incident","datasource":"incidents","pro":true},{"name":"stateSize","visible":true,"type":"integer","desc":"The size of the state internally","datasource":"incidents","pro":true},{"name":"stopDelayInactive","visible":true,"type":"integer","desc":"Control for when the incident is automatically closed","datasource":"incidents","pro":true},{"name":"stopDelayMalicious","visible":true,"type":"integer","desc":"Control for when the incident is automatically closed","datasource":"incidents","pro":true},{"name":"stopDelaySuspended","visible":true,"type":"integer","desc":"Control for when the incident is automatically closed","datasource":"incidents","pro":true},{"name":"tags","visible":false,"type":"keyword","desc":"Tags from the latest observation period","datasource":"incidents","pro":true},{"name":"tld","visible":true,"type":"domain","desc":"The top level domain of the observable","datasource":"incidents","pro":true},{"name":"type","visible":true,"type":"keyword","desc":"The type of observable: <code>hostname</code>, <code>ip</code>, or <code>url</code>","datasource":"incidents","pro":true,"options":[{"value":"hostname","type":"exact"},{"value":"ip","type":"exact"},{"value":"url","type":"exact"}]},{"name":"uniqueId","visible":true,"type":"keyword","desc":"Unique ID for the incident","datasource":"incidents","pro":true},{"name":"uniqueIPs","visible":true,"type":"integer","desc":"Count of unique IPs observed in the incident","datasource":"incidents","pro":true},{"name":"updatedAt","visible":true,"type":"date","desc":"Datetime of when the incident was updated","datasource":"incidents","pro":true},{"name":"userAgentsPerInterval","visible":true,"type":"integer","desc":"Count of user agents per scan interval","datasource":"incidents","pro":true},{"name":"verdict","visible":true,"type":"keyword","desc":"Incident malicious or benign verdict","datasource":"incidents","pro":true},{"name":"visibility","visible":true,"type":"keyword","desc":"Incident visibility <code>private</code> or <code>unlisted</code>","datasource":"incidents","pro":true,"options":[{"value":"private","type":"exact"},{"value":"unlisted","type":"exact"}]},{"name":"channel","visible":true,"type":"keyword","desc":"Notification delivery channel","datasource":"notifications","pro":true},{"name":"createdAt","visible":true,"type":"date","desc":"Date when the notification was created","datasource":"notifications","pro":true},{"name":"eventType","visible":true,"type":"keyword","desc":"Event type that triggered the notification","datasource":"notifications","pro":true},{"name":"sourceId","visible":false,"type":"keyword","desc":"ID of the source object that triggered the notification","datasource":"notifications","pro":true},{"name":"sourceType","visible":true,"type":"keyword","desc":"Source type that triggered the notification","datasource":"notifications","pro":true},{"name":"state","visible":true,"type":"keyword","desc":"Notification state (e.g. pending, delivered)","datasource":"notifications","pro":true,"options":[{"value":"pending","type":"exact"},{"value":"delivered","type":"exact"},{"value":"failed","type":"exact"}]},{"name":"type","visible":true,"type":"keyword","desc":"Type of notification (e.g. email, webhook)","datasource":"notifications","pro":true,"options":[{"value":"email","type":"exact"},{"value":"webhook","type":"exact"}]},{"name":"uniqueId","visible":false,"type":"keyword","desc":"Unique identifier for deduplication","datasource":"notifications","pro":true},{"name":"updatedAt","visible":true,"type":"date","desc":"Date when the notification was last updated","datasource":"notifications","pro":true},{"name":"apikey","visible":false,"type":"virtual","desc":"Scans submitted using one of your API keys (Can only be <code>me</code>)","datasource":"scans","options":[{"value":"me","type":"exact"}]},{"name":"asn","visible":false,"type":"keyword","desc":"Any of the AS numbers that were contacted (e.g. AS123)","datasource":"scans"},{"name":"asnname","visible":false,"type":"text","desc":"Any of the AS Names that were contacted","datasource":"scans"},{"name":"asnname.keyword","visible":false,"type":"keyword","desc":"Any of the AS names that were contacted (analysed as keyword)","datasource":"scans"},{"name":"brand.country","visible":true,"type":"keyword","desc":"ISO 3166-1 2-letter country code of the brand","pro":true,"datasource":"scans"},{"name":"brand.key","visible":true,"type":"keyword","desc":"Unique key of the brand","pro":true,"datasource":"scans"},{"name":"brand.name","visible":true,"type":"text","desc":"Name of the brand","pro":true,"datasource":"scans"},{"name":"brand.name.keyword","visible":true,"type":"keyword","desc":"Name of the brand (analyzed as keyword)","pro":true,"datasource":"scans"},{"name":"brand.vertical","visible":true,"type":"text","desc":"Industry vertical of the brand, e.g. \\"banking\\"","pro":true,"datasource":"scans"},{"name":"brand.vertical.keyword","visible":true,"type":"keyword","desc":"Industry vertical of the brand (analyzed as keyword)","pro":true,"datasource":"scans"},{"name":"canonical.page.url","visible":true,"type":"keyword","desc":"Canonicalized version of the page URL","datasource":"scans"},{"name":"canonical.task.url","visible":true,"type":"keyword","desc":"Canonicalized version of the task URL","datasource":"scans"},{"name":"content.cookieNames","visible":false,"type":"keyword","desc":"Names of cookies set by page","since":"1.2","pro":true,"datasource":"scans"},{"name":"content.globalNames","visible":false,"type":"keyword","desc":"Names of non-standard JavaScript global variables","since":"1.2","pro":true,"datasource":"scans"},{"name":"content.identifiers","visible":false,"type":"keyword","desc":"Generic field for string identifiers","pro":true,"datasource":"scans","options":[{"value":"authorization.api","type":"prefix","desc":"Generic API keys"},{"value":"discord.webhook","type":"prefix","desc":"Discord webhooks"},{"value":"facebook.oauth-secret","type":"prefix","desc":"Facebook OAuth secrets"},{"value":"google.api","type":"prefix","desc":"Google API keys"},{"value":"google.gtm-id","type":"prefix","desc":"Google Tag Manager IDs"},{"value":"google.gtag-id","type":"prefix","desc":"Google Tag IDs"},{"value":"google.ua-id","type":"prefix","desc":"Google Analytics UA IDs"},{"value":"html-id","type":"prefix","desc":"HTML element IDs"},{"value":"json.jwt","type":"prefix","desc":"JSON Web Tokens"},{"value":"mailgun.api-key","type":"prefix","desc":"Mailgun API keys"},{"value":"square.access-token","type":"prefix","desc":"Square access tokens"},{"value":"telegram.bot-token","type":"prefix","desc":"Telegram bot tokens"},{"value":"telegram.bot-token-base64","type":"prefix","desc":"Base64-encoded Telegram bot tokens"},{"value":"telegram.username","type":"prefix","desc":"Telegram usernames"},{"value":"wallet.bitcoin","type":"prefix","desc":"Bitcoin wallet addresses"},{"value":"wallet.ethereum","type":"prefix","desc":"Ethereum wallet addresses"},{"value":"wallet.litecoin","type":"prefix","desc":"Litecoin wallet addresses"}]},{"name":"content.inputNames","visible":false,"type":"keyword","desc":"Name attributes of input fields on page","since":"1.2","pro":true,"datasource":"scans"},{"name":"content.inputTypes","visible":false,"type":"keyword","desc":"Type attributes of input fields on page","since":"1.2","pro":true,"datasource":"scans"},{"name":"content.storageNames","visible":false,"type":"keyword","desc":"Names of items in localStorage and sessionStorage set by page","since":"1.2","pro":true,"datasource":"scans"},{"name":"content.technologies","visible":false,"type":"keyword","desc":"Names of technologies detected according to Wappalyzer","since":"1.2","pro":true,"datasource":"scans"},{"name":"country","visible":false,"type":"keyword","desc":"ISO 3166-1 2-letter country code of any country that was contacted","datasource":"scans"},{"name":"date","visible":true,"type":"date","desc":"Datetime of when the scan was performed","datasource":"scans"},{"name":"dom.hash","visible":true,"type":"keyword","desc":"SHA256 hash of the DOM before truncation","since":"1.2","pro":true,"datasource":"scans"},{"name":"dom.size","visible":true,"type":"integer","desc":"Size of the DOM before truncation","since":"1.2","pro":true,"datasource":"scans"},{"name":"domain","visible":false,"type":"domain","desc":"Any domain and subdomain that was contacted","datasource":"scans"},{"name":"domain.keyword","visible":false,"regex":true,"type":"keyword","desc":"Any domain and subdomain that was contacted","datasource":"scans"},{"name":"filename","visible":false,"type":"text","desc":"Any URL that was requested","datasource":"scans"},{"name":"filename.keyword","visible":false,"regex":true,"type":"keyword","desc":"Any URL that was requested","datasource":"scans"},{"name":"files.filename","visible":true,"regex":true,"type":"text","desc":"Filename of file downloaded by the website","datasource":"scans"},{"name":"files.filename.keyword","visible":true,"type":"keyword","desc":"Filename of file downloaded by the website (analyzed as keyword)","datasource":"scans"},{"name":"files.filesize","visible":true,"type":"integer","desc":"Filesize of file downloaded by the website","datasource":"scans"},{"name":"files.mimeDescription","visible":true,"type":"text","desc":"Files MIME type description","datasource":"scans"},{"name":"files.mimeType","visible":true,"regex":true,"type":"keyword","desc":"MIME type description of file downloaded by the website","datasource":"scans"},{"name":"files.sha256","visible":true,"type":"keyword","desc":"SHA256 of file downloaded by the website","datasource":"scans"},{"name":"files.state","visible":true,"type":"keyword","desc":"Download state of the file","datasource":"scans"},{"name":"files.url","visible":true,"regex":true,"type":"text","desc":"URL of the file\'s location","datasource":"scans"},{"name":"frames.domains","visible":false,"type":"domain","desc":"Domains of frames","since":"1.2","pro":true,"datasource":"scans"},{"name":"frames.length","visible":true,"type":"integer","desc":"Number of frames","since":"1.2","pro":true,"datasource":"scans"},{"name":"frames.urls","visible":false,"regex":true,"type":"keyword","desc":"URLs of frames / iFrames","since":"1.2","pro":true,"datasource":"scans"},{"name":"hash","visible":false,"type":"keyword","desc":"Any SHA256 hash of any HTTP response","datasource":"scans"}
1,{"name":"image.aspectratio","visible":true,"hidden":true,"type":"float","desc":"Aspect ratio of screenshot (width / height)","since":"1.2","pro":true,"datasource":"scans"},{"name":"image.hash","visible":true,"hidden":true,"type":"integer","desc":"SHA256 hash of screenshot","since":"1.2","pro":true,"datasource":"scans"},{"name":"image.height","visible":true,"hidden":true,"type":"integer","desc":"Height of screenshot in pixels","since":"1.2","pro":true,"datasource":"scans"},{"name":"image.size","visible":true,"type":"integer","hidden":true,"desc":"Size of screenshot in bytes","since":"1.2","pro":true,"datasource":"scans"},{"name":"image.width","visible":true,"hidden":true,"type":"integer","desc":"Width of screenshot in pixels","since":"1.2","pro":true,"datasource":"scans"},{"name":"ip","visible":false,"type":"ip","desc":"Any IP that was contacted","datasource":"scans"},{"name":"labels","visible":true,"type":"keyword","desc":"High-level system labels applied by urlscan","pro":true,"datasource":"scans"},{"name":"links.domains","visible":false,"type":"domain","desc":"Domains of outgoing links","since":"1.2","pro":true,"datasource":"scans"},{"name":"links.length","visible":true,"type":"integer","desc":"Number of outgoing links","since":"1.2","pro":true,"datasource":"scans"},{"name":"links.urls","visible":false,"regex":true,"type":"keyword","desc":"URLs of outgoing links (to different domains than page.domain)","since":"1.2","pro":true,"datasource":"scans"},{"name":"meta","visible":false,"type":"keyword","desc":"IDs of matching subscriptions / saved searches","pro":true,"datasource":"scans"},{"name":"page.apexDomain","visible":true,"type":"keyword","desc":"Apex domain of the page","since":"1.2","datasource":"scans"},{"name":"page.apexDomainAgeDays","visible":true,"type":"integer","desc":"Age of the page apex domain in days","datasource":"scans"},{"name":"page.asn","visible":true,"type":"keyword","desc":"AS Number of the website","datasource":"scans"},{"name":"page.asnname","visible":true,"type":"text","desc":"Name of the main AS of the website","datasource":"scans"},{"name":"page.asnname.keyword","visible":true,"type":"keyword","desc":"Name of the main AS of the website (analyzed as keyword)","datasource":"scans"},{"name":"page.country","visible":true,"type":"keyword","desc":"Primary IP GeoIP Country (ISO 3166-1 2-letter country code)","datasource":"scans"},{"name":"page.domain","visible":true,"type":"domain","desc":"Primary Domain (Analysed as all levels of parent domains)","datasource":"scans"},{"name":"page.domain.keyword","visible":false,"regex":true,"type":"keyword","desc":"Primary Domain (Analysed as keyword)","datasource":"scans"},{"name":"page.domainAgeDays","visible":true,"type":"integer","desc":"Age of the page domain (hostname) in days","datasource":"scans"},{"name":"page.ip","visible":true,"type":"ip","desc":"Primary IP","datasource":"scans"},{"name":"page.language","visible":true,"type":"keyword","desc":"ISO-639 language code based on page text","datasource":"scans"},{"name":"page.mimeType","visible":true,"type":"keyword","desc":"MIME type of the primary HTTP response","since":"1.2","datasource":"scans"},{"name":"page.ptr","visible":true,"type":"domain","desc":"DNS PTR record of primary IP","datasource":"scans"},{"name":"page.redirected","visible":true,"type":"keyword","desc":"Whether the page was redirected from task.url, can be one of <code>same-domain</code>, <code>sub-domain</code>, <code>parent-domain</code>, <code>sibling-domain</code>, <code>off-domain</code>, <code>https-only</code>","since":"1.2","datasource":"scans","options":[{"value":"same-domain","type":"exact"},{"value":"sub-domain","type":"exact"},{"value":"parent-domain","type":"exact"},{"value":"sibling-domain","type":"exact"},{"value":"off-domain","type":"exact"},{"value":"https-only","type":"exact"}]},{"name":"page.server","visible":true,"type":"text","desc":"HTTP \\"Server\\" header of primary request","datasource":"scans"},{"name":"page.status","visible":true,"type":"keyword","desc":"HTTP status code of primary request response","datasource":"scans"},{"name":"page.title","visible":true,"type":"text","desc":"Title of the page","since":"1.2","datasource":"scans"},{"name":"page.title.keyword","visible":false,"regex":true,"type":"keyword","desc":"Title of the page","since":"1.2","datasource":"scans"},{"name":"page.tlsAgeDays","visible":true,"type":"integer","desc":"Age of TLS certificate when the page was scanned (in days)","since":"1.2","datasource":"scans"},{"name":"page.tlsIssuer","visible":true,"type":"keyword","desc":"Issuer of the page TLS certificate","since":"1.2","datasource":"scans"},{"name":"page.tlsValidDays","visible":true,"type":"integer","desc":"TLS certificate validity period in days","since":"1.2","datasource":"scans"},{"name":"page.tlsValidFrom","visible":true,"type":"date","desc":"TLS certificate Valid-From date","since":"1.2","datasource":"scans"},{"name":"page.umbrellaRank","visible":true,"type":"integer","desc":"Cisco Umbrella Top 1 Million rank of page domain","since":"1.2","datasource":"scans"},{"name":"page.url","visible":true,"type":"text","desc":"URL of the primary page (after redirection)","datasource":"scans"},{"name":"page.url.keyword","visible":false,"regex":true,"type":"keyword","desc":"URL of the primary page (after redirection, analysed as keyword)","datasource":"scans"},{"name":"scanner.country","visible":true,"type":"keyword","desc":"Scanner IP exit location (ISO 3166-1 2-letter country code)","since":"1.2","pro":true,"datasource":"scans"},{"name":"server","visible":false,"type":"keyword","desc":"Any HTTP \\"Server\\" header of subrequests","datasource":"scans"},{"name":"stats.dataLength","visible":true,"type":"integer","desc":"Data size of all subresources","datasource":"scans"},{"name":"stats.encodedDataLength","visible":true,"type":"integer","desc":"Transfer size of all subresources","datasource":"scans"},{"name":"stats.requests","visible":true,"type":"integer","desc":"Number of subrequests","datasource":"scans"},{"name":"stats.uniqCountries","visible":true,"type":"integer","desc":"Number of unique countries contacted","datasource":"scans"},{"name":"stats.uniqIPs","visible":true,"type":"integer","desc":"Number of unique IPs contacted","datasource":"scans"},{"name":"submitter.country","visible":true,"type":"keyword","desc":" GeoIP country of the submission IP (ISO 3166-1 2-letter country code)","pro":true,"datasource":"scans"},{"name":"task.apexDomain","visible":true,"type":"keyword","desc":"Apex domain of the tasked hostname","datasource":"scans"},{"name":"task.domain","visible":true,"type":"domain","desc":"Domain of the tasked URL","datasource":"scans"},{"name":"task.domain.keyword","visible":false,"regex":true,"type":"keyword","desc":"Domain of the tasked URL (analysed as keyword)","datasource":"scans"},{"name":"task.method","visible":true,"type":"keyword","desc":"Examples: manual or api","datasource":"scans","options":[{"value":"manual","type":"exact"},{"value":"api","type":"exact"},{"value":"urlscan-observe","type":"exact"},{"value":"automatic","type":"exact"}]}
1,{"name":"task.source","visible":true,"type":"keyword","desc":"Examples: phishtank or certstream-suspicious","datasource":"scans","options":[{"value":"openphish","type":"exact"},{"value":"phishtank","type":"exact"},{"value":"certstream-suspicious","type":"exact"},{"value":"urlhaus","type":"exact"}]},{"name":"task.tags","visible":true,"type":"keyword","desc":"User-defined tags supplied during scan submission","datasource":"scans"},{"name":"task.url","visible":true,"type":"text","desc":"The original URL that was tasked","datasource":"scans"},{"name":"task.url.keyword","visible":false,"regex":true,"type":"keyword","desc":"The original URL that was tasked (analysed as keyword)","datasource":"scans"},{"name":"task.uuid","visible":true,"type":"keyword","desc":"The unique UUID of the scan","datasource":"scans"},{"name":"task.visibility","visible":true,"type":"keyword","desc":"Can be one of <code>public</code>, <code>unlisted</code>, or <code>private</code>","datasource":"scans","options":[{"value":"public","type":"exact"},{"value":"unlisted","type":"exact"},{"value":"private","type":"exact"}]},{"name":"team","visible":false,"type":"virtual","desc":"Scans submitted by any of your teams (Can only be <code>me</code>)","datasource":"scans","options":[{"value":"me","type":"exact"}]},{"name":"text.content","visible":false,"regex":false,"type":"text","desc":"Visible text on the website, truncated to the first 20kB","since":"1.2","pro":true,"datasource":"scans"},{"name":"text.hash","visible":true,"type":"keyword","desc":"SHA256 hash of the text before truncation","since":"1.2","pro":true,"datasource":"scans"},{"name":"text.size","visible":true,"type":"integer","desc":"Size of the text content before truncation","since":"1.2","pro":true,"datasource":"scans"},{"name":"user","visible":false,"type":"virtual","desc":"Scans submitted by yourself (Can only be <code>me</code>)","datasource":"scans","options":[{"value":"me","type":"exact"}]},{"name":"usertags","visible":true,"type":"keyword","desc":"User-defined tags for Saved Searches that matched the scan","pro":true,"datasource":"scans"},{"name":"verdicts.community.malicious","visible":true,"type":"boolean","desc":"The community verdict for a scan","pro":true,"datasource":"scans"},{"name":"verdicts.engines.malicious","visible":true,"type":"boolean","desc":"ML malicious verdict","pro":true,"datasource":"scans"},{"name":"verdicts.engines.score","visible":true,"type":"integer","desc":"ML score from -100 to 100","pro":true,"datasource":"scans"},{"name":"verdicts.lastVerdict","visible":true,"type":"date","desc":"Date the latest verdict for this scan was added, only for verdicts created after the scan has finished","since":"1.2","pro":true,"datasource":"scans"},{"name":"verdicts.malicious","visible":true,"type":"boolean","desc":"Whether a verdict exists for the page","since":"1.2","pro":true,"datasource":"scans"},{"name":"verdicts.score","visible":true,"type":"integer","desc":"Maliciousness score of page from -100 (benign) to 100 (malicious)","since":"1.2","pro":true,"datasource":"scans"},{"name":"verdicts.urlscan.malicious","visible":true,"type":"boolean","desc":"The urlscan malicious verdict","pro":true,"datasource":"scans"},{"name":"visible.brandname","visible":true,"type":"text","desc":"Brand name the website claims to represent (urlscan Brand AI)","pro":true,"datasource":"scans"},{"name":"visible.brandname.keyword","visible":true,"type":"keyword","desc":"Brand name the website claims to represent (analyzed as keyword)","pro":true,"datasource":"scans"},{"name":"websockets.domains","visible":false,"regex":true,"type":"domain","desc":"Domains of WebSocket connections","pro":true,"datasource":"scans"},{"name":"websockets.length","visible":true,"type":"integer","desc":"Number of WebSocket connections","pro":true,"datasource":"scans"},{"name":"websockets.totalBytesReceived","visible":true,"type":"integer","desc":"Total bytes received over WebSocket connections","pro":true,"datasource":"scans"},{"name":"websockets.totalBytesSent","visible":true,"type":"integer","desc":"Total bytes sent over WebSocket connections","pro":true,"datasource":"scans"},{"name":"websockets.urls","visible":false,"regex":true,"type":"keyword","desc":"URLs of WebSocket connections","pro":true,"datasource":"scans"},{"name":"date","visible":true,"type":"date","desc":"Alias of submissions.firstSeen","datasource":"files"},{"name":"sha256","visible":true,"type":"keyword","desc":"SHA256 hash of the file","datasource":"files"},{"name":"md5","visible":true,"type":"keyword","desc":"MD5 hash of the file","datasource":"files"},{"name":"sha1","visible":true,"type":"keyword","desc":"SHA1 hash of the file","datasource":"files"},{"name":"fileSize","visible":true,"type":"integer","desc":"Size of the file in bytes","datasource":"files"},{"name":"mimeType","visible":true,"type":"keyword","desc":"Detected MIME type","datasource":"files"},{"name":"submissions.firstSeen","visible":true,"type":"date","desc":"Datetime the file is first submitted","datasource":"files"},{"name":"submissions.lastSeen","visible":true,"type":"date","desc":"Datetime of the most recent submission of the file","datasource":"files"},{"name":"submissions.total","visible":true,"type":"integer","desc":"Number of times this file has been submitted","datasource":"files"},{"name":"submissions.tags","visible":true,"type":"keyword","desc":"User-defined tags supplied during file submission","datasource":"files"},{"name":"visibility","visible":true,"type":"keyword","desc":"Most permissive visibility across all submissions of this file. Can be one of <code>public</code>, <code>unlisted</code>, or <code>private</code>","datasource":"files","options":[{"value":"public","type":"exact"},{"value":"unlisted","type":"exact"},{"value":"private","type":"exact"}]}
1,{"name":"image.width","visible":true,"type":"integer","desc":"Width of the file in pixels if it is an image","datasource":"files"},{"name":"image.height","visible":true,"type":"integer","desc":"Height of the file in pixels if it is an image","datasource":"files"},{"name":"image.format","visible":true,"type":"keyword","desc":"Image container format (e.g. <code>png</code>, <code>jpeg</code>) if it is an image","datasource":"files"},{"name":"image.type","visible":true,"type":"keyword","desc":"Image classification (e.g. <code>photo</code>, <code>screenshot</code>) if it is an image","datasource":"files"},{"name":"fileName","visible":true,"type":"text","desc":"Filename supplied at upload","datasource":"files"},{"name":"type","visible":true,"type":"keyword","desc":"Semantic file category (e.g. <code>sms_screenshot</code>)","datasource":"files"},{"name":"qrcode.count","visible":true,"type":"integer","desc":"Number of QR codes detected in the file","pro":true,"datasource":"files"},{"name":"qrcode.text","visible":true,"type":"keyword","desc":"Decoded text content of QR codes detected in the file","pro":true,"datasource":"files"},{"name":"qrcode.urls","visible":true,"type":"keyword","desc":"URLs decoded from QR codes detected in the file","pro":true,"datasource":"files"},{"name":"qrcode.domains","visible":true,"type":"domain","desc":"Domains of URLs decoded from QR codes detected in the file","pro":true,"datasource":"files"},{"name":"content.text","visible":true,"type":"text","desc":"Text extracted from the file","pro":true,"datasource":"files"},{"name":"content.language","visible":true,"type":"keyword","desc":"Detected language of extracted text","pro":true,"datasource":"files"},{"name":"content.length","visible":true,"type":"integer","desc":"Length of extracted text","pro":true,"datasource":"files"},{"name":"sender.name","visible":true,"type":"text","desc":"Sender name extracted from the file if it is a message","pro":true,"datasource":"files"},{"name":"sender.phone.number","visible":true,"type":"keyword","desc":"Sender phone number extracted from the file if it is a message","pro":true,"datasource":"files"},{"name":"sender.phone.countryCode","visible":true,"type":"keyword","desc":"Country calling code of the sender phone number","pro":true,"datasource":"files"},{"name":"sender.phone.country","visible":true,"type":"keyword","desc":"ISO country of the sender phone number","pro":true,"datasource":"files"},{"name":"sender.phone.areaCode","visible":true,"type":"keyword","desc":"Area code of the sender phone number","pro":true,"datasource":"files"},{"name":"sender.phone.localNumber","visible":true,"type":"keyword","desc":"Local subscriber number of the sender phone number","pro":true,"datasource":"files"},{"name":"links.length","visible":true,"type":"integer","desc":"Number of links extracted from the file","pro":true,"datasource":"files"},{"name":"links.urls","visible":true,"type":"keyword","desc":"URLs extracted from the file","pro":true,"datasource":"files"},{"name":"links.domains","visible":true,"type":"domain","desc":"Domains of URLs extracted from the file","pro":true,"datasource":"files"},{"name":"labels","visible":true,"type":"keyword","desc":"High-level system labels","pro":true,"datasource":"files"},{"name":"user","visible":false,"type":"virtual","desc":"Files submitted by yourself (Can only be <code>me</code>)","datasource":"files","options":[{"value":"me","type":"exact"}]},{"name":"team","visible":false,"type":"virtual","desc":"Files submitted by any of your teams (Can only be <code>me</code>)","datasource":"files","options":[{"value":"me","type":"exact"}]}]}')}};const t={};function s(a){const r=t[a];if(void 0!==r)return r.exports;const i=t[a]={id:a,loaded:!1,exports:{}};return e[a].call(i.exports,i,i.exports,s),i.loaded=!0,i.exports}s.m=e,(()=>{const e=[];s.O=(t,a,r,i)=>{if(a){i=i||0;for(var n=e.length;n>0&&e[n-1][2]>i;n--)e[n]=e[n-1];return void(e[n]=[a,r,i])}let o=1/0;for(n=0;n<e.length;n++){let[a,r,i]=e[n],d=!0;for(var c=0;c<a.length;c++)(!1&i||o>=i)&&Object.keys(s.O).every(e=>s.O[e](a[c]))?a.splice(c--,1):(d=!1,i<o&&(o=i));if(d){e.splice(n--,1);const s=r();void 0!==s&&(t=s)}}return t}})(),s.d=(e,t)=>{if(Array.isArray(t))for(var a=0;a<t.length;){var r=t[a++],i=t[a++];s.o(e,r)?0===i&&a++:0===i?Object.defineProperty(e,r,{enumerable:!0,value:t[a++]}):Object.defineProperty(e,r,{enumerable:!0,get:i})}else for(var r in t)s.o(t,r)&&!s.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},s.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),s.r=e=>{Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}
1),Object.defineProperty(e,"__esModule",{value:!0})},s.nmd=e=>(e.paths=[],e.children||(e.children=[]),e),(()=>{const e={187:0};s.O.j=t=>0===e[t];const t=(t,a)=>{let[r,i,n]=a;var o,c,d=0;if(r.some(t=>0!==e[t])){for(o in i)s.o(i,o)&&(s.m[o]=i[o]);if(n)var l=n(s)}for(t&&t(a);d<r.length;d++)c=r[d],s.o(e,c)&&e[c]&&e[c][0](),e[c]=0;return s.O(l)},a=globalThis.webpackChunkurlscan_server||=[];a.forEach(t.bind(null,0)),a.push=t.bind(null,a.push.bind(a))})();let a=s.O(void 0,[338,172,142,692,70],()=>s(7132));a=s.O(a)})(); 2//# sourceMappingURL=search.3b34bcdb72085f73f508.js.map
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.