Stats
Actions
Tags
From cybersec-toolkit
Analyzes suspicious URLs via URLScan.io web/API: screenshots, DOM, HTTP logs, JS behavior, network connections for safe phishing/threat investigations.
How this skill is triggered — by the user, by Claude, or both
Slash command
/cybersec-toolkit:analyzing-malicious-url-with-urlscanThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
URLScan.io is a free service for scanning and analyzing suspicious URLs. It captures screenshots, DOM content, HTTP transactions, JavaScript behavior, and network connections of web pages in an isolated environment. This skill covers using URLScan's web interface and API to investigate phishing URLs, credential harvesting pages, and malicious redirects without exposing the analyst's system to r...
URLScan.io is a free service for scanning and analyzing suspicious URLs. It captures screenshots, DOM content, HTTP transactions, JavaScript behavior, and network connections of web pages in an isolated environment. This skill covers using URLScan's web interface and API to investigate phishing URLs, credential harvesting pages, and malicious redirects without exposing the analyst's system to risk.
Web: Navigate to https://urlscan.io and submit the suspicious URL
API: POST https://urlscan.io/api/v1/scan/
Header: API-Key: your-api-key
Body: {"url": "https://suspicious-url.com", "visibility": "private"}
Use the scripts/process.py to automate URL scanning, extract IOCs, and cross-reference with VirusTotal, PhishTank, and Google Safe Browsing.
npx claudepluginhub 26zl/cybersec-toolkit --plugin cybersec-toolkitScans and analyzes suspicious URLs using URLScan.io, capturing screenshots, DOM, network requests, and JavaScript behavior to investigate phishing and malicious redirects safely.
Scans and analyzes suspicious URLs using URLScan.io API and web interface to detect phishing, capture screenshots, DOM, HTTP transactions, and extract IOCs safely.
Analyzes suspicious URLs using URLScan.io in isolated environments, capturing screenshots, DOM, HTTP requests, JS behavior, and extracting IOCs for phishing and malware investigation.