01
Observe
Capture redirects, requests, responses, scripts, downloads, and screenshots in an isolated browser environment.
URLQUERY DOCUMENTATION
From URL behavior to threat intelligence.Evidence for every pivot.
Investigate reports, infrastructure, artifacts, and relationships on urlquery.net, with the HTTP API, or through MCP tools for agents.
New to urlquery? Read the introduction →ENDPOINTS
https://api.urlquery.net/public/v2https://mcp.urlquery.net/mcpCTI WORKFLOW
Make web threat activity observable, connected, and defensible.
02
Correlate
Connect reports, infrastructure, fingerprints, artifacts, and relationships across historical observations.
03
Assess
Build findings from preserved evidence, distinguish observations from judgments, and communicate confidence and gaps.
START HERE
Pick what you want to do.
ANALYZE A URLSubmit a URL and read its reportSubmitting URLs →USE THE APIScript submissions, reports, and searchAPI quickstart →CONNECT AN AGENTGive agents bounded research toolsThreat research with MCP →PIVOT ON INFRASTRUCTUREFollow hosts, certificates, and redirectsHost Profile →WRITE DETECTIONSCatch the next kit with your own YARA rulesYARA rules →SEARCH REPORTSTurn indicators into report populationsSearch syntax →