assess_indicator
Aggregate recent urlscan.io scans to build a reputation summary for any domain, IP, URL, or hash, showing maliciousness, verdict scores, and hosting spread to help decide if it needs attention.
Instructions
Build a reputation picture for a domain, IP, URL or SHA-256 hash.
Aggregates every recent urlscan.io scan of the indicator into one assessment: how often it has been scanned, how many scans were flagged malicious, the highest and mean verdict scores, which tags and brands recur, and the hosting spread.
This is analysis on top of the raw API rather than a passthrough — it answers "should I care about this?" instead of returning a scan document. Read the caveats field before acting on the result.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| days | No | ||
| indicator | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||