vt_url.md
September 12, 2025 ยท View on GitHub
vt url
Get information about URLs
Synopsis
Get information about one or more URLs.
This command receives one or more URLs and returns information about them. URL hashes as returned in the "object_id" field are also accepted. The information about each URL is returned in the same order as the URLs are passed to the command.
If the command receives a single hypen (-) the URLs are read from the standard input, one per line.
vt url [url]... [flags]
Examples
vt url https://www.virustotal.com
vt url f1177df4692356280844e1d5af67cc4a9eccecf77aa61c229d483b7082c70a8e
cat list_of_urls | vt url -
Options
-x, --exclude strings exclude fields matching the provided pattern
-h, --help help for url
-I, --identifiers-only print identifiers only
-i, --include strings include fields matching the provided pattern (default [**])
-t, --threads int number of threads working in parallel (default 5)
Options inherited from parent commands
-k, --apikey string API key
--format string Output format (yaml/json/csv) (default "yaml")
-s, --silent Silent or quiet mode. Do not show progress meter
-v, --verbose verbose output
SEE ALSO
- vt - A command-line tool for interacting with VirusTotal
- vt url analyses - Analyses for the URL.
- vt url associations - Returns the collections related to the IOC.
- vt url campaigns - IOC's related campaigns.
- vt url collections - Returns the collections related to the IOC.
- vt url comments - Comments for the URL.
- vt url communicating_files - Files that communicate with this url when they are executed.
- vt url contacted_domains - Distinct domains from which the URL loads some kind of resource.
- vt url contacted_ips - Distinct IP addresses from which the URL loads some kind of resource.
- vt url downloaded_files - Interesting files downloaded from the URL.
- vt url embedded_js_files - JS files embedded in a URL.
- vt url graphs - Graphs that include the URL.
- vt url http_response_contents - HTTP response contents from the URL.
- vt url last_serving_ip_address - Last IP address that served the URL.
- vt url malware_families - IOC's related malware families.
- vt url memory_pattern_parents - Files having a domain as string on memory during sandbox execution.
- vt url network_location - Domain or IP address for the URL.
- vt url parent_resource_urls - Returns the URLs where this URL has been loaded as resource.
- vt url redirecting_urls - URLs that redirected to the given URL.
- vt url redirects_to - URLs that this url redirects to.
- vt url references - Returns the References related to the URL.
- vt url referrer_files - Files containing the URL.
- vt url referrer_urls - URLs that refer to the given URL.
- vt url related_collections - Returns the Collections of the parent Domains or IPs of this URL.
- vt url related_comments - Comments for the URL.
- vt url related_references - Returns the direct and related references containing this URL.
- vt url related_reports - IOC's related reports
- vt url related_threat_actors - IOC's related threat actors.
- vt url relationships - Get all relationships.
- vt url reports - IOC's related reports.
- vt url software_toolkits - IOC's related software toolkits.
- vt url submissions - Submissions for the URL.
- vt url urls_related_by_tracker_id - URLs that share the same tracker ID.
- vt url user_votes - Item's votes made by current signed-in user.
- vt url votes - Item's votes.
- vt url vulnerabilities - IOC's related vulnerabilities.