🚧

IoC scanning and dataset inclusion

Any IoC submitted or queried via the API will be scanned and added to the VirusTotal dataset, making it accessible to the community. Do not submit or query indicators containing sensitive, confidential, or personally identifiable information (PII).

IPs in VirusTotal can be reanalysed to refresh their verdicts, whois information, SSL certs, etc. This endpoint sends the IP to be (re)scanned and returns an analysis ID that can be used to retrieve the verdicts from the available vendors using the Analyses endpoint.

{
    "data": {
        "type": "analysis",
        "id": "i-f41d931c01fcee6c19e73200aa87ea5d8a8de5316c5288a8df869d31efa1d0fc-1715609875",
        "links": {
            "self": "https://www.virustotal.com/api/v3/analyses/i-f41d931c01fcee6c19e73200aa87ea5d8a8de5316c5288a8df869d31efa1d0fc-1715609875"
        }
    }
}