Live Scan results

Learn how to interpret Live Scan results to quickly identify issues and security risks.

Live Scan results provide real-time visibility into how a website behaves across global regions and platforms.

View scan results

When a Live Scan completes, the Results table displays DNS and host response outcomes for the scanned domain/URL.

Live Scan results screen

ColumnWhat it means
KeyThe domain or IP queried during the scan
TypeThe record or response (for example, A, NS, NX)
ValueThe resolved indicator (IP, hostname, etc.)
First Seen / Last SeenWhen the indicator was observed
RegionThe geographic origin of the query

Review returned data

Use the tabs at the top of the Results table to examine different data types related to the scanned domain/URL.

  • Resolutions: Primary DNS results
  • Recursive Resolutions: Additional resolution paths discovered during recursion
  • Host Connections: TCP connections created by scanned hosts
  • Host Responses: HTTP status codes, redirects, and behaviors

You can click Export to download the current view.

Inspect indicators

  1. Click on an indicator to immediately execute a Core Search
  2. Click any cell containing an indicator in the Results table to open a sidebar and gather additional intelligence.

This panel can include:

Reputational factors

  • Malware associations
  • Known malicious behavior
  • Intel source references

Indicator usage

  • How the indicator appears in DNS hierarchy (FQDN / Domain / ETLD)
  • Hosting ownership (ASN)
  • CIDR allocations

Infrastructure location

  • Approximate hosting location
  • Geographic risk considerations

External intelligence pivots

  • VirusTotal
  • URLScan
  • Google
  • crt.sh
👍

Tip

Look out for a red asterisk icon underneath any indicator with a poor reputation score.

Exporting results

You can export results for investigation, reporting, or offline analysis.

  1. Select Export at the top of the table
  2. Under Data Format, choose:
    • JSON
    • CSV
  3. Under Data to Export, choose one of the below options:
    • Export Current Page downloads only the visible results
    • Export All Entries downloads all matching domains across pages
    • Export with Selected Filters applies your active filters to the export
  4. Select Download to save the file

Viewing historical results

The Historical Scans tab allows you to view thew details of all the scans initiated under your user account.

To revisit a Live Scan dataset, click on a result from the table.

Historical scan results