VirusTotal icon

VirusTotal

Threat intelligence service for scanning files, URLs, and domains for malware.

5 searches7 actionsPollingAuth: API key

AI-assisted documentation5 min read

This documentation is compiled from our integration source code, internal specs for VirusTotal, its official API documentation and anonymized requests logs we collect from our support team[2].

Open VirusTotal on WEXTL →

To use VirusTotal on WEXTL you need an active account and an API access token from your account settings.[3]

  • API KeypasswordRequired

    Your API key can be found in your account user menu (right side dropdown on profile icon).

    [1]
  1. Log in to your WEXTL account, add the VirusTotal node module to your workflow, and click Create new credential.
  2. Optional: In the Credential name field, enter a name for the credential.
  3. Enter the authentication credentials you copied from your VirusTotal account, or follow the on-screen instructions to create the credential.
  4. If prompted, authenticate your account and confirm access.
  5. If you want to make changes to your credential in the future, follow the steps in Manage credentials →

Notes

Credentials are org-scoped; share them with teammates from the Credentials picker on any of its nodes.For detailed information on connecting an application, see Connect an application →

Get a Domain ReportAction
Input fields[3]
FieldType
DomainRequired
text
Output fields[3]
FieldType
Attributesobject
Categoriesobject
Creation Datenumber
Faviconobject
Jarmtext
Last Analysis Datenumber
Last Analysis Resultsobject
Last Analysis Statsobject
Last Dns Recordsarray
Last Dns Records Datenumber
Last Https Certificateobject
IDtext
Linksobject
Selftext
Typetext
Get a File ReportAction
Input fields[3]
FieldType
File IDRequired
text
Output fields[3]
FieldType
Attributesobject
Capabilities Tagsarray
Creation Datenumber
Crowdsourced Ids Resultsarray
Crowdsourced Ids Statsobject
Crowdsourced Yara Resultsarray
Downloadableboolean
First Submission Datenumber
Last Analysis Datenumber
Last Analysis Resultsobject
Last Analysis Statsobject
IDtext
Linksobject
Selftext
Typetext
Get an Analysis ResultsAction
Input fields[3]
FieldType
Analysis IDRequired
text
Output fields[3]
FieldType
Attributesobject
Datenumber
Resultsobject
Statsobject
Statustext
IDtext
Typetext
Get an IP Address ReportAction
Input fields[3]
FieldType
IP AddressRequired
text
Output fields[3]
FieldType
Attributesobject
As Ownertext
Asnnumber
Continenttext
Countrytext
Jarmtext
Last Analysis Datenumber
Last Analysis Resultsobject
Last Analysis Statsobject
Last Modification Datenumber
Networktext
IDtext
Linksobject
Selftext
Typetext
Get an URL ReportAction
Input fields[3]
FieldType
URLRequired
url
Output fields[3]
FieldType
Attributesobject
Categoriesobject
Faviconobject
First Submission Datenumber
Has Contentboolean
Html Metaobject
Last Analysis Datenumber
Last Analysis Resultsobject
Last Analysis Statsobject
Last Final Urltext
Last Http Response Codenumber
IDtext
Linksobject
Selftext
Typetext
Make an API Calluniversal
Input fields[3]
FieldType
URLRequired
text
MethodRequired
choice
Headersarray
Headerobject
Query Stringarray
Parameterobject
Bodytext
Output fields[3]
FieldType
Bodytext
Headersobject
Status codenumber
Request a Domain RescanAction
Input fields[3]
FieldType
DomainRequired
text
Output fields[3]
FieldType
Typetext
IDtext
Linksobject
Selftext
Request a File RescanAction
Input fields[3]
FieldType
File IDRequired
text
Output fields[3]
FieldType
Typetext
IDtext
Linksobject
Selftext
Request an IP RescanAction
Input fields[3]
FieldType
IP AddressRequired
text
Output fields[3]
FieldType
Typetext
IDtext
Linksobject
Selftext
Request an URL RescanAction
Input fields[3]
FieldType
URLRequired
url
Output fields[3]
FieldType
Typetext
IDtext
Linksobject
Selftext
Scan an URLAction
Input fields[3]
FieldType
URLRequired
url
Output fields[3]
FieldType
Analysis IDtext
Upload a FileAction
Input fields[3]
FieldType
NameRequired
text
DataRequired
text
Passwordtext
Output fields[3]
FieldType
Typetext
IDtext
Linksobject
Selftext

Look for VirusTotal templates in the WEXTL template library.

Browse templates →
  1. WEXTL® VirusTotal Source Code connector implementation.
  2. Our users use cases and automations.
  3. Official API Documentation for VirusTotal.
  4. WEXTL® visual workflow builder data.

Last updated: Jul 24, 2026 18:13