virustotal_api 0.4.1 → 0.5.4

data/lib/virustotal_api/domain.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+require_relative 'base'
+
+module VirustotalAPI
+  # A class for '/domains' API
+  class Domain < Base
+    # Find a domain.
+    #
+    # @param [String] domain The domain to search
+    # @param [String] api_key for virustotal
+    # @return [VirustotalAPI::Domain] Report Search Result
+    def self.find(domain, api_key)
+      report = perform("/domains/#{domain}", api_key)
+      new(report)
+    end
+  end
+end

data/lib/virustotal_api/exceptions.rb

@@ -3,4 +3,7 @@
 module VirustotalAPI
   class RateLimitError < RuntimeError
   end
+
+  class Unauthorized < RuntimeError
+  end
 end

data/lib/virustotal_api/file.rb

@@ -0,0 +1,48 @@
+# frozen_string_literal: true
+
+require_relative 'base'
+
+module VirustotalAPI
+  # A class for '/files' API
+  class File < Base
+    # Find a hash.
+    #
+    # @param [String] resource file as a md5/sha1/sha256 hash
+    # @param [String] api_key The key for virustotal
+    # @return [VirustotalAPI::File] Report Search Result
+    def self.find(resource, api_key)
+      report = perform("/files/#{resource}", api_key)
+      new(report)
+    end
+
+    # Upload a new file.
+    #
+    # @param [String] file_path for file to be sent for scan
+    # @param [String] api_key The key for virustotal
+    # @param [Hash] opts hash for additional options
+    # @return [VirusotalAPI::File] Report
+    def self.upload(file_path, api_key, opts = {})
+      filename = opts.fetch('filename') { ::File.basename(file_path) }
+      report = perform('/files', api_key, :post, filename: filename, file: ::File.open(file_path, 'r'))
+      new(report)
+    end
+
+    # Analyse a hash again.
+    #
+    # @param [String] resource file as a md5/sha1/sha256 hash
+    # @param [String] api_key The key for virustotal
+    # @return [VirustotalAPI::File] Report
+    def self.analyse(resource, api_key)
+      report = perform("/files/#{resource}/analyse", api_key, :post)
+      new(report)
+    end
+
+    # Check if the submitted hash is detected by an AV engine.
+    #
+    # @param [String] engine The engine to check.
+    # @return [Boolean] true if detected
+    def detected_by(engine)
+      report&.dig('data', 'attributes', 'last_analysis_results', engine, 'category') == 'malicious'
+    end
+  end
+end

data/lib/virustotal_api/group.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+require_relative 'base'
+
+module VirustotalAPI
+  # A class for '/groups' API
+  class Group < Base
+    # Find a Group.
+    #
+    # @param [String] group_id to find
+    # @param [String] api_key The key for virustotal
+    # @return [VirustotalAPI::User] Report
+    def self.find(group_id, api_key)
+      report = perform("/groups/#{group_id}", api_key)
+      new(report)
+    end
+  end
+end

data/lib/virustotal_api/ip.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+require_relative 'base'
+
+module VirustotalAPI
+  # A class for '/ip_addresses' API
+  class IP < Base
+    # Find an IP.
+    #
+    # @param [String] ip address The IP to find.
+    # @param [String] api_key The key for virustotal
+    # @return [VirustotalAPI::IPReport] Report
+    def self.find(ip, api_key)
+      report = perform("/ip_addresses/#{ip}", api_key)
+      new(report)
+    end
+  end
+end

data/lib/virustotal_api/uri.rb

@@ -1,5 +1,6 @@
 # frozen_string_literal: true
 
 module VirustotalAPI
-  URI = 'https://www.virustotal.com/vtapi/v2'
+  # The API base URI
+  URI = 'https://www.virustotal.com/api/v3'
 end

data/lib/virustotal_api/url.rb

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+require_relative 'base'
+
+module VirustotalAPI
+  # A class for '/urls' API
+  class URL < Base
+    # Find a URL.
+    #
+    # @param [String] resource as an ip/domain/url
+    # @param [String] api_key The key for virustotal
+    # @return [VirustotalAPI::URL] Report
+    def self.find(resource, api_key)
+      report = perform("/urls/#{url_identifier(resource)}", api_key)
+      new(report)
+    end
+
+    # Analyse a URL again.
+    #
+    # @param [String] resource as an ip/domain/url
+    # @param [String] api_key The key for virustotal
+    # @return [VirustotalAPI::URL] Report
+    def self.analyse(resource, api_key)
+      report = perform("/urls/#{url_identifier(resource)}/analyse", api_key, :post)
+      new(report)
+    end
+
+    # Upload a URL for detection.
+    #
+    # @param [String] resource as an ip/domain/url
+    # @param [String] api_key The key for virustotal
+    # @return [VirustotalAPI::URL] Report
+    def self.upload(resource, api_key)
+      report = perform('/urls', api_key, :post, url: resource)
+      new(report)
+    end
+  end
+end

data/lib/virustotal_api/user.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+require_relative 'base'
+
+module VirustotalAPI
+  # A class for '/users' API
+  class User < Base
+    # Find a User.
+    #
+    # @param [String] user_key with id or api_key
+    # @param [String] api_key The key for virustotal
+    # @return [VirustotalAPI::User] Report
+    def self.find(user_key, api_key)
+      report = perform("/users/#{user_key}", api_key)
+      new(report)
+    end
+  end
+end

data/lib/virustotal_api/version.rb

@@ -1,5 +1,6 @@
 # frozen_string_literal: true
 
 module VirustotalAPI
-  VERSION = '0.4.1'
+  # The GEM version
+  VERSION = '0.5.4'
 end

data/test/analysis_test.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+require './test/test_helper'
+
+class VirustotalAPIAnalysisTest < Minitest::Test
+  def setup
+    @url     = 'http://www.google.com'
+    @api_key = 'theapikey'
+  end
+
+  def test_todo
+    VCR.use_cassette('url_find') do
+      vtreport = VirustotalAPI::URL.find(@url, @api_key)
+
+      @id = vtreport.id
+      assert @id.is_a?(String)
+    end
+
+    VCR.use_cassette('analysis') do
+      analysis = VirustotalAPI::Analysis.find(@id, @api_key)
+
+      assert analysis.exists?
+      assert analysis.id.is_a?(String)
+    end
+  end
+end

data/test/base_test.rb

@@ -1,10 +1,10 @@
 # frozen_string_literal: true
 
-# rubocop:disable LineLength
 require './test/test_helper'
 
 class VirustotalAPIBaseTest < Minitest::Test
   def setup
+    @domain  = 'xpressco.za'
     @sha256  = '01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b'
     @api_key = 'testapikey'
   end
@@ -15,45 +15,40 @@ class VirustotalAPIBaseTest < Minitest::Test
 
   # Instance Method
   def test_api_uri_instance_method
-    base_uri = 'https://www.virustotal.com/vtapi/v2'
-    vt_base = VirustotalAPI::Base.new
+    base_uri = 'https://www.virustotal.com/api/v3'
+    vt_base = VirustotalAPI::Base.new(nil)
 
     assert vt_base.api_uri.is_a?(String)
-    assert vt_base.api_uri, base_uri
+    assert_equal base_uri, vt_base.api_uri
   end
 
   # Class Method
   def test_api_uri_class_method
-    base_uri = 'https://www.virustotal.com/vtapi/v2'
+    base_uri = 'https://www.virustotal.com/api/v3'
 
     assert VirustotalAPI::Base.api_uri.is_a?(String)
-    assert VirustotalAPI::Base.api_uri, base_uri
+    assert_equal base_uri, VirustotalAPI::Base.api_uri
   end
 
-  def test_parse_code_200
-    mock_response200 = Minitest::Mock.new
-    mock_response200.expect(:code, 200)
-    mock_response200.expect(:body, '{}')
+  def test_exists?
+    VCR.use_cassette('file_find') do
+      virustotal_report = VirustotalAPI::File.find(@sha256, @api_key)
 
-    assert VirustotalAPI::Base.parse(mock_response200), {}
+      assert virustotal_report.exists?
+    end
   end
 
-  def test_parse_code_204
-    mock_response204 = Minitest::Mock.new
-    mock_response204.expect(:code, 204)
-    mock_response204.expect(:body, '{}')
+  def test_not_exists?
+    VCR.use_cassette('file_not_found') do
+      virustotal_report = VirustotalAPI::File.find(@sha256, @api_key)
 
-    assert_raises VirustotalAPI::RateLimitError do
-      VirustotalAPI::Base.parse(mock_response204)
+      assert !virustotal_report.exists?
     end
-  end
 
-  # Test using FileReport
-  def test_exists?
-    VCR.use_cassette('report') do
-      virustotal_report = VirustotalAPI::FileReport.find(@sha256, @api_key)
+    VCR.use_cassette('domain_bad_request') do
+      virustotal_report = VirustotalAPI::Domain.find(@domain, @api_key)
 
-      assert virustotal_report.exists?, true
+      assert !virustotal_report.exists?
     end
   end
 end

data/test/domain_test.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require './test/test_helper'
+
+class VirustotalAPIDomainTest < Minitest::Test
+  def setup
+    @domain  = 'virustotal.com'
+    @api_key = 'testapikey'
+  end
+
+  def test_class_exists
+    assert VirustotalAPI::Domain
+  end
+
+  def test_report_response
+    VCR.use_cassette('domain') do
+      vtdomain_report = VirustotalAPI::Domain.find(@domain, @api_key)
+
+      # Make sure that the JSON was parsed
+      assert vtdomain_report.exists?
+      assert vtdomain_report.is_a?(VirustotalAPI::Domain)
+      assert vtdomain_report.report.is_a?(Hash)
+      assert vtdomain_report.id.is_a?(String)
+      assert vtdomain_report.report_url.is_a?(String)
+    end
+  end
+end

data/test/exceptions_test.rb

@@ -3,7 +3,29 @@
 require './test/test_helper'
 
 class RateLimitErrorTest < Minitest::Test
+  def setup
+    @sha256 = '01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b'
+    @api_key = 'testapikey'
+  end
+
   def test_class_exists
     assert VirustotalAPI::RateLimitError
+    assert VirustotalAPI::Unauthorized
+  end
+
+  def test_unauthorized
+    VCR.use_cassette('file_unauthorized') do
+      assert_raises VirustotalAPI::Unauthorized do
+        VirustotalAPI::File.find(@sha256, @api_key)
+      end
+    end
+  end
+
+  def test_rate_limit
+    VCR.use_cassette('file_rate_limit') do
+      assert_raises VirustotalAPI::RateLimitError do
+        VirustotalAPI::File.analyse(@sha256, @api_key)
+      end
+    end
   end
 end

data/test/file_test.rb

@@ -0,0 +1,63 @@
+# frozen_string_literal: true
+
+require './test/test_helper'
+
+class VirustotalAPIFileTest < Minitest::Test
+  def setup
+    @sha256    = '01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b'
+    @file_path = File.expand_path('test/fixtures/null_file')
+    @api_key   = 'testapikey'
+  end
+
+  def test_class_exists
+    assert VirustotalAPI::File
+  end
+
+  def test_report_response
+    VCR.use_cassette('file_find') do
+      vt_file_report = VirustotalAPI::File.find(@sha256, @api_key)
+
+      # Make sure that the JSON was parsed
+      assert vt_file_report.exists?
+      assert vt_file_report.is_a?(VirustotalAPI::File)
+      assert vt_file_report.report.is_a?(Hash)
+      assert vt_file_report.id.is_a?(String)
+      assert vt_file_report.report_url.is_a?(String)
+    end
+  end
+
+  def test_find
+    id        = '01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b'
+    permalink = "https://www.virustotal.com/api/v3/files/#{id}"
+
+    VCR.use_cassette('file_find') do
+      vt_file_report = VirustotalAPI::File.find(@sha256, @api_key)
+
+      assert_equal permalink, vt_file_report.report_url
+      assert_equal id, vt_file_report.id
+      assert vt_file_report.detected_by('Avira')
+      assert !vt_file_report.detected_by('Acronis')
+      assert !vt_file_report.detected_by('Yeyeyeye') # not present in file
+    end
+  end
+
+  def test_upload
+    VCR.use_cassette('file_upload') do
+      vt_file_upload = VirustotalAPI::File.upload(@file_path, @api_key)
+
+      assert vt_file_upload.exists?
+      assert vt_file_upload.report.is_a?(Hash)
+      assert vt_file_upload.id.is_a?(String)
+    end
+  end
+
+  def test_analyse
+    VCR.use_cassette('file_analyse') do
+      vt_file_analyse = VirustotalAPI::File.analyse(@sha256, @api_key)
+
+      assert vt_file_analyse.exists?
+      assert vt_file_analyse.report.is_a?(Hash)
+      assert vt_file_analyse.id.is_a?(String)
+    end
+  end
+end

data/test/fixtures/analysis.yml

@@ -0,0 +1,544 @@
+---
+http_interactions:
+- request:
+    method: get
+    uri: https://www.virustotal.com/api/v3/analyses/u-a354494a73382ea0b4bc47f4c9e8d6c578027cd4598196dc88f05a22b5817293-1599122231
+    body:
+      encoding: US-ASCII
+      string: ''
+    headers:
+      Accept:
+      - "*/*"
+      User-Agent:
+      - rest-client/2.1.0 (linux-gnu x86_64) ruby/2.5.1p57
+      X-Apikey:
+      - theapikey
+      Content-Length:
+      - '0'
+      Content-Type:
+      - application/x-www-form-urlencoded
+      Accept-Encoding:
+      - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
+      Host:
+      - www.virustotal.com
+  response:
+    status:
+      code: 200
+      message: OK
+    headers:
+      Cache-Control:
+      - no-cache
+      Content-Type:
+      - application/json; charset=utf-8
+      X-Cloud-Trace-Context:
+      - ee845ce2e3e28aee8c7f2c8e2de417cd
+      Date:
+      - Thu, 03 Sep 2020 08:43:03 GMT
+      Server:
+      - Google Frontend
+      Content-Length:
+      - '18600'
+    body:
+      encoding: UTF-8
+      string: |-
+        {
+            "data": {
+                "attributes": {
+                    "date": 1599122231,
+                    "results": {
+                        "ADMINUSLabs": {
+                            "category": "harmless",
+                            "engine_name": "ADMINUSLabs",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "AegisLab WebGuard": {
+                            "category": "harmless",
+                            "engine_name": "AegisLab WebGuard",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "AlienVault": {
+                            "category": "harmless",
+                            "engine_name": "AlienVault",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Antiy-AVL": {
+                            "category": "harmless",
+                            "engine_name": "Antiy-AVL",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Artists Against 419": {
+                            "category": "harmless",
+                            "engine_name": "Artists Against 419",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "AutoShun": {
+                            "category": "undetected",
+                            "engine_name": "AutoShun",
+                            "method": "blacklist",
+                            "result": "unrated"
+                        },
+                        "Avira": {
+                            "category": "harmless",
+                            "engine_name": "Avira",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "BADWARE.INFO": {
+                            "category": "harmless",
+                            "engine_name": "BADWARE.INFO",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Baidu-International": {
+                            "category": "harmless",
+                            "engine_name": "Baidu-International",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "BitDefender": {
+                            "category": "harmless",
+                            "engine_name": "BitDefender",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "BlockList": {
+                            "category": "harmless",
+                            "engine_name": "BlockList",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Blueliv": {
+                            "category": "harmless",
+                            "engine_name": "Blueliv",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "CINS Army": {
+                            "category": "harmless",
+                            "engine_name": "CINS Army",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "CLEAN MX": {
+                            "category": "harmless",
+                            "engine_name": "CLEAN MX",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "CRDF": {
+                            "category": "harmless",
+                            "engine_name": "CRDF",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Certego": {
+                            "category": "harmless",
+                            "engine_name": "Certego",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Comodo Valkyrie Verdict": {
+                            "category": "harmless",
+                            "engine_name": "Comodo Valkyrie Verdict",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "CyRadar": {
+                            "category": "harmless",
+                            "engine_name": "CyRadar",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Cyan": {
+                            "category": "undetected",
+                            "engine_name": "Cyan",
+                            "method": "blacklist",
+                            "result": "unrated"
+                        },
+                        "CyberCrime": {
+                            "category": "harmless",
+                            "engine_name": "CyberCrime",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Cyren": {
+                            "category": "harmless",
+                            "engine_name": "Cyren",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "DNS8": {
+                            "category": "harmless",
+                            "engine_name": "DNS8",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Dr.Web": {
+                            "category": "harmless",
+                            "engine_name": "Dr.Web",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "ESET": {
+                            "category": "harmless",
+                            "engine_name": "ESET",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "EmergingThreats": {
+                            "category": "harmless",
+                            "engine_name": "EmergingThreats",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Emsisoft": {
+                            "category": "harmless",
+                            "engine_name": "Emsisoft",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "EonScope": {
+                            "category": "harmless",
+                            "engine_name": "EonScope",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Feodo Tracker": {
+                            "category": "harmless",
+                            "engine_name": "Feodo Tracker",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Forcepoint ThreatSeeker": {
+                            "category": "harmless",
+                            "engine_name": "Forcepoint ThreatSeeker",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Fortinet": {
+                            "category": "harmless",
+                            "engine_name": "Fortinet",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "FraudScore": {
+                            "category": "harmless",
+                            "engine_name": "FraudScore",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "G-Data": {
+                            "category": "harmless",
+                            "engine_name": "G-Data",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Google Safebrowsing": {
+                            "category": "harmless",
+                            "engine_name": "Google Safebrowsing",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "GreenSnow": {
+                            "category": "harmless",
+                            "engine_name": "GreenSnow",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Hoplite Industries": {
+                            "category": "harmless",
+                            "engine_name": "Hoplite Industries",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "IPsum": {
+                            "category": "harmless",
+                            "engine_name": "IPsum",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "K7AntiVirus": {
+                            "category": "harmless",
+                            "engine_name": "K7AntiVirus",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Kaspersky": {
+                            "category": "harmless",
+                            "engine_name": "Kaspersky",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Lumu": {
+                            "category": "undetected",
+                            "engine_name": "Lumu",
+                            "method": "blacklist",
+                            "result": "unrated"
+                        },
+                        "MalSilo": {
+                            "category": "harmless",
+                            "engine_name": "MalSilo",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Malware Domain Blocklist": {
+                            "category": "harmless",
+                            "engine_name": "Malware Domain Blocklist",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "MalwareDomainList": {
+                            "category": "harmless",
+                            "engine_name": "MalwareDomainList",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "MalwarePatrol": {
+                            "category": "harmless",
+                            "engine_name": "MalwarePatrol",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Malwared": {
+                            "category": "harmless",
+                            "engine_name": "Malwared",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Netcraft": {
+                            "category": "undetected",
+                            "engine_name": "Netcraft",
+                            "method": "blacklist",
+                            "result": "unrated"
+                        },
+                        "NotMining": {
+                            "category": "undetected",
+                            "engine_name": "NotMining",
+                            "method": "blacklist",
+                            "result": "unrated"
+                        },
+                        "Nucleon": {
+                            "category": "harmless",
+                            "engine_name": "Nucleon",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "OpenPhish": {
+                            "category": "harmless",
+                            "engine_name": "OpenPhish",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "PREBYTES": {
+                            "category": "harmless",
+                            "engine_name": "PREBYTES",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "PhishLabs": {
+                            "category": "undetected",
+                            "engine_name": "PhishLabs",
+                            "method": "blacklist",
+                            "result": "unrated"
+                        },
+                        "Phishing Database": {
+                            "category": "harmless",
+                            "engine_name": "Phishing Database",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Phishtank": {
+                            "category": "harmless",
+                            "engine_name": "Phishtank",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Quick Heal": {
+                            "category": "harmless",
+                            "engine_name": "Quick Heal",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Quttera": {
+                            "category": "harmless",
+                            "engine_name": "Quttera",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Rising": {
+                            "category": "harmless",
+                            "engine_name": "Rising",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "SCUMWARE.org": {
+                            "category": "harmless",
+                            "engine_name": "SCUMWARE.org",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Sangfor": {
+                            "category": "harmless",
+                            "engine_name": "Sangfor",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "SecureBrain": {
+                            "category": "harmless",
+                            "engine_name": "SecureBrain",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Snort IP sample list": {
+                            "category": "harmless",
+                            "engine_name": "Snort IP sample list",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Sophos": {
+                            "category": "harmless",
+                            "engine_name": "Sophos",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Spam404": {
+                            "category": "harmless",
+                            "engine_name": "Spam404",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Spamhaus": {
+                            "category": "harmless",
+                            "engine_name": "Spamhaus",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "StopBadware": {
+                            "category": "undetected",
+                            "engine_name": "StopBadware",
+                            "method": "blacklist",
+                            "result": "unrated"
+                        },
+                        "StopForumSpam": {
+                            "category": "harmless",
+                            "engine_name": "StopForumSpam",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Sucuri SiteCheck": {
+                            "category": "harmless",
+                            "engine_name": "Sucuri SiteCheck",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Tencent": {
+                            "category": "harmless",
+                            "engine_name": "Tencent",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "ThreatHive": {
+                            "category": "harmless",
+                            "engine_name": "ThreatHive",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Threatsourcing": {
+                            "category": "harmless",
+                            "engine_name": "Threatsourcing",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Trustwave": {
+                            "category": "harmless",
+                            "engine_name": "Trustwave",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "URLhaus": {
+                            "category": "harmless",
+                            "engine_name": "URLhaus",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "VX Vault": {
+                            "category": "harmless",
+                            "engine_name": "VX Vault",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Virusdie External Site Scan": {
+                            "category": "harmless",
+                            "engine_name": "Virusdie External Site Scan",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Web Security Guard": {
+                            "category": "harmless",
+                            "engine_name": "Web Security Guard",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "Yandex Safebrowsing": {
+                            "category": "harmless",
+                            "engine_name": "Yandex Safebrowsing",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "ZeroCERT": {
+                            "category": "harmless",
+                            "engine_name": "ZeroCERT",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "desenmascara.me": {
+                            "category": "harmless",
+                            "engine_name": "desenmascara.me",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "malwares.com URL checker": {
+                            "category": "harmless",
+                            "engine_name": "malwares.com URL checker",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "securolytics": {
+                            "category": "harmless",
+                            "engine_name": "securolytics",
+                            "method": "blacklist",
+                            "result": "clean"
+                        },
+                        "zvelo": {
+                            "category": "harmless",
+                            "engine_name": "zvelo",
+                            "method": "blacklist",
+                            "result": "clean"
+                        }
+                    },
+                    "stats": {
+                        "harmless": 72,
+                        "malicious": 0,
+                        "suspicious": 0,
+                        "timeout": 0,
+                        "undetected": 7
+                    },
+                    "status": "completed"
+                },
+                "id": "u-a354494a73382ea0b4bc47f4c9e8d6c578027cd4598196dc88f05a22b5817293-1599122231",
+                "type": "analysis"
+            },
+            "meta": {
+                "url_info": {
+                    "id": "a354494a73382ea0b4bc47f4c9e8d6c578027cd4598196dc88f05a22b5817293",
+                    "url": "http://virustotal.com/"
+                }
+            }
+        }
+  recorded_at: Thu, 03 Sep 2020 08:43:03 GMT
+recorded_with: VCR 6.0.0