You can submit one or more public URLs for scanning using the /urls endpoint. Each URL is opened by the detection engine, which attempts to detonate the file or webpage, and checks for malicious behavior. A detailed report of all of the artifacts, such as files, images, executables, nested URLs, and so on, contained within the website is created, along with a malicious or non-malicious verdict. You can submit a maximum of 10 URLs in each call to /urls.
Each call to the /urls endpoint counts against your subscription. For example, if your subscription is for 100 submissions per month, and you submit 10 URLs of the form www.example.com, this counts as one submission. If one or more of those URLs contains a file to download, for example www.example.com/a.exe, this counts as an extra submission. Each URL you submit with analysis_mode=live counts as one submission.