diff --git a/modules/datasets/urlscan.py b/modules/datasets/urlscan.py
new file mode 100644
index 0000000..cbc7154
--- /dev/null
+++ b/modules/datasets/urlscan.py
@@ -0,0 +1,45 @@
+from common.query import Query
+
+
+class Urlscan(Query):
+    def __init__(self, domain):
+        Query.__init__(self)
+        self.domain = domain
+        self.module = 'Dataset'
+        self.source = 'UrlscanQuery'
+
+    def query(self):
+        """
+        向接口查询子域并做子域匹配
+        """
+        self.header = self.get_header()
+        self.proxy = self.get_proxy(self.source)
+        url = 'https://urlscan.io/api/v1/search/'
+        params = {'q': 'domain:' + self.domain}
+        resp = self.get(url, params)
+        self.subdomains = self.collect_subdomains(resp)
+
+    def run(self):
+        """
+        类执行入口
+        """
+        self.begin()
+        self.query()
+        self.finish()
+        self.save_json()
+        self.gen_result()
+        self.save_db()
+
+
+def run(domain):
+    """
+    类统一调用入口
+
+    :param str domain: 域名
+    """
+    query = Urlscan(domain)
+    query.run()
+
+
+if __name__ == '__main__':
+    run('sangfor.com')