# ScanMalware.com

> Free online URL and website security scanner. Analyze websites for malware, phishing, JavaScript threats, and security vulnerabilities.

## What is ScanMalware?

ScanMalware.com is a comprehensive website security analysis platform similar to urlscan.io. It scans URLs using headless Chrome browsers in isolated containers and provides detailed security analysis including:

- Screenshot capture and visual analysis
- JavaScript fingerprinting and obfuscation detection
- Malware pattern matching with YARA rules
- Technology detection (frameworks, CMS, libraries)
- TLS/SSL certificate analysis
- Network traffic inspection
- WHOIS/RDAP domain information
- Google Safe Browsing checks

## Main Features

### URL Scanning
Submit any URL for comprehensive security analysis. Scans typically complete in 30-60 seconds.

### JavaScript Analysis
Deep analysis of JavaScript files including:
- SHA-256 and TLSH fuzzy hashing
- CodeBERT/GraphCodeBERT ML embeddings for similarity detection
- Obfuscation detection and classification
- Library detection (React, jQuery, Vue, etc.)
- Bundle analysis (Webpack, Rollup, etc.)
- YARA pattern matching for malware signatures

### Security Verdicts
Automated security assessment based on:
- Known malware patterns
- Phishing indicators
- Suspicious JavaScript behavior
- Certificate issues
- Domain reputation

## Key Pages

- /: Homepage with URL submission form
- /result/{scan_id}: Detailed scan results
- /script/{script_id}: JavaScript file analysis
- /search: Search across all scans
- /blog: Security research articles
- /api-docs: API documentation

## API Access

RESTful API available at https://scanmalware.com/api

Key endpoints:
- POST /api/v1/scan - Submit URL for scanning
- GET /api/v1/result/{scan_id} - Get scan results
- GET /api/v1/search - Search scans
- GET /api/v1/jsfingerprints/{id} - JavaScript analysis data

Full API documentation: https://scanmalware.com/api/docs

## Data We Provide

For each scanned URL:
- Screenshot (PNG)
- HTML content
- Network requests and responses
- JavaScript files with fingerprints
- Detected technologies
- Security findings
- TLS certificate details
- WHOIS/RDAP data
- IP geolocation

## Contact

Website: https://scanmalware.com
Twitter: @scanmalware
Email: Available via /contact page

## Optional

For detailed technical documentation, see our blog at https://scanmalware.com/blog