ScanMalware.com

Advanced Search

Query 658K+ scans with 130+ filters using SMQL (ScanMalware Query Language)

List domains by IP, nameserver or certificate name, including unscanned ones →

field:value filterAND OR NOT boolean-field:value negationfield:>value comparisonfield:a..b rangehas:feature existssort:newest sort( ) groupingfield:(a OR b) any of

Example Queries

Syntax Reference

# Bare text search (URL, title)
paypal login
# Filters
field:value field:"value with spaces"
field:>value field:<value field:>=value field:<=value
field:value1..value2 # range
domain:*.paypal.com # wildcard
# Boolean operators
technology:WordPress AND country:RU
country:US OR country:DE
NOT domain:google.com # or -domain:google.com
# Grouping
(country:US OR country:DE) AND has:malware
# Several values of one field (any of; write AND to require all)
domain:(paypal.com OR paypal.me) ip:(1.1.1.1 8.8.8.8)
technology:(WordPress AND WooCommerce)
# Defanged indicators are read as written
domain:paypal[.]com hxxps://evil[.]example/login
# Existence checks
has:malware has:certificate has:ioc has:pcap
# Dates: absolute or relative
submitted:>last7d submitted:>2024-01-01 submitted:2024-01..2024-06

Available Filters (137 filters)

Existence Checks (has:)