ScanMalware Feed
Supported by community
Adversary & Campaign Insights
Detection & Response Enablement
Overview
Imports URLs where a ScanMalware YARA rule fired, with rule name, category, severity and a link to the sandboxed report.
ScanMalware is a free sandboxed URL scanner. It renders a submitted URL in an instrumented headless browser, records the network, TLS, JavaScript and rendering behaviour, and publishes the result to a public archive of more than 549,000 scans.
This connector imports the URLs on which a ScanMalware YARA rule fired. Because every record has already matched a rule, the feed arrives triaged rather than as a raw URL list: each detection carries the rule name, its category, a severity and a confidence, and links back to the full sandboxed report.
The ScanMalware API is public and unauthenticated, so the connector works with no credential configured. An optional API key only raises the rate limit.