Documentation
Search Filters
Query your attack surface with precision. Combine filters to discover assets across domains, networks, cloud infrastructure, certificates, and more.
40+
Search filters
7
Filter categories
REST
API access
01 / General Filters
Core search filters
Domains, hosts, technologies, and basic asset attributes.
| Filter | Description | Examples |
|---|---|---|
| domain | Domain (required for all filters) | kaspersky.com domain:kaspersky.com |
| ip | IP address associated with the asset | ip:8.8.8.8 domain:kaspersky.com |
| tech | Identified technologies and frameworks | tech:drupal domain:kaspersky.com |
| host | Specific host or asset | host:ecommerce.kaspersky.com domain:kaspersky.com |
| subdomain | Subdomain matching | subdomain:video.kaspersky.com domain:kaspersky.com |
| tld | Top-level domain | tld:com domain:kaspersky.com |
| tag | Asset category tags | tag:cdn domain:kaspersky.com |
| is_dos_defense | Assets behind DDoS prevention (Akamai, CloudFlare, Sucuri, etc.) | is_dos_defense:true domain:kaspersky.com |
02 / Network & DNS Filters
Ports, connectivity, and DNS records
| Filter | Description | Examples |
|---|---|---|
| port | Network port number | port:80 domain:kaspersky.com |
| has_private_ip | Has private IP address associated with the asset | has_private_ip:true domain:kaspersky.com |
| has_ipv6 | Has IPv6 address | has_ipv6:true domain:kaspersky.com |
| is_live | Is the asset currently live | is_live:true domain:kaspersky.com |
| is_resolvable | Is the asset resolvable via DNS | is_resolvable:true domain:kaspersky.com |
| dns_a | Type A DNS records |
dns_a:1.1.1.1 domain:kaspersky.com |
| dns_aaaa | Type AAAA DNS records (IPv6) |
dns_aaaa:2607:f8b0:... domain:kaspersky.com |
| dns_cname | Type CNAME DNS records |
dns_cname:blog.kaspersky.com domain:kaspersky.com |
| dns_mx | Type MX DNS records (mail servers) |
dns_mx:mail.kaspersky.com domain:kaspersky.com |
| dns_txt | Type TXT DNS records |
dns_txt:FullHuntDNS domain:kaspersky.com |
| dns_ptr | Type PTR DNS records (reverse DNS) |
dns_ptr:255.2.0.192... domain:kaspersky.com |
| dns_ns | Type NS DNS records (name servers) |
dns_ns:ns1.kaspersky.com domain:kaspersky.com |
03 / HTTP Filters
Headers, responses, and web content
| Filter | Description | Examples |
|---|---|---|
| http_title | HTTP page title | http_title:Nginx domain:kaspersky.com |
| http_status_code | HTTP status code | http_status_code:302 domain:kaspersky.com |
| http_favicon_hash | HTTP favicon MD5 hash | http_favicon_hash:9888t96... domain:kaspersky.com |
04 / Geographic Filters
Country, city, and ASN
| Filter | Description | Examples |
|---|---|---|
| country_code | Country code (ISO 3166-1 alpha-2) | country_code:US domain:kaspersky.com |
| country | Country (same as country_code) |
country:US domain:kaspersky.com |
| city | City location | city:ashburn domain:kaspersky.com |
| asn | Autonomous System Number | asn:123124 domain:kaspersky.com |
05 / Cloud Filters
Cloud providers and regions
| Filter | Description | Examples |
|---|---|---|
| is_cloud | Asset running on cloud infrastructure | is_cloud:true domain:kaspersky.com |
| cloud_provider | Cloud provider name (AWS, Azure, GCP, etc.) | cloud_provider:Linode domain:kaspersky.com |
| cloud_region | Cloud provider region | cloud_region:us-ca domain:kaspersky.com |
06 / Technology Filters
Products, services, and technology stacks
| Filter | Description | Examples |
|---|---|---|
| product | Identified product or software | product:wordpress domain:kaspersky.com |
| service | Identified service type | service:http domain:kaspersky.com |
07 / Certificate Filters
SSL/TLS certificate attributes
| Filter | Description | Examples |
|---|---|---|
| cert_issuer_common_name | Certificate issuer common name | cert_issuer_common_name:"DigiCert..." |
| cert_issuer_organization | Certificate issuer organization | cert_issuer_organization:"DigiCert Inc" |
| cert_issuer_country | Certificate issuer country | cert_issuer_country:US domain:kaspersky.com |
| cert_issuer_serial_number | Certificate issuer serial number | cert_issuer_serial_number:05:e2... |
| cert_signature_algorithm | Certificate signature algorithm | cert_signature_algorithm:SHA256-RSA |
| cert_subject_common_name | Certificate subject common name | cert_subject_common_name:*.cloud... |
| cert_subject_country | Certificate subject country | cert_subject_country:CH domain:kaspersky.com |
| cert_subject_province | Certificate subject province/state | cert_subject_province:Zurich domain:kaspersky.com |
| cert_subject_locality | Certificate subject locality/city | cert_subject_locality:Zurich domain:kaspersky.com |
| cert_subject_organization | Certificate subject organization | cert_subject_organization:"Kaspersky..." |
| cert_md5_fingerprint | Certificate MD5 fingerprint | cert_md5_fingerprint:6A:FC:AF... |
| cert_sha1_fingerprint | Certificate SHA1 fingerprint | cert_sha1_fingerprint:AE:1B:E5... |
Query Reference
Search tips
Combining filters
Use spaces to combine multiple filters into one query.
domain:kaspersky.com port:443 tech:nginx
Exact matches
Use quotation marks for exact phrase matching.
http_title:"Login Page"
Boolean filters
Toggle asset properties with true or false values.
domain:kaspersky.com is_cloud:true is_live:true
Complex queries
Stack filters for precise asset discovery.
domain:kaspersky.com is_cloud:true port:443
Ready to query your attack surface?
Combine 40+ filters to discover, monitor, and secure your external assets with precision.