---
title: "SPQL Data Sources"
slug: "data-sources"
description: "Scanned data is grouped into 6 separate repositories, known as a data source.  The datasource field name is used to target different data sources in Web Scanner queries.  Each data source has a set of field names that you can use to search within it."
tags: ["spql", "web scanner"]
updated: 2026-01-07T15:42:42Z
published: 2026-01-07T15:42:42Z
canonical: "help.silentpush.com/data-sources"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.silentpush.com/llms.txt
> Use this file to discover all available pages before exploring further.

# SPQL Data Sources

DSilent Push Query Language (SPQL) queries target six data repositories, known as data sources, containing scanned web data. This article explains each data source and how to query it. See [Field names](/v1/docs/spql-data-fields) for field details.

## Overview

Web Search organizes scanned data into six [data sources](/v1/docs/data-sources), each representing a specific type of web data. The table below summarizes each data source and its primary use case:

![Selection of data sources for scanning, including Web and Dark Web options.](https://cdn.document360.io/8e5460b3-9d96-4b01-8bb3-6591a4af3a8c/Images/Documentation/Screenshot 2025-10-27 at 2.36.35 PM.png)

| Data Source | Description |
| --- | --- |
| **Web Scan** | Web data from public IPv4 and IPv6 ranges, including HTML, favicons, and SSL data. |
| **Dark Web Scan** | Data from .onion sites on the Tor network, similar to Web Scan but Tor-specific. |
| **Web Resource Scan** | Resources from web searches, including logs of successful and failed attempts, tracking domains, and IPs. |
| **Open Directory Scan** | Data from open directories, including file and directory metadata. |
| **Banner Scan** | Non-HTTP services (e.g., SSH, DNS), including TLS/SSL certificate data and service banners. |
| **WHOIS Scan** | WHOIS data for domain registration details and ownership information. |

## Query Data Sources

- Use the `datasource` field to target a specific repository.

### **Example 1**

Search `torscan` for `.onion` domains containing `crypto`.

```plaintext
domain = crypto* AND datasource = torscan
```

### **Example 2**

Find expired SSL certificates in `services` on public IPv4.

```plaintext
ssl.expire = true AND datasource = services
```

### **Multiple data sources**

Use square brackets to query multiple sources (acts as OR).

```plaintext
domain = payments* AND datasource = [webscan, torscan]
```

> **Notes**: See [SPQL Query Examples](/v1/docs/query-examples) for more query patterns. Use [SPQL API functionality](/v1/docs/api-functionality-1) or [SPQL Command Line Utility](/v1/docs/command-line-utility) to execute queries.