Phishing URL scans and pivots
ScanMalware helps security teams investigate suspicious and phishing URLs. It renders a URL in a sandboxed browser, records what the page loaded and did, and keeps public scans in a searchable archive, so one reported phishing page can lead to the rest of its campaign. More
MCP connector Server URL https://mcp.scanmalware.com/mcpCopy Login None Tools Reads data126 find_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ get_ run_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ search_ wait_
Changes data2 submit_ submit_
Skills 1 in the ChatGPT listing
Pivoting phishing infrastructure with scanmalware Expands one phishing URL into its wider campaign using the ScanMalware public scan archive (no API key needed): redirect-aware domain history (matched_on), SMQL searches on each kit artifact (script SHA-256, favicon MMH3, screenshot hash, page title) plus JARM and IP, and CT-derived subdomains, then judges which pivots are selective enough to hunt or block on. 
Have I Been Pwned#426
WorkOS#447