Claude Connector

ScanMalware

Scan URLs in a sandboxed browser and pivot across an archive of past scans by domain, IP, ASN, JARM, favicon hash or JavaScript fingerprint.

View in the Claude registry

Brand: Unknown

Category: Pending
Primary Subcategory: Pending

Integration details

Description

ScanMalware renders URLs in a sandboxed headless browser and keeps every scan in a searchable archive. This connector lets Claude ask what the archive already knows about a domain, URL or IP address, and pivot from one suspicious page to related infrastructure. What it can do: - Read a scan's verdict and risk factors, network requests, IOCs, TLS and JARM details, detected technologies, YARA matches, OCR text and RDAP data. - Find related scans by domain, IP, ASN, JARM signature, favicon hash, screenshot hash, TLSH/ssdeep/sdhash fuzzy hash, OCR text, tracking keys or JavaScript fingerprint. - Look up Certificate Transparency records for a domain or IP. - Submit a new URL for scanning and wait for the result. 126 of the 128 tools are read-only. The two write tools submit a URL for scanning and submit a report about a scan. A new scan is public by default, which publishes the URL and its results in the public feed; choose "unlisted" for anything confidential. No account or API key is needed. ScanMalware is operated by Triop AB in Sweden.

Integration type: Connector
Verification status: Community connector
Platform: Claude
Category: Pending
Primary Subcategory: Pending
Secondary Subcategories: None listed
Brand: Unknown
Access: No account required
First tracked: 2026-10-07
Tool count: 128
Geography: US

Agent DiscoverabilityClaude Discoverability Score

Claude Connector discovery is coming soon

Community Connectors only appear in Claude’s registry.Once verified, organic discovery begins and we can calculate your score.Read more about Community Connector verification.

No spam. Unsubscribe any time.

What discovery looks like

Claude showing a list of relevant Connectors in a conversation

Claude can surface verified Connectors when they match a user’s Prompt.

Primary Subcategory

Competitive lineup

No Primary Subcategory assigned yetOnce ScanMalware has a Primary Subcategory, the Plugins and Connectors it competes with will appear here with their scores.

Tools

128 tools agents can invoke

Find similar JS fingerprints by hash.
find_js_fingerprint_similar_by_hash
Get AI analysis for a scan_id (if available).
get_ai_analysis
Get API root metadata.
get_api_root
Get analyzer results for a scan_id.
get_analyzer_results
Get analyzer statistics overview.
get_analyzer_stats
Get bot-protection detection for a scan_id.
get_bot_protection
Get CPEs for a scan_id.
get_cpe_by_scan
Get CPE statistics.
get_cpe_stats
Get certificate transparency data for a domain.
get_ct_certificates
Get CT DNS records for a domain.
get_ct_dns_records
Find CT domains on an IP address.
get_ct_domains_by_ip
Find similar CT domains for a domain.
get_ct_similar_domains
Get CT certificate timeline for a domain.
get_ct_timeline
Get capability stats by date.
get_capabilities_by_date
Get clipboard events for a scan_id.
get_clipboard_events
Get clipboard statistics.
get_clipboard_stats
Get historical scans for a domain (paginated).
get_domain_history
Get recent scans for a domain.
get_domain_scans
Get summary statistics for a domain.
get_domain_stats
Get the favicon recorded for a scan_id: its size, MD5 and SHA-256 hashes, and the image base64-encoded. found is false when no favicon is stored for the scan.
get_favicon
Get favicon statistics. This aggregate query can take up to 90 seconds by default.
get_favicon_stats
Get API health status.
get_health
Get IDS alerts for a scan_id.
get_ids_alerts
Get IP statistics (paginated).
get_ip_stats
Get JARM signatures for a scan_id.
get_jarm_signatures
Get JARM statistics.
get_jarm_stats
Get JS fingerprint by ID.
get_jsfingerprint
Get JS fingerprint bundle statistics.
get_jsfingerprint_bundle_stats
Get JS fingerprint hash prevalence for a scan_id.
get_jsfingerprint_hash_prevalence
Get JS fingerprint library statistics.
get_jsfingerprint_library_stats
Find similar JS fingerprints.
get_jsfingerprint_similar
Get JS fingerprint similarity counts. This query can take up to 90 seconds by default.
get_jsfingerprint_similarity_counts
Get JS fingerprint source.
get_jsfingerprint_source
Get JS Fingerprinter2 results for a scan_id.
get_js_fingerprinter2
Get JS Fingerprinter2 fingerprint coverage.
get_js_fingerprinter2_coverage
Get JS Fingerprinter2 health check.
get_js_fingerprinter2_health
Get JS Fingerprinter2 stats.
get_js_fingerprinter2_stats
Get JavaScript fingerprints for a scan_id.
get_js_fingerprints
Get JS fingerprint library inventory.
get_js_library_inventory
Get JS segments for a scan_id.
get_js_segments_by_scan
Get suspicious JS segments for a scan_id.
get_js_segments_suspicious
Get unknown JS segments for a scan_id.
get_js_segments_unknown
Get latest capability stats.
get_latest_capabilities
Get malware details for a scan_id.
get_malware_by_scan
Get malware stats.
get_malware_stats
Describe the network log (Chrome NetLog) for a scan_id: whether one exists, its size, and its encoding. The log itself is not returned - these are routinely tens of megabytes gzipped.
get_netlog
Get OCR data for a scan_id.
get_ocr_by_scan
Get OCR stats.
get_ocr_stats
Get Open Graph data for a scan_id.
get_open_graph
Get PCAP metadata for a scan_id.
get_pcap_metadata

FAQs

ScanMalware Claude Connector FAQ

How the directory, categories and Discoverability Score work.

Read the methodology

How do I improve ScanMalware's Claude Connector discoverability?

The levers are the listing surface agents actually read: names, descriptions, keywords, tool metadata, and registry health. Which lever matters depends on where discovery breaks, which is what continuous measurement shows.

Where is this profile measured?

This profile uses the geography attached to the latest public registry snapshot: US. Locale tags are intentionally omitted.