ScanMalware.com URL Scanner

1 of the 128 tools listed anonymously say in their own descriptions that they need an account or a key (submit_scan), but the endpoint issued no WWW-Authenticate challenge. The requirement is stated only in prose, so a call reaches the tool and comes back as a tool error instead of an authorization step.

A cross-origin preflight came back without Access-Control-Allow-Origin, so the endpoint is reachable from native clients only — code running in a web page is stopped by the browser before a request is ever sent.

Breaking: get_js_fingerprinter2, get_js_fingerprinter2_coverage, get_js_fingerprinter2_health, get_js_fingerprinter2_stats, search_js_fingerprint_patterns, search_js_fingerprinter2_composite_hash, search_js_fingerprinter2_signature, search_js_fingerprinter2_similar

Instructions rewritten: find_js_fingerprint_similar_by_hash, get_ai_analysis, get_analyzer_results, get_analyzer_stats, get_api_root, get_bot_protection, get_capabilities_by_date, get_clipboard_events, get_clipboard_stats, get_cpe_by_scan, get_cpe_stats, get_ct_certificates, get_ct_dns_records, get_ct_domains_by_ip, get_ct_similar_domains, get_ct_timeline, get_domain_history, get_domain_scans, get_domain_stats, get_favicon_stats, get_health, get_ids_alerts, get_ip_stats, get_jarm_signatures, get_jarm_stats, get_js_fingerprints, get_js_library_inventory, get_js_segments_by_scan, get_js_segments_suspicious, get_js_segments_unknown, get_jsfingerprint, get_jsfingerprint_bundle_stats, get_jsfingerprint_hash_prevalence, get_jsfingerprint_library_stats, get_jsfingerprint_similar, get_jsfingerprint_similarity_counts, get_jsfingerprint_source, get_latest_capabilities, get_malware_by_scan, get_malware_stats, get_netlog, get_ocr_by_scan, get_ocr_stats, get_open_graph, get_pastejacking, get_pcap_metadata, get_platform_stats, get_popular_technologies, get_rdap, get_recent_scans, get_recent_threats, get_recent_yara_threats, get_safe_browsing, get_safe_browsing_stats, get_scan_ioc, get_scan_progress, get_scan_reports, get_scan_result, get_scan_summary, get_screenshot_stats, get_technologies_by_scan, get_technology_combinations, get_technology_stats, get_tls_asn1, get_tls_details, get_top_tracking_keys, get_yara_by_scan, get_yara_matches, get_yara_stats, run_js_differential_analysis, search_ai_classification, search_ai_high_risk, search_ai_scam_type, search_analyzer_high_risk, search_by_asn, search_by_fuzzy_hash, search_by_ip, search_by_jarm, search_by_nameserver, search_by_registrar, search_by_screenshot_hash, search_cpe, search_favicon_mmh3, search_js_fingerprint_by_bundler, search_js_fingerprint_by_cdn, search_js_fingerprint_by_fuzzy_hash, search_js_fingerprint_by_library, search_js_fingerprint_by_library_version, search_js_fingerprint_by_md5, search_js_fingerprint_by_normalized_hash, search_js_fingerprint_by_server, search_js_fingerprint_by_sha1, search_js_fingerprint_by_sha256, search_js_fingerprint_obfuscated, search_js_fingerprint_patterns, search_js_malware_families, search_js_obfuscation, search_js_segments_by_hash, search_js_segments_by_normalized_hash, search_jsfingerprints_by_bundler, search_jsfingerprints_by_fuzzy_hash, search_jsfingerprints_by_library, search_jsfingerprints_by_library_version, search_jsfingerprints_by_md5, search_jsfingerprints_by_normalized_hash, search_jsfingerprints_by_sha1, search_jsfingerprints_by_sha256, search_ocr_pattern, search_scans, search_semantic, search_similar_scans, search_similar_screenshots, search_suspicious_clipboard, search_technologies, search_tracking_key, wait_for_scan. The description an agent follows changed; the callable contract may not have.

Breaking: submit_scan, submit_scan_report

Instructions rewritten: get_favicon, get_jsfingerprint_similarity_counts, search_by_favicon, search_js_fingerprint_by_library, search_js_fingerprinter2_signature, search_ocr, submit_scan, submit_scan_report. The description an agent follows changed; the callable contract may not have.

Breaking: submit_scan

Instructions rewritten: get_favicon_stats, search_js_fingerprint_by_library, search_js_fingerprint_patterns, search_js_malware_families, search_js_obfuscation, search_ocr, submit_scan. The description an agent follows changed; the callable contract may not have.

Breaking: search_ai_classification, search_by_favicon, search_by_fuzzy_hash, search_by_screenshot_hash, search_tracking_key

Instructions rewritten: get_favicon, get_netlog. The description an agent follows changed; the callable contract may not have.