Check an unfamiliar link before opening it, investigate a suspicious domain, or gather evidence for a security review. Your assistant turns scan results into a clear explanation of what deserves attention.
Copy a prompt into your agent with the oo Skill installed. Add your page links and source notes before running it.
Understand the risk score, suspicious redirects, trackers, and certificate issues in one summary.
/oo ScanMalware: Scan this URL without listing it publicly: [URL]. Summarize the main risks, redirects, trackers, and certificate status in plain language.
Distinguish a page hosted on the domain from a different site that redirects there.
/oo ScanMalware: Find recent public scans matching [domain]. Separate scans submitted for this domain from other sites redirecting to it, and explain which page each verdict describes.
Bring together matching public scans and observed subdomains or IP addresses.
/oo ScanMalware: Research [domain] using public scans and DNS records. Organize the related subdomains, IP addresses, and suspicious pages into a short investigation report.
Set up oo CLI and the oo Skill in your agent.
Install OOMOL →Start using ScanMalware without an API key.
Connect ScanMalware →Use /oo with the pages to read, the changes to make, and where to save the result.
Connection Guide →Choose Your Agent
ScanMalware analyzes web pages and makes public scan results available for research. Use this integration to inspect a URL, trace domain matches, and review observed DNS records without manually comparing each response.
Scan a URL and follow its progress. Get a clear view of risk scores, redirects, trackers, detected technologies, certificate status, and page load time.
Search public scans and review domain matches, subdomains, and observed IP addresses.
Submit a URL to be rendered and analyzed in a sandboxed browser. Returns a scan id; poll get_scan_summary until the status is completed or failed.
Leina 
Wanta 
scanmalware.submit_scan Get the status, security verdict and risk score of one scan. The verdict describes the submitted url as it rendered at final_url, not every site that redirects there. security_verdict can stay empty for a few minutes after the status turns completed; read the summary again if it is empty.
scanmalware.get_scan_summary Search public scans with the ScanMalware query language, for example domain:example.com, ip:203.0.113.10, asn:13335, jarm:<fingerprint>, favicon_hash:<mmh3>, technology:WordPress, ct_domain:example.com or submitted:last7d, combined with AND, OR, NOT and parentheses. domain: and url: also match the final URL after redirects, so results can be other sites that redirect to the queried domain.
scanmalware.search_scans List recent public scans of a domain and its subdomains, or of an IP address. A scan whose matched_on contains url was submitted for this domain. A scan matched only on final_url started at another site that redirected here, often a phishing page imitating this domain, so its verdict describes that other site, not this domain.
scanmalware.get_domain_scans Get the subdomains and IP addresses observed for a domain from Certificate Transparency logs and DNS resolution.
scanmalware.get_domain_dns No matching tools.
No. It is hidden from listings, but anyone with its link can open it. Private scans are outside this integration.
A suspicious site may redirect to a legitimate domain. Ask your assistant to explain the original page and its destination so you can see where the risk comes from.
No. A scan describes what was observed at the time. Results can be incomplete, and a page can change after the scan. Ask for the supporting evidence, not just the verdict.
Manage which optional storage OOMOL can use. You can change these choices from the footer at any time.