{"id":"ag_ahffjrdb93db","handle":"scanmalware-com-url-scanner","kinds":["status_changed","tool_surface_observed","tool_surface_changed","endpoint_added","ownership_changed","ownership_contested","auth_posture_changed","tls_changed","record_split","split_from"],"count":8,"events":[{"id":"ev_vn85fassknd3","kind":"tls_changed","at":"2026-10-14T12:28:26.464Z","endpointId":"ep_paypzzrt9yvn","before":{"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"subject":"mcp.scanmalware.com","validTo":"2026-11-10T06:02:04.000Z","protocol":"TLSv1.3","chainError":null,"chainValid":true,"hostMatches":true,"fingerprint256":"1C:94:DE:9B:E5:1D:76:63:88:64:C6:FD:0E:3E:2C:1D:DB:75:6F:48:16:E5:D1:B5:F8:1A:21:84:09:F7:1E:26"},"after":{"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"subject":"mcp.scanmalware.com","validTo":"2027-01-09T05:47:38.000Z","protocol":"TLSv1.3","chainError":null,"chainValid":true,"hostMatches":true,"fingerprint256":"35:5D:61:81:86:BF:CF:5B:88:58:2F:7B:74:B8:43:EE:2A:14:B1:88:D8:A9:16:8B:DB:36:95:83:A7:1C:92:D1"},"observationId":"ob_p9mb8x89xsjn","claimId":null},{"id":"ev_ph4ncrck4a4q","kind":"tool_surface_changed","at":"2026-10-08T17:26:47.225Z","endpointId":"ep_paypzzrt9yvn","before":{"hash":"70ee9c861572b2c416930b120fb3c968acab4e82124df0a0dd7d70c5e341f9d7","toolCount":128,"serverVersion":"0.1.6"},"after":{"hash":"e68fd9896d19a6878f957dce8c1c7f721b200387df62e4e7ab7d9f99c159a548","added":["get_js_runtime_behaviour","get_js_runtime_coverage","get_js_runtime_health","get_js_runtime_stats","search_js_runtime_by_composite_hash","search_js_runtime_by_signature","search_js_runtime_similar"],"changed":["wait_for_scan"],"removed":["get_js_fingerprinter2","get_js_fingerprinter2_coverage","get_js_fingerprinter2_health","get_js_fingerprinter2_stats","search_js_fingerprinter2_composite_hash","search_js_fingerprinter2_signature","search_js_fingerprinter2_similar"],"toolCount":128,"serverVersion":"0.1.6"},"observationId":"ob_kpjmxhev32rt","claimId":null},{"id":"ev_thcpceakwfkz","kind":"tool_surface_changed","at":"2026-10-08T10:23:51.591Z","endpointId":"ep_paypzzrt9yvn","before":{"hash":"fb4c5cfbd29c25e5aa43c2beeea14ac6efa584669f582aaa727058066d802916","toolCount":128,"serverVersion":"1.30.0"},"after":{"hash":"70ee9c861572b2c416930b120fb3c968acab4e82124df0a0dd7d70c5e341f9d7","added":[],"changed":["find_js_fingerprint_similar_by_hash","get_ai_analysis","get_analyzer_results","get_analyzer_stats","get_api_root","get_bot_protection","get_capabilities_by_date","get_clipboard_events","get_clipboard_stats","get_cpe_by_scan","get_cpe_stats","get_ct_certificates","get_ct_dns_records","get_ct_domains_by_ip","get_ct_similar_domains","get_ct_timeline","get_domain_history","get_domain_scans","get_domain_stats","get_favicon_stats","get_health","get_ids_alerts","get_ip_stats","get_jarm_signatures","get_jarm_stats","get_js_fingerprinter2","get_js_fingerprinter2_coverage","get_js_fingerprinter2_health","get_js_fingerprinter2_stats","get_js_fingerprints","get_js_library_inventory","get_js_segments_by_scan","get_js_segments_suspicious","get_js_segments_unknown","get_jsfingerprint","get_jsfingerprint_bundle_stats","get_jsfingerprint_hash_prevalence","get_jsfingerprint_library_stats","get_jsfingerprint_similar","get_jsfingerprint_similarity_counts","get_jsfingerprint_source","get_latest_capabilities","get_malware_by_scan","get_malware_stats","get_netlog","get_ocr_by_scan","get_ocr_stats","get_open_graph","get_pastejacking","get_pcap_metadata","get_platform_stats","get_popular_technologies","get_rdap","get_recent_scans","get_recent_threats","get_recent_yara_threats","get_safe_browsing","get_safe_browsing_stats","get_scan_ioc","get_scan_progress","get_scan_reports","get_scan_result","get_scan_summary","get_screenshot_stats","get_technologies_by_scan","get_technology_combinations","get_technology_stats","get_tls_asn1","get_tls_details","get_top_tracking_keys","get_yara_by_scan","get_yara_matches","get_yara_stats","run_js_differential_analysis","search_ai_classification","search_ai_high_risk","search_ai_scam_type","search_analyzer_high_risk","search_by_asn","search_by_fuzzy_hash","search_by_ip","search_by_jarm","search_by_nameserver","search_by_registrar","search_by_screenshot_hash","search_cpe","search_favicon_mmh3","search_js_fingerprint_by_bundler","search_js_fingerprint_by_cdn","search_js_fingerprint_by_fuzzy_hash","search_js_fingerprint_by_library","search_js_fingerprint_by_library_version","search_js_fingerprint_by_md5","search_js_fingerprint_by_normalized_hash","search_js_fingerprint_by_server","search_js_fingerprint_by_sha1","search_js_fingerprint_by_sha256","search_js_fingerprint_obfuscated","search_js_fingerprint_patterns","search_js_fingerprinter2_composite_hash","search_js_fingerprinter2_signature","search_js_fingerprinter2_similar","search_js_malware_families","search_js_obfuscation","search_js_segments_by_hash","search_js_segments_by_normalized_hash","search_jsfingerprints_by_bundler","search_jsfingerprints_by_fuzzy_hash","search_jsfingerprints_by_library","search_jsfingerprints_by_library_version","search_jsfingerprints_by_md5","search_jsfingerprints_by_normalized_hash","search_jsfingerprints_by_sha1","search_jsfingerprints_by_sha256","search_ocr_pattern","search_scans","search_semantic","search_similar_scans","search_similar_screenshots","search_suspicious_clipboard","search_technologies","search_tracking_key","wait_for_scan"],"removed":[],"toolCount":128,"serverVersion":"0.1.6"},"observationId":"ob_43tzenvry5xq","claimId":null},{"id":"ev_yr5gzvmad4c6","kind":"tool_surface_changed","at":"2026-10-07T21:28:14.114Z","endpointId":"ep_paypzzrt9yvn","before":{"hash":"f80d89065341ad313191a4660377c626bbe07087a9d0db7560d0e686f5141402","toolCount":128,"serverVersion":"1.30.0"},"after":{"hash":"fb4c5cfbd29c25e5aa43c2beeea14ac6efa584669f582aaa727058066d802916","added":[],"changed":["get_favicon","get_jsfingerprint_similarity_counts","search_by_favicon","search_js_fingerprint_by_library","search_js_fingerprinter2_signature","search_ocr","submit_scan","submit_scan_report"],"removed":[],"toolCount":128,"serverVersion":"1.30.0"},"observationId":"ob_jfpsbq9t55xc","claimId":null},{"id":"ev_cuytybmn29rk","kind":"tool_surface_changed","at":"2026-10-02T15:20:28.096Z","endpointId":"ep_paypzzrt9yvn","before":{"hash":"b358a8d92963a8df9144497c9d76dec808abbafcf6e57235c24b248588532fbb","toolCount":128,"serverVersion":"1.25.0"},"after":{"hash":"f80d89065341ad313191a4660377c626bbe07087a9d0db7560d0e686f5141402","added":[],"changed":["get_favicon_stats","search_js_fingerprint_by_library","search_js_fingerprint_patterns","search_js_malware_families","search_js_obfuscation","search_ocr","submit_scan"],"removed":[],"toolCount":128,"serverVersion":"1.30.0"},"observationId":"ob_zj3tpcuf2q3c","claimId":null},{"id":"ev_vrvfmmrnc63y","kind":"tls_changed","at":"2026-09-12T21:22:46.909Z","endpointId":"ep_paypzzrt9yvn","before":null,"after":{"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"subject":"mcp.scanmalware.com","validTo":"2026-11-10T06:02:04.000Z","protocol":"TLSv1.3","chainError":null,"chainValid":true,"hostMatches":true,"fingerprint256":"1C:94:DE:9B:E5:1D:76:63:88:64:C6:FD:0E:3E:2C:1D:DB:75:6F:48:16:E5:D1:B5:F8:1A:21:84:09:F7:1E:26"},"observationId":"ob_htps5g74fbf8","claimId":null},{"id":"ev_xcdx63d6j6vx","kind":"auth_posture_changed","at":"2026-09-12T21:22:46.889Z","endpointId":"ep_paypzzrt9yvn","before":null,"after":{"issuer":null,"scheme":null,"conformance":{"dpop":false,"rfc8414":false,"rfc9728":false,"pkceS256":false,"clientIdMetadataDocument":false,"dynamicClientRegistration":false},"authRequired":false,"resourceMetadata":null,"authorizationServers":null},"observationId":"ob_htps5g74fbf8","claimId":null},{"id":"ev_gfdfzxnucj3m","kind":"tool_surface_observed","at":"2026-09-12T13:27:11.951Z","endpointId":"ep_paypzzrt9yvn","before":null,"after":{"hash":"b358a8d92963a8df9144497c9d76dec808abbafcf6e57235c24b248588532fbb","tools":["get_recent_scans","submit_scan","get_scan_summary","wait_for_scan","get_scan_result","search_scans","get_ai_analysis","get_scan_progress","get_scan_ioc","get_tls_details","get_tls_asn1","get_technologies_by_scan","get_bot_protection","get_yara_matches","get_jarm_signatures","get_analyzer_results","get_clipboard_events","get_js_fingerprints","get_scan_reports","get_domain_scans","get_domain_history","get_domain_stats","search_by_ip","get_ip_stats","search_by_asn","search_similar_scans","search_semantic","search_by_favicon","search_ai_high_risk","search_ai_scam_type","search_ai_classification","get_analyzer_stats","search_analyzer_high_risk","get_favicon","get_favicon_stats","get_screenshot_stats","search_similar_screenshots","search_ocr","search_ocr_pattern","search_by_jarm","search_by_fuzzy_hash","search_by_screenshot_hash","search_suspicious_clipboard","get_recent_threats","get_recent_yara_threats","get_ct_certificates","get_ct_dns_records","get_ct_domains_by_ip","get_ct_similar_domains","get_ct_timeline","get_api_root","get_health","get_platform_stats","get_latest_capabilities","get_capabilities_by_date","get_clipboard_stats","get_cpe_stats","get_cpe_by_scan","search_cpe","get_ids_alerts","get_jarm_stats","get_malware_stats","get_malware_by_scan","get_yara_stats","get_yara_by_scan","get_safe_browsing_stats","get_safe_browsing","get_top_tracking_keys","search_tracking_key","search_technologies","get_technology_combinations","get_popular_technologies","get_technology_stats","search_by_nameserver","get_rdap","search_by_registrar","submit_scan_report","get_ocr_stats","get_ocr_by_scan","get_open_graph","get_pastejacking","get_netlog","get_pcap_metadata","search_favicon_mmh3","get_js_fingerprinter2","get_js_fingerprinter2_stats","get_js_fingerprinter2_health","get_js_fingerprinter2_coverage","search_js_obfuscation","search_js_malware_families","search_js_fingerprinter2_composite_hash","search_js_fingerprinter2_signature","search_js_fingerprinter2_similar","get_js_segments_by_scan","search_js_segments_by_hash","search_js_segments_by_normalized_hash","get_js_segments_suspicious","get_js_segments_unknown","run_js_differential_analysis","get_js_library_inventory","search_js_fingerprint_patterns","search_js_fingerprint_obfuscated","search_js_fingerprint_by_server","search_js_fingerprint_by_bundler","search_js_fingerprint_by_cdn","search_js_fingerprint_by_library","search_js_fingerprint_by_library_version","search_js_fingerprint_by_fuzzy_hash","search_js_fingerprint_by_md5","search_js_fingerprint_by_normalized_hash","search_js_fingerprint_by_sha1","search_js_fingerprint_by_sha256","find_js_fingerprint_similar_by_hash","search_jsfingerprints_by_bundler","search_jsfingerprints_by_library","search_jsfingerprints_by_library_version","search_jsfingerprints_by_fuzzy_hash","search_jsfingerprints_by_md5","search_jsfingerprints_by_normalized_hash","search_jsfingerprints_by_sha1","search_jsfingerprints_by_sha256","get_jsfingerprint","get_jsfingerprint_similar","get_jsfingerprint_similarity_counts","get_jsfingerprint_source","get_jsfingerprint_bundle_stats","get_jsfingerprint_library_stats","get_jsfingerprint_hash_prevalence"],"toolCount":128,"serverVersion":"1.25.0"},"observationId":"ob_9zrn3cvebftq","claimId":null}]}