ScanMalware AI Employee

Leina connects to ScanMalware to help you investigate suspicious URLs and explain scan evidence. Ask in your team chat. Leina does the work and brings back the result.

Connect ScanMalware, choose what to share, and hand off your first task.

Leina + ScanMalware Example Result

You

Scan this delivery-notice URL [URL] without listing it publicly. Wait for the result and explain its redirects, tracker count, certificate status, and any available risk verdict.

Leina

The scan completed with two redirects and three trackers. The final page’s certificate was valid, but the risk verdict was still unavailable when checked.

Example · Completed scan observations

Delivery-notice link review

Observed page behavior is available; a security verdict is still pending.

Redirects
Two redirects; the final page is on a different hostname from the submitted link.
Trackers and certificate
Three trackers detected; the final page’s TLS certificate was valid at scan time.
Verdict
Not yet returned. These observations alone do not establish that the link is safe.
Turn a suspicious link into evidence a reviewer can inspect without treating a score as a safety guarantee.

What Is a ScanMalware AI Agent?

AI submits a URL with your chosen visibility, checks the scan’s progress, and explains the returned redirects and risk signals. It distinguishes missing verdicts from completed findings.

You specify the source and the destination. Leina uses the content available to your connection and returns the result for you to review.

ScanMalware

ScanMalware analyzes web pages in a sandboxed browser and provides public scan and domain records for investigation.

  1. Submit an unlisted scan

    Use the supplied URL and keep the scan out of public listings.

  2. Read the completed observations

    Check progress and report available evidence, including any missing verdict.

What to Ask Leina to Do with ScanMalware

Copy a prompt, add your details, and send it to Leina in your connected team chat.

Review a suspicious URL

Scan this URL without listing it publicly: [URL]. Summarize the main risks, redirects, trackers, and certificate status in plain language.

scanmalware

Check why a domain appears in a scan

Find recent public scans matching [domain]. Separate scans submitted for this domain from other sites redirecting to it, and explain which page each verdict describes.

scanmalware

Gather public domain evidence

Research [domain] using public scans and DNS records. Organize the related subdomains, IP addresses, and suspicious pages into a short investigation report.

scanmalware

Your next ScanMalware task can start with a message.

Connect. Ask. Get the Result.

Tell Leina what you need in your team chat. Include the source, destination, and expected result.

  1. Connect Your Account

    Connect the tools involved and give Leina access to the content it needs.

  2. Try a Task

    Share the source material, say where the result belongs, and describe what you need.

  3. Check the Result

    Review the result and any changes in the connected app.

Put Leina to Work in ScanMalware

Hand off these everyday tasks to your AI employee.

Submit Scan

Submit a URL to be rendered and analyzed in a sandboxed browser. Returns a scan id; poll get_scan_summary until the status is completed or failed.

Get Scan Summary

Get the status, security verdict and risk score of one scan. The verdict describes the submitted url as it rendered at final_url, not every site that redirects there. security_verdict can stay empty for a few minutes after the status turns completed; read the summary again if it is empty.

Search Scans

Search public scans with the ScanMalware query language, for example domain:example.com, ip:203.0.113.10, asn:13335, jarm:<fingerprint>, favicon_hash:<mmh3>, technology:WordPress, ct_domain:example.com or submitted:last7d, combined with AND, OR, NOT and parentheses. domain: and url: also match the final URL after redirects, so results can be other sites that redirect to the queried domain.

Get Domain Scans

List recent public scans of a domain and its subdomains, or of an IP address. A scan whose matched_on contains url was submitted for this domain. A scan matched only on final_url started at another site that redirected here, often a phishing page imitating this domain, so its verdict describes that other site, not this domain.

Get Domain Dns

Get the subdomains and IP addresses observed for a domain from Certificate Transparency logs and DNS resolution.

More Tools for Your AI Employee

Connect the Apps your work depends on, and give Leina the context to carry the task forward.

Keep the Conversation Moving. Let Leina Pick Up the Work.

Hand off a task while your team is discussing it. Leina uses your connected tools and brings the result back to the conversation.

See How Leina Works in Slack
LeinaExample Result

The scan completed with two redirects and three trackers. The final page’s certificate was valid, but the risk verdict was still unavailable when checked.

Delivery-notice link review

ScanMalware + Leina: Your Questions, Answered

Is an unlisted scan private?

No. It is hidden from listings, but anyone with its link can open it. Private scans are outside this integration.

Does a malicious scan prove the matched domain is malicious?

A suspicious site may redirect to a legitimate domain. Ask your assistant to explain the original page and its destination so you can see where the risk comes from.

Does a low-risk result guarantee a URL is safe?

No. A scan describes what was observed at the time. Results can be incomplete, and a page can change after the scan. Ask for the supporting evidence, not just the verdict.

Make Leina Your ScanMalware AI Employee

Start with one task you already need to do. Tell Leina what a finished result should look like.

Connect ScanMalware, choose what to share, and hand off your first task.