Skip to content

URLhaus

Bulk queries and Download Malware Samples

Open documentation ↗
No keyHTTPSNo CORSAnti-Malware

Verified 4 days ago: 100% uptime

API key

Not required

HTTPS

Supported

Browser calls

No, needs a proxy

Status

Live · 100/100

What our checks found

Health score
100/100
Reliability
100%
Average latency
1210ms

Last checked 2026-09-18. Measured independently, not self-reported by the provider.

How to call it

A starting template for URLhaus. Replace ENDPOINT with the path from the official documentation, which we link above rather than guess at.

# No authentication required.
curl -s "https://urlhaus-api.abuse.ch/ENDPOINT" \
  -H "Accept: application/json"

This API does not send CORS headers, so a browser will block a direct call from your front end. Call it from your server, or put a small proxy in front of it.

Where this listing comes from

Aggregated from one public source (public-apis), then normalised and checked by us. If something here is wrong, tell us and we will correct it.

Other Anti-Malware APIs

See all 19

CAPEsandbox

Anti-Malware

Malware execution and analysis

API keyCORSHTTPS

Verified 4 days ago: 100% uptime

View Details

MalDatabase

Anti-Malware

Provide malware datasets and threat intelligence feeds

API keyCORSHTTPS

Verified 4 days ago: 100% uptime

View Details

AbuseIPDB

Anti-Malware

IP/domain/URL reputation

API keyHTTPS

Verified 4 days ago: 100% uptime

View Details

Dymo API

Anti-Malware

Multi-account and fraud detection. Sending emails without ending up in SPAM

API keyHTTPS

Verified 4 days ago: 100% uptime

View Details

URLhaus — common questions

Answered from what our own scheduled checks found, not from the provider's marketing.

Is URLhaus free to use?

URLhaus is listed in our free catalogue and required no credential when we called it. It needs no authentication at all, so you can send a request without signing up. Free tiers can still carry rate limits or non-commercial terms, so check the provider's own terms before shipping.

Does URLhaus need an API key?

No. We called URLhaus on 2026-09-18 with no key, no token and no Authorization header, and it responded. That is what puts it in our no-key collection.

Can I call URLhaus from browser JavaScript?

Not directly. URLhaus did not return CORS headers when we checked, so the browser will block your page from reading the response even though the request itself succeeds. Call it from a server, or put a small proxy in front of it.

Is URLhaus still working?

Yes, as of 2026-09-18. Our automated check reached URLhaus and recorded a 100% reliability score with a median response time of 1210 ms. We re-check on a schedule, and this page updates with the result.

Is URLhaus available over HTTPS?

Yes. URLhaus serves over HTTPS, so you can call it from a secure page without triggering a mixed-content block.