Skip to content

VirusTotal

VirusTotal File/URL Analysis

Open documentation ↗
API keyHTTPSNo CORSAnti-Malware

Verified 4 days ago: 100% uptime

API key

Required

HTTPS

Supported

Browser calls

No, needs a proxy

Status

Live · 100/100

What our checks found

Health score
100/100
Reliability
100%
Average latency
1172ms

Last checked 2026-09-18. Measured independently, not self-reported by the provider.

How to call it

A starting template for VirusTotal. Replace ENDPOINT with the path from the official documentation, which we link above rather than guess at.

# Requires an API key. Check the docs for whether it goes in a header or a query parameter.
curl -s "https://docs.virustotal.com/ENDPOINT" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Accept: application/json"

This API does not send CORS headers, so a browser will block a direct call from your front end. Call it from your server, or put a small proxy in front of it.

Where this listing comes from

Aggregated from one public source (public-apis), then normalised and checked by us. If something here is wrong, tell us and we will correct it.

Other Anti-Malware APIs

See all 19

URLhaus

Anti-Malware

Bulk queries and Download Malware Samples

No keyHTTPS

Verified 4 days ago: 100% uptime

View Details

CAPEsandbox

Anti-Malware

Malware execution and analysis

API keyCORSHTTPS

Verified 4 days ago: 100% uptime

View Details

MalDatabase

Anti-Malware

Provide malware datasets and threat intelligence feeds

API keyCORSHTTPS

Verified 4 days ago: 100% uptime

View Details

AbuseIPDB

Anti-Malware

IP/domain/URL reputation

API keyHTTPS

Verified 4 days ago: 100% uptime

View Details

Dymo API

Anti-Malware

Multi-account and fraud detection. Sending emails without ending up in SPAM

API keyHTTPS

Verified 4 days ago: 100% uptime

View Details

VirusTotal — common questions

Answered from what our own scheduled checks found, not from the provider's marketing.

Is VirusTotal free to use?

VirusTotal is listed in our free catalogue, but it requires an API key, so you will need to register before your first call. Providers frequently reserve higher limits and commercial use for paid plans.

Does VirusTotal need an API key?

Yes. VirusTotal authenticates with an API key. Keep it server-side rather than in browser code, because anything in your frontend bundle is readable by anyone who opens developer tools.

Can I call VirusTotal from browser JavaScript?

Not directly. VirusTotal did not return CORS headers when we checked, so the browser will block your page from reading the response even though the request itself succeeds. Call it from a server, or put a small proxy in front of it.

Is VirusTotal still working?

Yes, as of 2026-09-18. Our automated check reached VirusTotal and recorded a 100% reliability score with a median response time of 1172 ms. We re-check on a schedule, and this page updates with the result.

Is VirusTotal available over HTTPS?

Yes. VirusTotal serves over HTTPS, so you can call it from a secure page without triggering a mixed-content block.