Anti-Malware — entry 012 of 15

URLhaus

Verified Jul 2026

URLhaus, another abuse.ch project, crowdsources and publishes malware-distribution URLs so security tools can block them, offering bulk recent-URL feeds and single-URL/hash lookups via a JSON REST API. A live POST to urlhaus-api.abuse.ch's recent-URLs endpoint without a key returned {"error": "Unauthorized"}, and a bogus Auth-Key returned {"query_status": "unknown_auth_key"}, confirming abuse.ch's shared Auth-Key migration and correcting the stored auth from None to API Key. Neither call returned an Access-Control-Allow-Origin header, correcting cors from yes to no; access itself remains free under the same abuse.ch fair-use policy as its sibling APIs.

malware-urlsthreat-intelligenceabuse-chblocklistapi-key
AuthenticationAPI KeySign up with the provider to obtain credentials.
HTTPSSupportedTraffic is encrypted in transit.
CORSDisabledBrowser calls need a server-side proxy.
PricingFreemiumA usable free tier exists, with paid plans for more volume.
FormatsJSONResponses can be requested as JSON.

GreatAPIs Score

Score61out of 100
Authentication15/25API key required
Pricing17/20Freemium tier available
Docs0/20No docs or spec available
Formats9/15Single response format
Freshness20/20Verified within 6 months

Embed this badge

Scored 61 on greatapis.com
<a href="https://greatapis.com/api/urlhaus/"><img src="https://greatapis.com/badge/urlhaus.svg" alt="Scored 61 on greatapis.com"></a>

Auth quickstart

  1. Sign up with the provider to get an API key.
  2. Send it on every request as a headerAuthorization: <key>
  3. The exact header isn't documented — Authorization is a common default; confirm in the provider's docs.
Stored keyNo key stored

Your key is stored only in this browser (localStorage) and sent directly to the API — never to greatapis.