MalShare vs Scanii

MalShare is a community-run, free public malware sample repository: registered users pull hash lists, per-sample metadata, and the raw binaries themselves through a single api.php endpoint, or upload their own finds back to the pool. A live GET against that endpoint with an invalid key returned a plain-text "user specified in api_key GET variable does not exist" error rather than any CORS header, reconfirming API-key auth over HTTPS and reconfirming cors as no. Standard registered keys are free and capped around 2,000 calls a day, a limit MalShare says it will raise on request.

Scanii is a REST API that scans uploaded files, images, and text for malware, unsafe imagery, and inappropriate language across more than 100 image formats and 20+ languages, returning findings, checksums, and content metadata as JSON. A live GET and OPTIONS preflight against api.scanii.com/v2.2/files both returned Access-Control-Allow-Origin: *, and the GET's 401 carried a WWW-Authenticate: Basic realm="Scanii API" header, correcting the stored auth from API Key to Basic Auth (the API key is used as the Basic-auth username, its secret as the password) over HTTPS. New accounts start with free trial credits before moving to metered Starter/Plus/Enterprise plans billed per file scanned.