URLhaus Community API

https://urlhaus.abuse.ch/api/
Admin
URLhaus Community API is a malware URL database and tracking service that allows users to download,...
Tokens:2,130
Snippets:28
Trust Score:10
Update:5 months ago
Show doc for...
Tokens:
Raw
### Download Recent CSV Data with Auth-Key

Source: https://urlhaus.abuse.ch/api

Use this curl command to download a recent CSV export of the URLhaus database. Replace YOUR-AUTH-KEY-HERE with your actual authentication key. Ensure you do not fetch data more often than every 5 minutes.

```bash
curl -i "https://urlhaus-api.abuse.ch/v2/files/exports/YOUR-AUTH-KEY-HERE/recent.csv"
```

--------------------------------

### Python Script for URLhaus API Submission

Source: https://urlhaus.abuse.ch/api

A sample Python script to demonstrate how to submit malware URLs to the URLhaus API. This script requires the 'requests' library and your personal Auth-Key.

```python
import requests
import json

# --- Configuration ---
# Get your Auth-Key from: https://urlhaus.abuse.ch/api/
AUTH_KEY = "YOUR_AUTH_KEY"

# --- Submit a single URL ---
url_to_submit = "http://malware.testing.com/malware.exe"
threat_type = "malware_download"
tag_string = "test"
anonymous_report = 0 # Set to 1 for anonymous reports

# Prepare the data payload
payload = {
    "anonymous": anonymous_report,
    "url": url_to_submit,
    "threat": threat_type,
    "tags": tag_string
}

# Set the request headers
headers = {
    "Auth-Key": AUTH_KEY,
    "Content-Type": "application/json"
}

# Make the POST request
response = requests.post("https://urlhaus.abuse.ch/api/", headers=headers, data=json.dumps(payload))

# Print the response
print(f"Status Code: {response.status_code}")
print(f"Response Body: {response.json()}")

# --- Submit multiple URLs ---
# url_list = [
#     {
#         "url": "http://malware.testing.com/malware.exe",
#         "threat": "malware_download",
#         "tags": "test"
#     },
#     {
#         "url": "http://malware.testing.com/another.exe",
#         "threat": "malware_download",
#         "tags": "test"
#     }
# ]
# 
# payload_bulk = {
#     "anonymous": anonymous_report,
#     "submission": url_list
# }
# 
# response_bulk = requests.post("https://urlhaus.abuse.ch/api/", headers=headers, data=json.dumps(payload_bulk))
# 
# print(f"\nBulk Submission Status Code: {response_bulk.status_code}")
# print(f"Bulk Response Body: {response_bulk.json()}")

```

--------------------------------

### Submit Multiple Malware URLs via API (JSON)

Source: https://urlhaus.abuse.ch/api

This JSON structure demonstrates how to submit a list of malware URLs in a single API request. The 'submission' field accepts an array of URL objects.

```json
{
  "anonymous": 1,
  "submission": [
    {
      "url": "http://malware.testing.com/malware.exe",
      "threat": "malware_download",
      "tags": "test"
    },
    {
      "url": "http://malware.testing.com/another.exe",
      "threat": "malware_download",
      "tags": "test"
    }
  ]
}
```

--------------------------------

### Submit Malware URLs via API

Source: https://urlhaus.abuse.ch/api

This endpoint allows for automated or bulk submissions of malware URLs to the URLhaus database. Authentication with an Auth-Key is required.

```APIDOC
## POST /api/

### Description
Submit a malware URL to the URLhaus database via the API.

### Method
POST

### Endpoint
https://urlhaus.abuse.ch/api/

### Parameters
#### Request Body
- **anonymous** (integer) - Required - If set to 1, your submission will be anonymous.
- **submission** (array) - Required - List of URLs to submit.
  - **URL** (string) - Required - The URL you want to submit.
  - **Threat** (string) - Required - Must be 'malware_download'.
  - **Tags** (string) - Optional - Tag for the submission. Allowed characters: [A-Za-z0-9.- ]

### Request Example
```json
{
  "anonymous": 1,
  "submission": [
    {
      "URL": "http://example.com/malware.exe",
      "Threat": "malware_download",
      "Tags": "example_tag"
    }
  ]
}
```

### Authentication
Your POST request must contain the `Auth-Key` field, containing your personal Auth-Key. If you don't have an Auth-Key yet, you can get one at the abuse.ch Authentication Portal.
```

--------------------------------

### Submit Malware URL via API (JSON)

Source: https://urlhaus.abuse.ch/api

This is the JSON structure required for submitting a single malware URL via the URLhaus API. Ensure you include your Auth-Key in the request headers.

```json
{
  "anonymous": 0,
  "url": "http://malware.testing.com/malware.exe",
  "threat": "malware_download",
  "tags": "test"
}
```
Tokens:
Raw