URLhaus Scraper

Bulk queries and Download Malware Samples Returns clean, structured JSON records ready for analysis, automation, or integration with other tools.

What You Get

• Threat intelligence feeds
• Malware signatures and hashes
• Malicious domain lists
• Security indicators

All results are returned as structured JSON objects — no parsing or cleanup required.

Quick Start

Click Run with default settings — no configuration needed. The actor works out of the box.

{
  "maxResults": 100,
  "searchQuery": ""
}

Input Options

Field	Default	Description
searchQuery	""	Keyword or phrase to filter results. Leave empty to browse all records.
maxResults	100	Maximum records to retrieve (1–10,000). Increase for bulk exports.

Output Format

Results are pushed to the Apify Dataset as individual JSON records. Each run also saves a summary to the Key-Value Store under OUTPUT:

{
  "totalResults": 100,
  "fetchedAt": "2025-01-01T00:00:00.000Z"
}

Dataset records contain the raw structured data returned by the source, including fields like:

• Threat intelligence feeds
• Malware signatures and hashes
• Malicious domain lists

Use Cases

• Cybersecurity tools
• Threat intelligence platforms
• Security research
• Domain reputation checking

Pricing

$1.00 per 1,000 results — pay only for what you use. Pricing is based on the number of records pushed to the dataset.

Results	Estimated Cost
100	$0.10
1,000	$1.00
10,000	$10.00

Notes

• Results are pushed to the dataset in real time as they are fetched
• The actor automatically retries failed requests up to 3 times
• Rate limiting is handled gracefully with built-in delays
• Run multiple times safely — each run creates a fresh dataset