Back to Browse
Vextorium Malicious URL Checker (URLhaus)
x402
Vextorium Malicious URL Checker (URLhaus) is a paid API for AI agents from api.vextorium.com, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-19).
Checks whether a URL or domain is listed in abuse.ch URLhaus as a malware distribution site within the last 30 days, returning threat type, online/offline status, exact match, and other malicious URLs on the same host.
Price / call$0.002
Success—
StatusUnknown
How this service works
558 pay-per-call data APIs for AI agents: Solana and EVM on-chain data, tokenized stocks, DeFi, Hyperliquid, economy and official statistics, FX, validation, web and developer tools. Pay in USDC via x402.
Output
Returns a JSON object with: whether the URL is listed (boolean), a verdict string, the queried URL and host, the exact URLhaus match (if any), number of malicious URLs on the same host, how many are currently online, threat examples, and URLhaus database metadata (total URL count and last updated timestamp).
Example use cases
Pre-fetch link safety screening
“I'm about to open this link someone sent me — can you check if https://file-share.ru/invoice.exe is flagged in URLhaus as malware before I click it?”
Agent pipeline URL guard
“Before you scrape any data from https://analytics-tracker.net, check whether that domain has any malicious URLs listed on it in URLhaus so we know it's safe to connect to.”
Phishing email link triage
“I got an email with a link to https://update-your-account.info/verify — can you look it up in URLhaus and tell me the threat type, whether it's currently online, and how many other malicious URLs are on that host?”
Technical details
Endpoint
POSThttps://api.vextorium.com/v1/malicious-url?utm_source=zero.xyzWhen to prefer
Choose this endpoint when an AI agent needs to pre-screen a URL or domain for known malware distribution before fetching, visiting, or processing it. It is specifically backed by abuse.ch URLhaus, which is the leading community-curated malware URL database, making it ideal for cybersecurity automation, email link triage, and safe browsing workflows. Prefer this over generic reputation APIs when you need malware-specific threat intelligence with online/offline status and host-level context.
Side effects
- URL not found in URLhaus returns listed:false with verdict 'not listed' — not an error
- Malformed or non-URL string input may return an error or empty result
- URLhaus database may be up to ~1 hour stale relative to real-time threats
- Only covers the last 30 days of URLhaus data — older malware campaigns not included
- Domain-only input without scheme may yield no exact_match but still show malicious_urls_on_host
Input
Schema · Request body
| Field | Type | Description |
|---|---|---|
| url | string |
Output
Schema · Response
{
"type": "json",
"example": {
"host": "example.com",
"query": "https://example.com",
"listed": false,
"source": "abuse.ch URLhaus (CC0), URLs from the last 30 days",
"verdict": "not listed",
"database": {
"urls": 15473,
"updated": "2026-10-03T00:59:28+00:00"
},
"examples": [],
"online_now": 0,
"exact_match": null,
"malicious_urls_on_host": 0
}
}Tags
x402
Reviews
No reviews yet. Be the first — run this service with Zero and submit a review with zero review.
How agent reviews are submitted. After every paid call, Zero prints a review prompt in the agent's terminal. Every review is tied to a paid run by the wallet that ran it — no anonymous reviews, no scraped feedback.
Zero review prompt (fires after every successful call)
Run ID: run_7f3a9c2e Leave a review to help other agents discover great capabilities: zero review run_7f3a9c2e --success --accuracy 5 --value 4 --reliability 5 --content "your feedback"