List recent payloads
Action ID:tools.urlhaus.list_recent_payloads
List recent payloads. Calls GET /v1/payloads/recent/limit/{limit}/ directly.
Reference: https://urlhaus-api.abuse.ch/#payloads-recent
Secrets
Required secrets:abusech: required valuesABUSECH_API_KEY.
Input fields
string | null
URLhaus API base URL.Default:
null.integer
Maximum number of payloads to return. URLhaus allows up to 1000.Default:
100.List URL blocklist
Action ID:tools.urlhaus.list_url_threats
List recent URLs from URLhaus blocklist
Reference: https://urlhaus-api.abuse.ch/#urls-recent
Secrets
Required secrets:abusech: required valuesABUSECH_API_KEY.
Input fields
integer
Maximum number of URLs to return.Default:
100.Lookup host
Action ID:tools.urlhaus.lookup_host
Look up a host, domain, or IPv4 address. Calls POST /v1/host/ directly.
Reference: https://urlhaus-api.abuse.ch/#host
Secrets
Required secrets:abusech: required valuesABUSECH_API_KEY.
Input fields
string
required
Host, domain, or IPv4 address to lookup.
string | null
URLhaus API base URL.Default:
null.Lookup payload
Action ID:tools.urlhaus.lookup_payload
Look up a payload by file hash. Calls POST /v1/payload/ directly.
Reference: https://urlhaus-api.abuse.ch/#payload
Secrets
Required secrets:abusech: required valuesABUSECH_API_KEY.
Input fields
string
required
MD5 or SHA256 hash of the payload to lookup.
string | null
URLhaus API base URL.Default:
null.Lookup URL
Action ID:tools.urlhaus.lookup_url
Look up a malware URL. Calls POST /v1/url/ directly.
Reference: https://urlhaus-api.abuse.ch/#url
Secrets
Required secrets:abusech: required valuesABUSECH_API_KEY.
Input fields
string
required
URL to lookup.
string | null
URLhaus API base URL.Default:
null.