Changelog

The history of API enhancements and bug fixes.

13/10/2025

  • Fixed bug in URLhaus where tags field was omitted from response when searching URL by ID instead of the full URL.

  • Corrected tag filter example in URLhaus URL search endpoint to a valid tag.

  • More performance enhancements across all platforms.

08/10/2025
  • Fixed bug in ThreatFox IoCs list endpoint (i.e. no search filter query params provided to search endpoint) where records were not correctly ordered by first_seen .

  • Fixed bug in URLhaus “search URLs” and “search payloads” endpoints where zero results would return a 500 status instead of a 404 status with empty list.

  • Fixed data lag/availability issue in ThreatFox - latest IoCs should now be available as expected.

  • Platform-wide performance improvements, substantially reducing request latency.

22/09/2025
  • Added since query param to filter results from list & search endpoints across all platforms. The Malware Bazaar max_age param has been replaced with since.

12/09/2025
  • Backfilled additional historical ThreatFox and URLhaus data.

  • Backwards-compatible change to the SIA login path to be consistent with the other APIs, i.e. both /v1/login and /api/v1/login paths can be used (though the former is now preferred and encouraged in the documentation).

  • Rewrote introduction page and corrected contact links.

  • Internal bug fixes & OpenAPI specification polishing.

  • Created this changelog!