Ejecuta los mismos análisis de malware por HTTP.

Hash lookup

Look up a SHA-256 without uploading the file. If unknown, response may include needsUpload: true.

curl -s https://hashzyn.onrender.com/v1/scan/lookup \
  -H "Authorization: Bearer hz_live_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","filename":"empty"}'

Ejemplo de respuesta

{
  "id": "scn_…",
  "status": "done",
  "verdict": "unknown",
  "sha256": "e3b0…",
  "needsUpload": true,
  "sources": [
    { "engine": "hash_intel", "verdict": "unknown", "found": false }
  ]
}

File scan

Multipart upload. Free plan max 3 MB; Starter/Pro max 10 MB. Sample bytes are discarded after the request — not archived.

curl -s https://hashzyn.onrender.com/v1/scan/file \
  -H "Authorization: Bearer hz_live_YOUR_KEY" \
  -F "file=@sample.bin" \
  -F "sha256=YOUR_SHA256"

URL scan

Check a URL against threat feeds and page-source heuristics.

curl -s https://hashzyn.onrender.com/v1/scan/url \
  -H "Authorization: Bearer hz_live_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url":"https://example.com/suspicious"}'

Text / code scan

Paste JavaScript, PHP, HTML, or other text for heuristic analysis.

curl -s https://hashzyn.onrender.com/v1/scan/text \
  -H "Authorization: Bearer hz_live_YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"content":"eval(atob(\"…\"))","language":"javascript"}'

Get scan by ID

Fetch a previously created scan result by id.

curl -s https://hashzyn.onrender.com/v1/scan/scn_YOUR_ID \
  -H "Authorization: Bearer hz_live_YOUR_KEY"

Public hash reputation

Read cached HashZyn reputation for a SHA-256 (no auth required). Also available as a shareable page on the site.

curl -s https://hashzyn.onrender.com/v1/hash/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Account

Returns plan, credits, and dailyRemaining for the authenticated user.

curl -s https://hashzyn.onrender.com/v1/me \
  -H "Authorization: Bearer hz_live_YOUR_KEY"

Ejemplo de respuesta

{
  "id": "…",
  "email": "you@example.com",
  "plan": "free",
  "credits": 0,
  "dailyRemaining": 18
}

Create API key

Creates a key. The full hz_live_… secret is returned once — store it securely. List with GET /v1/keys; revoke with DELETE /v1/keys/:id.

curl -s https://hashzyn.onrender.com/v1/keys \
  -H "Authorization: Bearer <session_or_key>" \
  -H "Content-Type: application/json" \
  -d '{"name":"ci"}'

Ejemplo de respuesta

{
  "id": "key_…",
  "name": "ci",
  "prefix": "hz_live_abcd1234",
  "key": "hz_live_…full_secret_once…"
}

Salud

Comprobación de vida para monitores.

curl -s https://hashzyn.onrender.com/health