CAPEsandbox
Malware execution and analysis
- Authentication
- API Key
- HTTPS
- Yes
- CORS
- Unknown
- Category
- Anti-Malware
- Documentation / URL
- https://capev2.readthedocs.io/en/latest/usage/api.html
Overview
CAPEsandbox is a malware-analysis sandbox (CAPE) with a task API — submit samples and fetch reports.
Note (verified 2026-08): the public instance is fronted by a Cloudflare challenge (HTTP 403 “Just a moment…” from datacenter IPs) — browser/real-IP requests work normally. Retry from a residential network if you hit this.
What it provides
curl -X POST "https://capesandbox.com/api/tasks/create/" \
-F "[email protected]"Notes
- Submit files → task IDs → fetch analysis reports (static, behavioral, network).
- Auth via an API token per the docs (CAPE v2).
- The Cloudflare protection (verified) may require a real browser session.
FAQ
Is CAPEsandbox free? The public instance has been free with limits; verify current policy.
Why 403 from my server? Cloudflare challenge on datacenter IPs (verified) — residential/browser requests work.
What does it analyze? Malware samples with static + behavioral reports.
More in Anti-Malware
| API | Auth | HTTPS | CORS | |
|---|---|---|---|---|
| AbuseIPDB IP/domain/URL reputation | API Key | Yes | Unknown | ↗ |
| AlienVault Open Threat Exchange (OTX) IP/domain/URL reputation | API Key | Yes | Unknown | ↗ |
| Google Safe Browsing Google Link/Domain Flagging | API Key | Yes | Unknown | ↗ |
| IPWhois.net Blacklist Community IP blacklist to check and report abusive IP addresses | No auth | Yes | Unknown | ↗ |
| MalDatabase Provide malware datasets and threat intelligence feeds | API Key | Yes | Unknown | ↗ |