URLhaus
A platform dedicated to sharing malicious URLs that are being used for malware distribution.
Malware URLs Online
400,000+
Total URLs in Database
10,000,000+
Daily Submissions
10,000+
About URLhaus
URLhaus is a community-driven threat intelligence project focused on sharing malicious URLs. It allows security researchers, analysts, and the public to submit and browse URLs that are actively being used to distribute malware. The platform verifies submissions and provides context-rich metadata for each entry. Data is accessible through a web interface, bulk downloads (feeds), and a public API, enabling seamless integration with SIEMs, firewalls, and other security products. The service is provided free of charge to help the internet community combat malware and botnet-related cybercrime.
Data Access Methods
Web Interface
Browse, search, and view details on the latest malware URLs.
Api
Programmatically query the database for URLs, payloads, and host information.
Data Feeds
Consume regularly updated lists of malicious URLs for use in security appliances.
Threat Intelligence
Url Information
Provides URL, status (online/offline), date added, and associated tags.
Payload Information
Details on the malware payload being distributed, including file type, size, and hashes (MD5, SHA256).
Source Information
Information on the hosting provider (ASN, country) and submitting source.