URLhaus Database

Here you can propose new malware urls or just browse the URLhaus database. If you are looking for a parsable list of the dataset, you might want to check out the URLhaus API.

There are 400'752 malicious URLs tracked on URLhaus. The queue size is 25.

Submit a URL


Browse Database


Dateadded (UTC)Malware URLStatusTagsReporter
2020-05-27 11:08:03https://905b2a59.ngrok.io/1Offlinebackconnect Anonymous
2020-05-07 11:37:41http://c9f44961.ngrok.io/nlbrute.exeOffline@JAMESWT_MHT
2020-05-07 11:37:31http://c9f44961.ngrok.io/npayl.exeOffline@JAMESWT_MHT
2020-05-07 11:37:28http://c9f44961.ngrok.io/virtualtour.exeOffline@JAMESWT_MHT
2020-05-07 11:37:22http://c9f44961.ngrok.io/virtualtourjuststealer...Offline@JAMESWT_MHT
2020-05-07 11:37:13http://c9f44961.ngrok.io/winrar.exeOfflineAZORult link @JAMESWT_MHT
2020-05-07 11:37:10http://c9f44961.ngrok.io/clinj.vbsOffline@JAMESWT_MHT
2020-05-07 11:37:06http://c9f44961.ngrok.io/built.exeOfflineQuasarRAT link @JAMESWT_MHT
2020-05-07 11:35:21http://c9f44961.ngrok.io/corovid19.apkOffline@JAMESWT_MHT
2020-05-07 11:35:10http://c9f44961.ngrok.io/corona.apkOffline@JAMESWT_MHT
2020-05-03 07:07:04https://mail-cloud.ngrok.io/bin/pounds-hopto_ng...OfflineAveMariaRAT link encrypted GuLoader link rat @abuse_ch
2020-04-07 05:53:25http://19ce033f.ngrok.io/sh4Offlineelf @hypoweb
2020-04-07 05:53:23http://19ce033f.ngrok.io/i686Offlineelf @hypoweb
2020-04-07 05:53:18http://19ce033f.ngrok.io/i586Offlineelf @hypoweb
2020-04-07 05:53:15http://19ce033f.ngrok.io/i486Offlineelf @hypoweb
2020-04-07 05:53:12http://19ce033f.ngrok.io/m68kOfflineelf @hypoweb
2020-04-07 05:53:09http://19ce033f.ngrok.io/ppc440Offlineelf @hypoweb
2020-04-06 14:04:07http://19ce033f.ngrok.io/spcOfflineelf @Gandylyan1
2020-04-06 14:04:04http://19ce033f.ngrok.io/arm5Offlineelf @Gandylyan1
2020-04-06 04:36:26http://19ce033f.ngrok.io/x86Offline@JayTHL
2020-04-06 04:36:23http://19ce033f.ngrok.io/ppcOffline@JayTHL
2020-04-06 04:36:21http://19ce033f.ngrok.io/mpslOffline@JayTHL
2020-04-06 04:36:15http://19ce033f.ngrok.io/mipsOffline@JayTHL
2020-04-06 04:36:12http://19ce033f.ngrok.io/arm7Offline@JayTHL
2020-04-06 04:36:04http://19ce033f.ngrok.io/arm6Offline@JayTHL
2020-03-30 12:09:07http://aba23564.ngrok.io/microsoft.vbsOfflineRevengeRAT link wshrat link @0xCARNAGE
2020-03-30 12:09:04http://aba23564.ngrok.io/microsoft.htaOfflineRevengeRAT link wshrat link @0xCARNAGE
2020-03-30 11:55:04https://aba23564.ngrok.io/redi.phpOffline@JAMESWT_MHT
2020-03-30 11:50:04https://aba23564.ngrok.io/microsoft.vbsOffline@JAMESWT_MHT
2020-03-24 09:18:28http://58680dd9.ngrok.io/bins/arm5Offlineelf @Gandylyan1
2020-03-24 09:18:23http://58680dd9.ngrok.io/bins/arm4Offlineelf @Gandylyan1
2020-03-24 09:18:17http://58680dd9.ngrok.io/bins/x86Offlineelf @Gandylyan1
2020-03-24 09:18:08http://58680dd9.ngrok.io/bins/mpslOfflineelf @Gandylyan1
2020-03-24 09:14:19http://6735a55d.ngrok.io/bins/arm5Offlineelf @Gandylyan1
2020-03-24 09:14:15http://6735a55d.ngrok.io/bins/arm4Offlineelf @Gandylyan1
2020-03-24 09:14:11http://6735a55d.ngrok.io/bins/x86Offlineelf @Gandylyan1
2020-03-24 09:14:08http://6735a55d.ngrok.io/bins/mpslOfflineelf @Gandylyan1
2020-03-24 06:35:15http://6735a55d.ngrok.io/bins/mipsOfflineAnonymous
2020-03-24 06:35:07http://58680dd9.ngrok.io/bins/mipsOfflineAnonymous
2020-02-26 14:30:09https://1ec6b9e8.ngrok.io/11Offline@JAMESWT_MHT
2020-02-14 15:10:04http://04c077be.ngrok.io/12Offline@abuse_ch
2019-10-24 18:43:10https://988f5c12.ngrok.io/al.jpgOfflineFormbook link @James_inthe_box
2019-10-07 07:20:05http://7c2918ca.ngrok.io/PI.exeOfflineAgentTesla link exe QuasarRAT link @abuse_ch
2019-08-01 09:09:06https://8006af08.ngrok.io/CP15250.exeOfflineexe @zbetcheckin
2019-07-31 03:29:06http://24648040.ngrok.io/DC.123Offlineexe rat remcos link RemcosRAT link @p5yb34m
2019-07-31 03:28:03http://24648040.ngrok.io/out-1624020870.ps1Offlineps1 @p5yb34m
2019-07-31 03:26:04http://24648040.ngrok.io/WD.123Offlineexe rat remcos link RemcosRAT link @p5yb34m
2019-07-25 14:30:03https://24648040.ngrok.io/out-1624020870.ps1OfflineFormbook link @James_inthe_box
2019-06-19 06:09:04http://f7a54f35.ngrok.io/1/m/mc.msiOfflineAgentTesla link msi @abuse_ch
2019-06-19 06:09:04http://f7a54f35.ngrok.io/1/m/MTXFQJ.DocOfflineAgentTesla link doc @abuse_ch
2019-06-17 05:46:34https://cbcac078.ngrok.io/auth/yeyoc.123Offlineexe @oppimaniac
2019-06-17 05:46:30https://cbcac078.ngrok.io/auth/yeyo.123Offlineexe @oppimaniac
2019-06-17 05:46:24https://cbcac078.ngrok.io/auth/yeyfb.123Offlineexe @oppimaniac
2019-06-17 05:46:16https://cbcac078.ngrok.io/auth/putty.123Offlineexe @oppimaniac
2019-06-17 05:46:13https://cbcac078.ngrok.io/auth/odiloo.123Offlineexe @oppimaniac
2019-06-17 05:46:10https://cbcac078.ngrok.io/auth/odil.123Offlineexe @oppimaniac
2019-06-17 05:46:07https://cbcac078.ngrok.io/auth/davoo.rarOfflineexe rar @oppimaniac
2019-06-17 05:46:04https://cbcac078.ngrok.io/auth/dav.123Offlineexe @oppimaniac
2019-06-17 05:43:05https://cbcac078.ngrok.io:443/auth/davoo.123Offlineexe @oppimaniac
2019-06-10 18:28:04https://18656c64.ngrok.io/NewOrder%20PO5646276A...OfflineRTF @zbetcheckin
2019-06-10 14:13:07http://2be431d7.ngrok.io/1/c/py.msiOffline@JAMESWT_MHT
2019-06-10 14:13:06http://2be431d7.ngrok.io/1/c/TQFDEX.DocOfflineAgentTesla link @JAMESWT_MHT
2019-06-10 14:13:05http://2be431d7.ngrok.io/1/j/py.msiOffline@JAMESWT_MHT
2019-06-10 14:13:05http://2be431d7.ngrok.io/1/j/KYFGML.DocOffline@JAMESWT_MHT
2019-06-10 14:13:04http://2be431d7.ngrok.io/1/k/NKNTYQ.DocOffline@JAMESWT_MHT
2019-06-10 14:13:03http://2be431d7.ngrok.io/1/k/py.msiOffline@JAMESWT_MHT
2019-05-27 14:38:03http://8d2aef60.ngrok.io/boom/Banco%20Sabadell%...Offlineexe Loki link @oppimaniac
2019-04-02 06:32:13https://apache.eu.ngrok.io/uac_bypass.vbsOffline@JayTHL
2018-11-28 19:34:02http://37e0b7ed.ngrok.io/scan/host.htmlOfflinehta Loader @de_aviation
2018-11-28 19:31:09http://37e0b7ed.ngrok.io/scan/svshost.exeOfflineexe Loki link @de_aviation
2018-11-28 19:29:10http://37e0b7ed.ngrok.io/scan/winsc.exeOfflineexe Loki link lokibot link NanoCore link njRAT link rat @de_aviation
2018-11-28 08:51:13https://37e0b7ed.ngrok.io/scan/winsc.exeOfflineLoki link NanoCore link @Racco42