URLhaus Feeds

URLhaus offers a country, ASN (AS number) and Top Level Domain (TLD) feed for network operators / Internet Service Providers (ISPs), Computer Emergency Response Teams (CERTs) and domain registries.

Caution!

URLhaus feeds are not intended for blockling / blacklisting nor for being used as an Indicator Of Compromise (IOC). If you are looking for a blocklist or IOCs, please use one of the datasets provided by the URLhaus API.

ASN Feed

The ASN Feed contains all URLs from the URLhaus database whose domain name resolve to an IP address associated with a particular AS number, no matter whether the URL is active (online) or not.

Please do not fetch the feed more often than every 10 minutes.

Country Feed

The Country Feed contains all URLs from the URLhaus database whose domain name resolve to an IP address associated with a particular geo IP location (country code), no matter whether the URL is active (online) or not.

Please do not fetch the feed more often than every 10 minutes.

TLD Feed

The TLD Feed contains all URLs from the URLhaus database whose domain name is associated with a specific ccTDL or gTLD (e.g. de, com, etc), no matter whether the URL is active (online) or not.

Please do not fetch the feed more often than every 10 minutes.