Statistics

Number of submissions (past 30 days)

The chart below documents the number of submissions (unique malware URL) to URLhaus per day over a period of 30 days.

Top Reporters

It wouldn't be possible to operate URLhaus without the help of volunteers who report malware URLs to URLhaus. The table below shows the top reporters and their Twitter handle.

Blacklist Comparison

URLhaus reports malware distribution sites to Spamhaus DBL, SURBL and Google Safe Browsing (GSB). In addition, several vendors of IT-security software are consuming URLhaus feeds to enrich their product(s). The statistics below measures the perfomance of several blacklist and DNS providers by counting the number of blacklisted domain names and compare them against each other.

Most Delivered Payload

Malware URLs deliver all kind of different payloads. This chart shows the number of payload per malware family (signature) identified / crawled by URLhaus.

Top Tags

Most seen tag associated with malware URLs tracked by URLhaus.

Top Malware Hosting Networks

The chart below shows the top malware hosting network by ASN. Please consider that some of them just offer CDN or proxy services and are hence not hosting the malicious content it self rather than facilitate delivering the malicious payload to the user.

Top malware hosting networks in total (counting online and offline malware distribution sites):

Rank	ASN	Country	Average Reaction Time	Malware URLs
1	AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC	US	5 days, 5 hours, 46 minutes	34'303
2	AS15169 GOOGLE - Google LLC	US	9 days, 12 hours, 39 minutes	15'705
3	AS4837 CHINA169-BACKBONE CHINA UNICOM China169 Backbone	CN	5 days, 20 hours, 18 minutes	11'616
4	AS13335 CLOUDFLARENET - Cloudflare, Inc.	US	11 days, 2 hours, 51 minutes	10'901
5	AS16276 OVH	FR	12 days, 8 hours, 2 minutes	10'614
6	AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC	US	29 days, 23 hours, 11 minutes	9'400
7	AS4134 CHINANET-BACKBONE No.31,Jin-rong Street	CN	20 days, 14 hours, 39 minutes	8'239
8	AS46606 UNIFIEDLAYER-AS-1 - Unified Layer	US	21 days, 10 hours, 14 minutes	6'625
9	AS132525 CMNET-HEILONGJIANG-CN HeiLongJiang Mobile Communication Company Limited	CN	1 day, 6 hours, 21 minutes	5'706
10	AS54290 HOSTWINDS - Hostwinds LLC.	US	9 days, 6 hours, 4 minutes	4'210
11	AS32244 LIQUIDWEB - Liquid Web, L.L.C	US	16 days, 9 hours, 53 minutes	4'121
12	AS7506 INTERQ GMO Internet,Inc	JP	5 days, 15 hours, 33 minutes	3'483
13	AS36352 AS-COLOCROSSING - ColoCrossing	US	6 days, 23 hours, 39 minutes	3'476
14	AS16509 AMAZON-02 - Amazon.com, Inc.	KR	11 days, 15 hours, 38 minutes	3'474
15	AS53667 PONYNET - FranTech Solutions	US	18 days, 21 hours, 46 minutes	3'182

Top malware hosting networks, hosting active malware content (counting online malware distribution sites only):

Rank	ASN	Country	Average Reaction Time	Malware URLs
1	AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC	US	29 days, 23 hours, 11 minutes	676
2	AS8068 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation	US	1 month, 26 days, 2 hours, 24 minutes	519
3	AS46606 UNIFIEDLAYER-AS-1	US	21 days, 10 hours, 14 minutes	280
4	AS15169 GOOGLE - Google LLC	US	9 days, 12 hours, 39 minutes	199
5	AS4134 CHINANET-BACKBONE No.31,Jin-rong Street	CN	20 days, 14 hours, 39 minutes	190
6	AS42864 GIGANET-HU GigaNet Internet Service Provider Co	HR	8 days, 13 hours, 49 minutes	142
7	AS208666 ESTROWEB	EE	6 days, 5 hours, 15 minutes	130
8	AS4766 KIXS-AS-KR Korea Telecom	KR	1 month, 2 days, 11 hours, 56 minutes	116
9	AS9318 SKB-AS SK Broadband Co Ltd	KR	2 months, 7 days, 2 hours, 35 minutes	99
10	AS206898 BLADESERVERS	NL	29 days, 6 hours, 55 minutes	81
11	AS4837 CHINA169-BACKBONE CHINA UNICOM China169 Backbone	CN	5 days, 20 hours, 18 minutes	71
12	AS47510 CREXFEXPEX-RUSSIA	RU	2 days, 9 hours, 26 minutes	57
13	AS36352 AS-COLOCROSSING	US	6 days, 23 hours, 39 minutes	56
14	AS54290 HOSTWINDS	US	9 days, 6 hours, 4 minutes	54
15	AS394695 PUBLIC-DOMAIN-REGISTRY - PDR	US	24 days, 0 hours, 10 minutes	47

Takedown Statistics

URLhaus is sending out abuse reports to hosting providers, hosting malware distribution sites. The following chart shows the number of active malware distribution sites and the number of unique abuse reports sent per day.

The following table shows the top 15 hosting providers with the fastest abuse desks. To generated these statistics, URLhaus measures the time between when URLhaus sent the abuse complaint to the hosting provider and when the reported content goes offline. Please consider that the accuracy is +/- 1 hour.

Rank	ASN	Country	Online	Offline	Average Reaction Time
1	AS136665 ELLFIBER-AS Ell Innovations Pvt Ltd	IN	0	1	1 minute
2	AS13022	AT	0	1	5 minutes
3	AS22438 CLEAR-RATE-COMMUNICATIONS - Clear Rate Communications, Inc.	US	0	1	7 minutes
4	AS34243 WEBAGE	GB	0	1	9 minutes
5	AS8739 ICDSOFT	HK	0	1	9 minutes
6	AS58073 YISP-AS	NL	0	5	11 minutes
7	AS6789 CRELCOM-NET	UA	0	1	11 minutes
8	AS16912 4-LESS-NETWORK - 4 Less Communications, Inc.	US	0	1	11 minutes
9	AS263891 TURBONET INFO E TELECOM	BR	0	1	14 minutes
10	AS56977 ASSTILAR	RU	0	1	15 minutes
11	AS133699 ZIPTELIT-AS-IN Ziptel IT Solutions Pvt Ltd	IN	0	1	18 minutes
12	AS29953 MORNCOMM - Cygnet Internet Services Inc	CA	0	1	18 minutes
13	AS29083 DE-WORLDBONE-AS	DE	0	1	18 minutes
14	AS20926 PULSATION-AS	FR	0	1	19 minutes
15	AS12296 ADANET-	TR	0	1	20 minutes

The following table shows the top 15 hosting providers with the slowest abuse desks. To generated these statistics, URLhaus measures the time between when URLhaus sent the abuse complaint to the hosting provider and when the reported content goes offline. Please consider that the accuracy is +/- 1 hour.

Rank	ASN	Country	Online	Offline	Average Reaction Time
1	AS23520 COLUMBUS-NETWORKS - Columbus Networks USA, Inc.	BS	0	1	17 months, 18 days, 14 hours, 10 minutes
2	AS134768 CHINANET-SICHUAN-CHENGDU-MAN CHINANET Sichuan province Chengdu MAN network	CN	0	1	16 months, 29 days, 21 hours, 3 minutes
3	AS58852 GZGD Guizhou provincial radio and television information Network Inc	CN	0	2	16 months, 23 days, 14 hours, 40 minutes
4	AS6354 LYCOS - Lycos, Inc.	US	0	1	14 months, 28 days, 16 hours, 13 minutes
5	AS29713 ELIA-60 - Reliable Hosting Services	US	0	2	14 months, 25 days, 10 hours, 35 minutes
6	AS11426 TWC-11426-CAROLINAS - Charter Communications Inc	US	3	1	14 months, 18 days, 13 hours, 33 minutes
7	AS17429 BGCTVNET BEIJING GEHUA CATV NETWORK CO.LTD	CN	0	1	14 months, 13 days, 9 hours, 1 minutes
8	AS35401 SUNLINK-AS Sunlink Telecom ISP, Tula, Russia	RU	0	1	14 months, 13 days, 3 hours, 56 minutes
9	AS24165 PHOENIX-NET-TW PHOENIX CATV CO.,LTD	TW	0	1	14 months, 9 days, 6 hours, 12 minutes
10	AS29413 KOMRO-AS	DE	0	1	14 months, 5 days, 20 hours, 49 minutes
11	AS17227 ATT-CERFNET-BLOCK - AT&T Enhanced Network Services	US	0	1	14 months, 3 days, 19 hours, 1 minutes
12	AS131259 QX-AS-AP QOXY PTE LTD	SG	0	5	13 months, 22 days, 4 hours, 46 minutes
13	AS136958 UNICOM-GUANGZHOU-IDC China Unicom Guangdong IP network	CN	0	2	13 months, 20 days, 21 hours, 55 minutes
14	AS44234 GAYA-AS P.O.Hviezdoslava 23B	SK	0	3	13 months, 18 days, 2 hours, 48 minutes
15	AS267513 Seanet Telecom Carazinho Eireli	BR	0	1	13 months, 10 days, 14 hours, 43 minutes

The full list of average reaction time over all hosting providers (ASNs) can be found here:

• Average Reaction Time (for all hosting providers)

If you are a hosting provider, network owner or national CERT, you can subscribe to the URLhaus feed for your ASN or country here:

• URLhaus Feeds