Statistics

Most Delivery Payload

Heodo

Show
Average Takedown Time

8 days, 22 hours, 21 minutes

Show
Top Malware Hosting Network

AS14061 DIGITALOCEAN-ASN

Show

Number of submissions (past 30 days)


The chart below documented the number of submissions (unique malware URL) to URLhaus per day over a period of 30 days.


Top Reporters


It wouldn't be possible to operate URLhaus without the help of volunters who report malware URLs to URLhaus. The table below shows the top reporters and their Twitter handle.

RankReporterSubmissions
1@zbetcheckin21'017
2@JRoosen16'494
3@Cryptolaemus18'622
4@unixronin7'804
5@Techhelplistcom5'650
6@JAMESWT_MHT4'504
7@ps66uk4'228
8@abuse_ch4'078
9@cocaman3'337
10@lovemalware2'455
11@oppimaniac2'355
12@p5yb34m2'181
13@bjornruberg1'612
14@de_aviation1'397
15@_nt1807

Most Delivered Payload


Malware URLs deliver all kind of different payloads. This chart shows the number of payload per malware family (signature) identified / crawled by URLhaus.

Top Tags


Most seen tag associated with malware URLs tracked by URLhaus.

Top Malware Hosting Networks


The chart below shows the top malware hosting network by ASN. Please consider that some of them just offer CDN or proxy services and are hence not hosting the malicious content it self rather than facilitate delivering the malicious payload to the user.

Top malware hosting networks in total (counting online and offline malware distribution sites):

RankASNCountryAverage Reaction TimeMalware URLs
1AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC- CA6 days, 6 hours, 52 minutes6'721
2AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- US9 days, 5 hours, 18 minutes5'207
3AS16276 OVH- FR5 days, 23 hours, 51 minutes3'087
4AS46606 UNIFIEDLAYER-AS-1 - Unified Layer- US2 days, 10 hours, 58 minutes2'950
5AS50673 SERVERIUS-AS- NL4 days, 11 hours, 21 minutes1'789
6AS31034 ARUBA-ASN- IT6 days, 3 hours, 49 minutes1'302
7AS16509 AMAZON-02 - Amazon.com, Inc.- IE8 days, 1 hours, 21 minutes1'173
8AS20013 CYRUSONE - CyrusOne LLC- US5 days, 18 hours, 30 minutes1'109
9AS13335 CLOUDFLARENET - Cloudflare, Inc.- US13 days, 7 hours, 9 minutes1'088
10AS24940 HETZNER-AS- DE2 days, 11 hours, 6 minutes1'038
11AS15169 GOOGLE - Google LLC- US8 days, 9 hours, 30 minutes1'027
12AS32244 LIQUIDWEB - Liquid Web, L.L.C- US12 days, 4 hours, 42 minutes1'011
13AS6724 STRATO STRATO AG- DE1 day, 9 hours, 34 minutes911
14AS53667 PONYNET - FranTech Solutions- US13 days, 8 hours, 31 minutes857
15AS34619 CIZGI- TR12 days, 7 hours, 27 minutes845

Top malware hosting networks, hosting active malware content (counting online malware distribution sites only):

RankASNCountryAverage Reaction TimeMalware URLs
1AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC- US6 days, 6 hours, 52 minutes354
2AS4134 CHINANET-BACKBONE No.31,Jin-rong Street- CN1 month, 9 days, 22 hours, 25 minutes259
3AS48815 CRITICALCASE- IT21 hours, 58 minutes151
4AS60144 THREE-W-INFRA-AS -- TRANSIT --- NL9 days, 10 hours, 25 minutes141
5AS46606 UNIFIEDLAYER-AS-1 - Unified Layer- US2 days, 10 hours, 58 minutes139
6AS16276 OVH- FR5 days, 23 hours, 51 minutes135
7AS4837 CHINA169-BACKBONE CHINA UNICOM China169 Backbone- CN1 month, 24 days, 21 hours, 48 minutes116
8AS53667 PONYNET - FranTech Solutions- US13 days, 8 hours, 31 minutes96
9AS36352 AS-COLOCROSSING - ColoCrossing- US13 days, 14 hours, 9 minutes74
10AS13335 CLOUDFLARENET - Cloudflare, Inc.- US13 days, 7 hours, 9 minutes66
11AS8342 RTCOMM-AS- RU10 days, 9 hours, 6 minutes66
12AS37963 CNNIC-ALIBABA-CN-NET-AP Hangzhou Alibaba Advertising Co.,Ltd.- CN1 month, 2 days, 3 hours, 45 minutes57
13AS34619 CIZGI- TR12 days, 7 hours, 27 minutes55
14AS15169 GOOGLE - Google LLC- US8 days, 9 hours, 30 minutes53
15AS8560 ONEANDONE-AS Brauerstrasse 48- US13 days, 9 hours, 2 minutes50

Takedown Statistics


URLhaus is sending out abuse reports to hosting providers, hosting malware distribution sites. The following chart shows the number of active malware distribution sites and the number of unique abuse reports sent per day.


The following table shows the top 15 hosting providers with the fastest abuse desks. To generated these statistics, URLhaus measures the time between when URLhaus sent the abuse complaint to the hosting provider and when the reported content goes offline. Please consider that the accuracy is +/- 1 hour.

RankASN GoodCountryOnlineOfflineAverage Reaction Time
1AS34243 WEBAGE- GB019 minutes
2AS16912 4-LESS-NETWORK - 4 Less Communications, Inc.- US0111 minutes
3AS197595 OBE- SE0112 minutes
4AS7540 HKCIX-AS-AP HongKong Commercial Internet Exchange- HK0118 minutes
5AS204983 CYBERFUSION- NL0123 minutes
6AS198371 NINET- RS0125 minutes
7AS7859 PAIR-NETWORKS - pair Networks- US0126 minutes
8AS132937 DIADEM-AS Diadem Technologies Pvt. Ltd.- IN0126 minutes
9AS201563 AVALON-AS- HR0128 minutes
10AS60819 SAFENAMES-AS- GB0129 minutes
11AS34358 CLAXTELECOM- RO0130 minutes
12AS8278 TUC-AS- GR0132 minutes
13AS2614 ROEDUNET- RO0133 minutes
14AS62370 SNEL- NL0936 minutes
15AS25386 INTERTELECOM-AS- UA0139 minutes

The following table shows the top 15 hosting providers with the slowest abuse desks. To generated these statistics, URLhaus measures the time between when URLhaus sent the abuse complaint to the hosting provider and when the reported content goes offline. Please consider that the accuracy is +/- 1 hour.

RankASN PoorCountryOnlineOfflineAverage Reaction Time
1AS29468 INFRACOM- SE013 months, 23 days, 10 hours, 2 minutes
2AS50482 KAZAKHTELECOM-AS- KZ073 months, 18 days, 7 hours, 2 minutes
3AS134771 CHINANET-SICHUAN-CHENGDU-MAN CHINANET Sichuan province Chengdu MAN network- CN243 months, 14 days, 16 hours, 8 minutes
4AS204343 COMPUBYTE-AS- RU023 months, 13 days, 8 hours, 53 minutes
5AS28195 Com4 Data Center Eireli EPP- BR013 months, 11 days, 8 hours, 20 minutes
6AS9394 CTTNET China TieTong Telecommunications Corporation- CN1113 months, 9 days, 15 hours, 43 minutes
7AS136639 SCUD-AS-IN Scud Communication Pvt Ltd- IN063 months, 9 days, 13 hours, 59 minutes
8AS4812 CHINANET-SH-AP China Telecom (Group)- CN283 months, 9 days, 4 hours, 21 minutes
9AS15133 EDGECAST - MCI Communications Services, Inc. d/b/a Verizon Business- US023 months, 8 days, 19 hours, 56 minutes
10AS17623 CNCGROUP-SZ China Unicom Shenzen network- CN013 months, 0 days, 17 hours, 28 minutes
11AS136800 XIAOZHIYUN-AS ICIDC NETWORK- HK013 months, 0 days, 3 hours, 31 minutes
12AS23889 MauritiusTelecom- MU032 months, 29 days, 15 hours, 8 minutes
13AS1273 CW Vodafone Group PLC- DE0132 months, 24 days, 21 hours, 55 minutes
14AS4847 CNIX-AP China Networks Inter-Exchange- CN1122 months, 22 days, 17 hours, 49 minutes
15AS24323 AAMRA-NETWORKS-AS-AP aamra networks limited- BD0142 months, 22 days, 17 hours, 43 minutes

The full list of average reaction time over all hosting providers (ASNs) can be found here:

If you are a hosting provider, network owner or national CERT, you can subscribe to the URLhaus feed for your ASN or country here: