Statistics

Most Delivery Payload

Heodo

Show
Average Takedown Time

7 days, 23 hours, 46 minutes

Show
Top Malware Hosting Network

AS12876 ONLINE S.A.S.

Show

Number of submissions (past 30 days)


The chart below documented the number of submissions (unique malware URL) to URLhaus per day over a period of 30 days.


Top Reporters


It wouldn't be possible to operate URLhaus without the help of volunters who report malware URLs to URLhaus. The table below shows the top reporters and their Twitter handle.

RankReporterSubmissions
1@JRoosen16'434
2@zbetcheckin15'552
3@unixronin7'786
4@Techhelplistcom5'388
5@Cryptolaemus14'595
6@JAMESWT_MHT4'503
7@ps66uk4'225
8@abuse_ch3'727
9@cocaman3'299
10@lovemalware2'455
11@p5yb34m2'181
12@oppimaniac2'117
13@bjornruberg1'564
14@de_aviation1'151
15@_nt1796

Most Delivered Payload


Malware URLs deliver all kind of different payloads. This chart shows the number of payload per malware family (signature) identified / crawled by URLhaus.

Top Tags


Most seen tag associated with malware URLs tracked by URLhaus.

Top Malware Hosting Networks


The chart below shows the top malware hosting network by ASN. Please consider that some of them just offer CDN or proxy services and are hence not hosting the malicious content it self rather than facilitate delivering the malicious payload to the user.

Top malware hosting networks in total (counting online and offline malware distribution sites):

RankASNCountryAverage Reaction TimeMalware URLs
1AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC- IN6 days, 14 hours, 44 minutes5'239
2AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- US9 days, 1 hours, 57 minutes5'007
3AS16276 OVH- FR5 days, 13 hours, 14 minutes2'642
4AS46606 UNIFIEDLAYER-AS-1 - Unified Layer- US2 days, 11 hours, 1 minutes2'481
5AS50673 SERVERIUS-AS- NL4 days, 7 hours, 15 minutes2'182
6AS20013 CYRUSONE - CyrusOne LLC- US5 days, 2 hours, 24 minutes1'112
7AS16509 AMAZON-02 - Amazon.com, Inc.- AU7 days, 8 hours, 34 minutes1'040
8AS31034 ARUBA-ASN- IT5 days, 15 hours, 27 minutes1'014
9AS6724 STRATO STRATO AG- DE1 day, 7 hours, 49 minutes909
10AS24940 HETZNER-AS- DE2 days, 14 hours, 38 minutes883
11AS13335 CLOUDFLARENET - Cloudflare, Inc.- US14 days, 6 hours, 25 minutes862
12AS32244 LIQUIDWEB - Liquid Web, L.L.C- US15 days, 11 hours, 10 minutes837
13AS198610 BEGET-AS- RU1 day, 22 hours, 12 minutes763
14AS22612 NAMECHEAP-NET - Namecheap, Inc.- US11 days, 11 hours, 9 minutes761
15AS15169 GOOGLE - Google LLC- US9 days, 15 hours, 24 minutes753

Top malware hosting networks, hosting active malware content (counting online malware distribution sites only):

RankASNCountryAverage Reaction TimeMalware URLs
1AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC- US6 days, 14 hours, 41 minutes283
2AS12876 ONLINE S.A.S.- NL12 days, 22 hours, 36 minutes216
3AS4134 CHINANET-BACKBONE No.31,Jin-rong Street- CN25 days, 10 hours, 54 minutes206
4AS26496 AS-26496-GO-DADDY-COM-LLC - GoDaddy.com, LLC- US9 days, 1 hours, 57 minutes171
5AS16276 OVH- FR5 days, 13 hours, 14 minutes151
6AS46606 UNIFIEDLAYER-AS-1 - Unified Layer- US2 days, 11 hours, 1 minutes130
7AS36352 AS-COLOCROSSING - ColoCrossing- US11 days, 15 hours, 21 minutes106
8AS51659 ASBAXET- RU8 days, 6 hours, 53 minutes91
9AS8342 RTCOMM-AS- RU9 days, 17 hours, 36 minutes87
10AS53667 PONYNET - FranTech Solutions- US12 days, 6 hours, 47 minutes86
11AS4837 CHINA169-BACKBONE CHINA UNICOM China169 Backbone- CN1 month, 2 days, 8 hours, 49 minutes79
12AS31034 ARUBA-ASN- IT5 days, 15 hours, 27 minutes77
13AS32244 LIQUIDWEB - Liquid Web, L.L.C- US15 days, 11 hours, 10 minutes63
14AS25535 ASN-RUCENTER-HOSTING- RU9 days, 17 hours, 33 minutes53
15AS37963 CNNIC-ALIBABA-CN-NET-AP Hangzhou Alibaba Advertising Co.,Ltd.- CN1 month, 4 days, 9 hours, 41 minutes52

Takedown Statistics


URLhaus is sending out abuse reports to hosting providers, hosting malware distribution sites. The following chart shows the number of active malware distribution sites and the number of unique abuse reports sent per day.


The following table shows the top 15 hosting providers with the fastest abuse desks. To generated these statistics, URLhaus measures the time between when URLhaus sent the abuse complaint to the hosting provider and when the reported content goes offline. Please consider that the accuracy is +/- 1 hour.

RankASN GoodCountryOnlineOfflineAverage Reaction Time
1AS34243 WEBAGE- GB019 minutes
2AS16912 4-LESS-NETWORK - 4 Less Communications, Inc.- US0111 minutes
3AS19873 S C SOLUCOES EM TECNOLOGIA S A- BR0121 minutes
4AS204983 CYBERFUSION- NL0123 minutes
5AS7859 PAIR-NETWORKS - pair Networks- US0126 minutes
6AS132937 DIADEM-AS Diadem Technologies Pvt. Ltd.- IN0126 minutes
7AS8278 TUC-AS- GR0132 minutes
8AS62370 SNEL- NL0936 minutes
9AS59504 Hosting vpsville.ru- RU01440 minutes
10AS197781 AVERS-AS- UA0144 minutes
11AS42363 PHPNET-AS- FR0549 minutes
12AS34011 GD-EMEA-DC-CGN1- DE0252 minutes
13AS47236 CITYLINK-AS- RU0252 minutes
14AS15830 TELECITY-LON- No0252 minutes
15AS197021 MADNET-AS- RS021 hour, 4 minutes

The following table shows the top 15 hosting providers with the slowest abuse desks. To generated these statistics, URLhaus measures the time between when URLhaus sent the abuse complaint to the hosting provider and when the reported content goes offline. Please consider that the accuracy is +/- 1 hour.

RankASN PoorCountryOnlineOfflineAverage Reaction Time
1AS136800 XIAOZHIYUN-AS ICIDC NETWORK- HK013 months, 0 days, 3 hours, 31 minutes
2AS136639 SCUD-AS-IN Scud Communication Pvt Ltd- IN332 months, 27 days, 2 hours, 1 minutes
3AS23889 MauritiusTelecom- MU122 months, 22 days, 4 hours, 51 minutes
4AS1916 - BR012 months, 21 days, 5 hours, 31 minutes
5AS30152 BEYOND-HOSTING - Beyond Hosting, LLC- US022 months, 20 days, 1 hours, 56 minutes
6AS26202 KINEX-NETWORKING - Kinex Networking Solutions, Inc.- US042 months, 19 days, 1 hours, 24 minutes
7AS8048 CANTV Servicios, Venezuela- VE1122 months, 13 days, 9 hours, 15 minutes
8AS55697 USU-AS-ID Universitas Sumatera Utara- ID272 months, 12 days, 12 hours, 2 minutes
9AS12714 TI-AS Moscow, Russia- RU112 months, 11 days, 3 hours, 41 minutes
10AS33363 BHN-TAMPA - BRIGHT HOUSE NETWORKS, LLC- US292 months, 10 days, 19 hours, 17 minutes
11AS20202 CRUCIAL - Crucial Paradigm- US412 months, 9 days, 6 hours, 45 minutes
12AS38030 ALAP-AS-BD ALAP COMMUNICATION LTD. DOMESTIC DATA CONNECTIVITY SERVICE &- BD022 months, 9 days, 5 hours, 11 minutes
13AS2561 EUN- EG062 months, 9 days, 1 hours, 58 minutes
14AS131414 LVSOFT-AS-VN Long Van Soft Solution JSC- VN232 months, 7 days, 16 hours, 5 minutes
15AS134771 CHINANET-SICHUAN-CHENGDU-MAN CHINANET Sichuan province Chengdu MAN network- CN642 months, 7 days, 5 hours, 43 minutes

The full list of average reaction time over all hosting providers (ASNs) can be found here:

If you are a hosting provider, network owner or national CERT, you can subscribe to the URLhaus feed for your ASN or country here: