URLhaus
URLhaus shares URLs identified as being used to distribute malware and supports tracking those reported links.
About URLhaus
URLhaus is a platform from abuse.ch and Spamhaus for sharing URLs identified as being used for malware distribution. Users can browse the database of reported URLs, submit new URLs, and use an API to push and pull signals and automate bulk queries.
The data includes IP, domain and malware metadata and can be integrated into SIEM or threat intelligence platforms. Reports are contributed by volunteers through a community hub, and URLhaus URLs also enrich Spamhaus datasets for threat hunting, email and network protection.
Key features
- Browse database of URLs reported for malware distribution
- Submit malware URLs to share with community
- Push and pull signals through API
- Automate bulk URL queries via API
- Integrate data into SIEM or threat intelligence platforms
- Access context metadata on IP, domain and malware signals
Best for: Security practitioners and threat hunters who track malware distribution URLs and botnet-related threats.
Good for
- Database focused on URLs reported for malware distribution
- API for pushing, pulling and bulk querying signals
- Integration path for SIEM and threat intelligence platforms
URLhaus at a glance
- Website
- urlhaus.abuse.ch
- Category
- Privacy & Security › Security Tools
- Type
- Website
- Pricing
- Not confirmed. Check the site
- Platforms
- Web
- Open source
- Not stated
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
Guides for Security Tools
URLhaus alternatives
Tools and sites you could use instead, ranked by how closely they match.
IBM X-Force Exchange is a threat intelligence sharing platform for researching security indicators and emerging threats.
The URL Decoder and Encoder converts text between encoded and decoded forms, including JavaScript URLs.
Test how trackers and fingerprinting systems see your browser with Cover Your Tracks from the EFF.
Fraunhofer FKIE maintains Malpedia, a reference that organizes information about malware families.
Canary Tokens creates decoy files and links that alert users when someone accesses them, helping detect unauthorized activity.
This GitHub list curates cryptography resources and links for people exploring the field.
Popular in Security Tools
Well-known listings from the same topic.
Online Password Hash Crackonlinehashcrack.comOTP Authapps.apple.com/app/otp-auth/id659877384MD5 reverse lookupmd5.gromweb.comMozilla SSLssl-config.mozilla.orgchallenges.rechallenges.reGoPlus Locker V3gopluslabs.io
URLhaus FAQ
What does URLhaus do?
It shares URLs identified as being used for malware distribution to help identify, track and mitigate malware and botnet-related threats.
How can I contribute malicious URLs?
You can report URLs to the database to share them with the community.
How can I use URLhaus data in existing tools?
You can browse the database or use the API to pull signals, run bulk queries, and integrate the data into a SIEM or threat intelligence platform.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.