URLhaus (abuse.ch)

Public malware URL database curated by the abuse.ch research team.

URLhaus is a community-driven feed of URLs known to deliver malware — droppers, info-stealers, ransomware payloads. It's free, open, and used by most reputable URL-reputation services as one input among many.

URLhaus is especially strong on commodity-malware distribution infrastructure (Emotet, Qakbot, IcedID dropping URLs), but weaker on social-engineering phishing.

PhishGuard checks every scanned URL against URLhaus as one of its sources.

Related terms

Google Safe Browsing

Google's real-time blocklist of phishing and malware URLs. The most widely deployed URL-reputation feed in the world.

VirusTotal

URL/file scanning service that aggregates verdicts from 70+ antivirus engines and threat-intel feeds.

Got a URL you're unsure about?

Paste it into our free scanner — verdict in seconds, 10+ threat-intel sources.

Scan a URL →