Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Is there a maintained list of URLs that contain malicious content. These URLs may be involved in Phishing, Scams, Viri, or other Malware.

Please indicate in your answer if the list is freely distributed or if there is a cost associated with it.

One list that I have found so far is PhishTank.com

URLBlackList.com also looked promising.

share|improve this question

closed as too localized by Jeff Ferland Mar 6 '13 at 6:59

This question is unlikely to help any future visitors; it is only relevant to a small geographic area, a specific moment in time, or an extraordinarily narrow situation that is not generally applicable to the worldwide audience of the internet. For help making this question more broadly applicable, visit the help center. If this question can be reworded to fit the rules in the help center, please edit the question.

I'm just curious, but what for? Sites don't usually like giving away full databases as they spend time/money/effort compiling them and it costs bandwidth/hosting to dump them. Cheers, –  NULLZ Mar 6 '13 at 5:53
This is a research project to determine classification models that may be used in detecting malicious URLs. I'm taking parts of the URL, and other features of the host, such as DNS, geographic region, to try to build a classifier to detect a url is malicious before the user tries to access it. –  msmith0957 Mar 6 '13 at 6:00
Very cool. Best of luck. I wish i had some additional resources for you but unfortunately I do not. Cheers –  NULLZ Mar 6 '13 at 6:02
I suspect looking at web logs and email spam might be your best bet for collecting a list yourself. You will still have to classify the URLs manually, which will be hard work, but once you have URLs you can use the lookup services you mentioned to determine whether a URL is malicious or not. It won't hurt to contact web filtering companies, explain your situation and ask if they can help at all. The APT1 report has a big list of malicious domains and IP addresses. –  Ladadadada Mar 6 '13 at 10:22

1 Answer 1

online list of infected or malicious urls

malware domain blocklist

The malware domain blocklist have over 12000+ domains lists.


1300+ Last updated 2013-03-05

Blacklist zeustracker

800+ listing

If you are looking for entire compressed DB


If you are smart enough to write an http parser you can extract the required fields Complete URL list

share|improve this answer
Is there a blacklist available for download? I'm not looking for browser plugins or similar software that tell you whether the site you're currently viewing is malicious or not. –  msmith0957 Mar 6 '13 at 5:47
@msmith0957 unless its an open-source project have you ever thought why these companies would sell their crown jewels to free market?. You should know this information is extracted from expensive and sometimes complex filtering technologies. –  Saladin Mar 6 '13 at 6:10
Thanks for the update, some of these may work out. Sadly, they're just the domain, where as I'd prefer a full URL so I can work with lexical features of the URL post TLD. We'll see how it goes :) –  msmith0957 Mar 6 '13 at 6:34

Not the answer you're looking for? Browse other questions tagged or ask your own question.