Is there a maintained list of URLs that contain malicious content. These URLs may be involved in Phishing, Scams, Viri, or other Malware.

Please indicate in your answer if the list is freely distributed or if there is a cost associated with it.

One list that I have found so far is PhishTank.com

URLBlackList.com also looked promising.

  • I'm just curious, but what for? Sites don't usually like giving away full databases as they spend time/money/effort compiling them and it costs bandwidth/hosting to dump them. Cheers,
    – NULLZ
    Mar 6, 2013 at 5:53
  • 3
    This is a research project to determine classification models that may be used in detecting malicious URLs. I'm taking parts of the URL, and other features of the host, such as DNS, geographic region, to try to build a classifier to detect a url is malicious before the user tries to access it. Mar 6, 2013 at 6:00
  • Very cool. Best of luck. I wish i had some additional resources for you but unfortunately I do not. Cheers
    – NULLZ
    Mar 6, 2013 at 6:02
  • I suspect looking at web logs and email spam might be your best bet for collecting a list yourself. You will still have to classify the URLs manually, which will be hard work, but once you have URLs you can use the lookup services you mentioned to determine whether a URL is malicious or not. It won't hurt to contact web filtering companies, explain your situation and ask if they can help at all. The APT1 report has a big list of malicious domains and IP addresses.
    – Ladadadada
    Mar 6, 2013 at 10:22
  • There are some more lists: stackoverflow.com/a/31933878/1601703
    – vasili111
    Aug 11, 2015 at 5:47

1 Answer 1


online list of infected or malicious urls

malware domain blocklist

The malware domain blocklist have over 12000+ domains lists.


1300+ Last updated 2013-03-05

Blacklist zeustracker

800+ listing

If you are looking for entire compressed DB


If you are smart enough to write an http parser you can extract the required fields Complete URL list

  • Is there a blacklist available for download? I'm not looking for browser plugins or similar software that tell you whether the site you're currently viewing is malicious or not. Mar 6, 2013 at 5:47
  • @msmith0957 unless its an open-source project have you ever thought why these companies would sell their crown jewels to free market?. You should know this information is extracted from expensive and sometimes complex filtering technologies.
    – Saladin
    Mar 6, 2013 at 6:10
  • Thanks for the update, some of these may work out. Sadly, they're just the domain, where as I'd prefer a full URL so I can work with lexical features of the URL post TLD. We'll see how it goes :) Mar 6, 2013 at 6:34
  • There are some more lists: stackoverflow.com/a/31933878/1601703
    – vasili111
    Aug 11, 2015 at 5:44

Not the answer you're looking for? Browse other questions tagged .