Malware URLs

The latest malicious URLs detected by the Anti-Virus Cloud Engine — a fully automated real-time security solution that works like an always up-to-date blacklist.

All URLs listed here are dangerous. Do not enter them into your browser unless you are a security professional.
URLRiskDiscovered
chocolate[.]icacho.comSuspicious10 minutes ago
die-pic[.]ers.atSuspicious10 minutes ago
star0[.]oves.xyzSuspicious10 minutes ago
pla[.]lusSuspicious10 minutes ago
agt[.]a.comSuspicious10 minutes ago
f0560[.]6.xsph.ruSuspicious11 minutes ago
spa[.]curity.funSuspicious11 minutes ago
185.212.1[.]15/www/login.phpSuspicious11 minutes ago
f0[.]77.xsph.ruSuspicious11 minutes ago
f056847[.]ph.ruSuspicious11 minutes ago
dafabe[.]ifeSuspicious11 minutes ago
pub-c342c[.]279a14049a3dd317561a73a6e.r2.devSuspicious11 minutes ago
hand[.]htzip.comSuspicious11 minutes ago
02bbe6.os[.]n-beijing.aliyuncs.comSuspicious11 minutes ago
en-l[.]n.comSuspicious18 minutes ago
la[.]ewddns.comSuspicious18 minutes ago
vis[.]adev.irSuspicious19 minutes ago
mwak[.]mSuspicious19 minutes ago
pageser[.]e.topSuspicious27 minutes ago
pro[.]zero.google/2025/05/the-windows-registry-adventure..Suspicious31 minutes ago
projectzero.goog[.]025/12/windows-exploitation-technique..Suspicious31 minutes ago
cofli[.]bostonSuspicious36 minutes ago
1wi[.]apk.clSuspicious37 minutes ago
vyvod-iz[.]poya-na-domu-nizhnij-novgorod-5.ruSuspicious37 minutes ago
pio[.]77d7.funSuspicious37 minutes ago
kaufver[.]eich.comSuspicious37 minutes ago
vy[.]-iz-zapoya-na-domu-samara-2.ruSuspicious38 minutes ago
xkqnz[.]q.xyzSuspicious42 minutes ago
privb[.]nk.financeSuspicious47 minutes ago
mexcgh[.]dsgh.topSuspicious47 minutes ago
siha[.]p.xyzSuspicious47 minutes ago
ahead[.]exelddhd.xyzSuspicious48 minutes ago
files.e[.]n.ruSuspicious48 minutes ago
cair[.]ormsagainstpylons.orgSuspicious50 minutes ago
yzxrt.[.]nozdev.xyzSuspicious50 minutes ago
printser[.]-m-bg.comSuspicious51 minutes ago
ex[.]hd.xyzSuspicious52 minutes ago
exepo[.]t.comSuspicious52 minutes ago
6293[.]201.xyzSuspicious52 minutes ago
2330[.]sbsSuspicious52 minutes ago
smuk2[.]005.buzzSuspicious52 minutes ago
t6l[.]casaSuspicious52 minutes ago
pl-[.]ferta95041.shopSuspicious52 minutes ago
of[.]ta27794643.latSuspicious52 minutes ago
pl-[.]erta928934284s.sbsSuspicious52 minutes ago
pl-ochr[.]lx-koszykkupteraz247od81deee.cfdSuspicious52 minutes ago
oglosze[.]i30295.sbsSuspicious52 minutes ago
dk-oferta[.]0.sbsSuspicious52 minutes ago
di-dost[.]zak928016.cyouSuspicious52 minutes ago
kup-[.]342398g8.casaSuspicious52 minutes ago

Download the complete malware URL list (52,437 detected in the last 24 hours)

  • Only the latest 50 detected URLs are shown on this page.
  • If your site is listed by mistake, report a false positive.

Do you want to use it in your product?

Anti-Virus Cloud Engine is delivered as a fully-hosted web API with JSON, XML or plain text responses. Client applications check the reputation and risk of each file or site against an extensive in-the-cloud database before permitting user access.

You can use our feeds to build any lists (white, black, malware, phishing, false positives, etc.) and integrate them into your security software or hardware. If you would like to become a NictaTech customer, please contact us.