Malware URLs

The latest malicious URLs detected by the Anti-Virus Cloud Engine — a fully automated real-time security solution that works like an always up-to-date blacklist.

All URLs listed here are dangerous. Do not enter them into your browser unless you are a security professional.
URLRiskDiscovered
dino.[.]changeSuspicious1 hour ago
10[.]0.plSuspicious1 hour ago
222.141.101[.]:40830/bin.shSuspicious1 hour ago
222.[.].182.244:54878/iSuspicious1 hour ago
59[.]7.252.217:53607/iSuspicious1 hour ago
222.13[.]137.53:40846/iSuspicious1 hour ago
222.13[.]142.48:45402/iSuspicious1 hour ago
112[.]36.99.190:33940/iSuspicious1 hour ago
119.189[.]142.79:50009/bin.shSuspicious1 hour ago
221.15.174[.]48113/bin.shSuspicious1 hour ago
27.2[.]25.232:60228/bin.shSuspicious1 hour ago
119.189.[.]42.79:50009/iSuspicious1 hour ago
27[.]5.125.232:60228/iSuspicious1 hour ago
59.96.14[.]:53283/bin.shSuspicious1 hour ago
61.53.80.1[.]6:41384/bin.shSuspicious1 hour ago
60[.]23.236.167:59155/iSuspicious1 hour ago
61.52.169[.]1:33491/iSuspicious1 hour ago
18[.].228.72.128/ftpget.shSuspicious1 hour ago
193.233[.]122/xSuspicious1 hour ago
nova-75.com/curl/wax[.]qrf1w/56d7vzaivvpne4fbqg.jsonSuspicious1 hour ago
193.233.[.].122/hb_x86Suspicious1 hour ago
193.2[.]0.122/cegg_x86Suspicious1 hour ago
19[.]33.20.122/zSuspicious1 hour ago
19[.]3.20.122/cegg_armSuspicious1 hour ago
91.137.217.64[.]55199/mozi.mSuspicious1 hour ago
193.23[.]20.122/cegg_arm64Suspicious1 hour ago
18[.]28.72.128/curl.shSuspicious1 hour ago
193.[.]20.122/cegg_mipsleSuspicious1 hour ago
18[.]228.72.128/wget.shSuspicious1 hour ago
www.m[.]48.com/lod15Suspicious1 hour ago
193.23[.].122/cegg_mipsSuspicious1 hour ago
github.com/[.]mrincaballero/polymarket-prediction-bot/rele..Suspicious1 hour ago
cdn.discordap[.]m/attachments/1070571231054659585/156070..Suspicious1 hour ago
11[.]6.99.190:33940/bin.shSuspicious1 hour ago
61.52.182.7[.]809/bin.shSuspicious1 hour ago
193.233.2[.]122/hb_armSuspicious1 hour ago
193.2[.]3.20.122/cegg_x86_64Suspicious1 hour ago
redxcvfsdgth.info/dow[.]cfeteitservicio.apkSuspicious1 hour ago
nova-75.com[.]vrhqljbnscwhbyhltuwmsq/t2990cmjSuspicious1 hour ago
cdn.mo[.]her.life/dvnx.zipSuspicious1 hour ago
ziio.[.]ss-ap-southeast-1.aliyuncs.com/qqdngj-x64-win-1.3.8..Suspicious1 hour ago
cdn.discordapp.com/attac[.]nts/1560716942153613344/156071..Suspicious1 hour ago
cdn.d[.]ordapp.com/attachments/1560137713079029764/156068..Suspicious1 hour ago
185.228.7[.]128/jklspcSuspicious1 hour ago
130.12.180[.]2/armv5lSuspicious1 hour ago
185[.]28.72.128/jklx86Suspicious1 hour ago
18[.]28.72.128/jklarm5Suspicious1 hour ago
185.22[.]2.128/jklm68kSuspicious1 hour ago
45.90.13[.]/gz067Suspicious1 hour ago
130.12.[.]32/mipsleSuspicious1 hour ago

Download the complete malware URL list (21,707 detected in the last 24 hours)

  • Only the latest 50 detected URLs are shown on this page.
  • If your site is listed by mistake, report a false positive.

Do you want to use it in your product?

Anti-Virus Cloud Engine is delivered as a fully-hosted web API with JSON, XML or plain text responses. Client applications check the reputation and risk of each file or site against an extensive in-the-cloud database before permitting user access.

You can use our feeds to build any lists (white, black, malware, phishing, false positives, etc.) and integrate them into your security software or hardware. If you would like to become a NictaTech customer, please contact us.