Malware URLs

The latest malicious URLs detected by the Anti-Virus Cloud Engine — a fully automated real-time security solution that works like an always up-to-date blacklist.

All URLs listed here are dangerous. Do not enter them into your browser unless you are a security professional.
URLRiskDiscovered
105.184.2[.]5:33643/bin.shSuspicious20 hours ago
193.1[.].158.57/bin/054b66d3943934ef_cryptoclipper.exeSuspicious20 hours ago
110.83.[.]252:46074/iSuspicious20 hours ago
62.[.]0.226.140/amka/file.exeSuspicious20 hours ago
203.[.].93.86:52006/bin.shSuspicious20 hours ago
tyco[.].com/chromesetup.exeSuspicious20 hours ago
222.[.]39.70.126:34955/iSuspicious20 hours ago
123.188.66.15[.]110/bin.shSuspicious20 hours ago
203[.]4.93.86:52006/iSuspicious20 hours ago
91.92.[.]2.236/files-129312398/files/file_a0dfe1e021c2d9b6..Suspicious20 hours ago
195.208.61.[.]25:7592/allah.shSuspicious20 hours ago
119.116.3[.]28:37662/iSuspicious20 hours ago
119.116.128.[.]81:49423/bin.shSuspicious20 hours ago
182.126[.]50.3:45963/iSuspicious20 hours ago
176.[.]5.139.143/hiddenbin/boatnet.sh4Suspicious20 hours ago
tycons.[.]/google.exeSuspicious20 hours ago
tycons.co[.]hrome.exeSuspicious20 hours ago
210.[.].110.51:48795/iSuspicious20 hours ago
117[.]227.90:44031/iSuspicious20 hours ago
46.163[.].104:54484/bin.shSuspicious20 hours ago
175.149.142[.]40:39741/iSuspicious20 hours ago
119.1[.]0.89.157:45585/bin.shSuspicious20 hours ago
11[.]0.89.157:45585/iSuspicious20 hours ago
210.2[.]111.74:54693/bin.shSuspicious20 hours ago
185.141.233[.]:37823/iSuspicious20 hours ago
183.1[.]1.201.28:41095/iSuspicious20 hours ago
27[.]2.29.147:39265/bin.shSuspicious20 hours ago
222.241.235[.]8:50704/iSuspicious20 hours ago
120.84.213.4[.]41114/bin.shSuspicious20 hours ago
123.9.21[.]:59961/bin.shSuspicious20 hours ago
42.239.240.[.]3:48444/iSuspicious20 hours ago
125.[.]5.54.47:59020/bin.shSuspicious20 hours ago
123.1[.].112:36801/bin.shSuspicious20 hours ago
103.24[.]4.165:52384/bin.shSuspicious20 hours ago
116.140.[.]230:49376/bin.shSuspicious20 hours ago
119.102.[.]73:43236/iSuspicious20 hours ago
117.[.]3.143.74:53358/iSuspicious20 hours ago
103[.]43.4.165:52384/iSuspicious20 hours ago
21[.]8.111.74:54693/iSuspicious20 hours ago
125.[.]5.54.47:59020/iSuspicious20 hours ago
112.24[.].114.43:60811/iSuspicious20 hours ago
123.1[.]56.124:55801/iSuspicious20 hours ago
27.202.2[.]47:39265/iSuspicious20 hours ago
42.52.[.]6:49690/bin.shSuspicious20 hours ago
82.165.60.187:[.]080/mirai.x64Suspicious20 hours ago
te[.]umz.comSuspicious20 hours ago
mode[.]tedrop.ccSuspicious20 hours ago
audit.b[.]tch.ccSuspicious20 hours ago
andromeda-[.]d.firebasestorage.appSuspicious20 hours ago
panel-sms.fi[.]basestorage.appSuspicious20 hours ago

Download the complete malware URL list (2,945 detected in the last 24 hours)

  • Only the latest 50 detected URLs are shown on this page.
  • If your site is listed by mistake, report a false positive.

Do you want to use it in your product?

Anti-Virus Cloud Engine is delivered as a fully-hosted web API with JSON, XML or plain text responses. Client applications check the reputation and risk of each file or site against an extensive in-the-cloud database before permitting user access.

You can use our feeds to build any lists (white, black, malware, phishing, false positives, etc.) and integrate them into your security software or hardware. If you would like to become a NictaTech customer, please contact us.