URLhaus

• List recent malware URLsGet the malware URLs most recently added to URLhaus, newest first: up to 1,000 from the last 3 days, each with whether it is still online, its host, tags and blocklist status. Use it to keep a blocklist or firewall up to date.
• List recent payloadsGet the payloads (malware files) URLhaus most recently collected from malware URLs, newest first: up to 1,000 from the last 3 days, each with its MD5 and SHA-256 hashes, file type, malware family when known and VirusTotal detections.
• Look up URLCheck whether a URL is a known malware URL: whether it is still online, when it was added, its tags, its Spamhaus and SURBL blocklist status, and the files (payloads) it served. A URL URLhaus doesn't have comes back with found false, not an error.
• Look up URL by IDGet a malware URL by its URLhaus ID, with the same details as Look up URL: whether it is still online, its tags, blocklist status and the files it served. An ID URLhaus doesn't have comes back with found false.
• Look up hostCheck a domain, host name or IP address: how many malware URLs it has served and since when, its Spamhaus and SURBL blocklist status, and up to 100 of its malware URLs with whether each is still online. A host URLhaus doesn't have comes back with found false.
• Look up file hashLook up a file by its MD5 or SHA-256 hash: its file type and malware family, when it was first and last seen, VirusTotal detections, and up to 100 malware URLs that served it. A file URLhaus doesn't have comes back with found false.
• Look up tagGet the malware URLs reporters gave a tag, like elf or a malware name, newest first, with how many URLs carry it and when it was first and last used.
• Look up malware familyGet the malware URLs whose files URLhaus identified as a malware family (its signature), like Heodo or Gozi, newest first, with each file's hashes and how many URLs and files the family has. Unlike a tag, the family is URLhaus's own finding.

No actions match that.