Aggregated list of compromised websites

Looking for more details? Read our detailed FAQ →

What is the "Current compromised URLs" list?

This is a list of URLs (~ websites) marked compromised in the last 24 hours in the particular sources we use. In other words, these URLs were observed in malicious activity in the last 24 hours.

What is the "All-time compromised URLs" list?

This is a historical list of URLs that have ever been compromised. The presence of a URL in this list does not mean that the URL or website is compromised at the moment (moreover, it is most likely that it is not at the moment).

What kind of data do your lists contain?

It's simple: each list contains one URL address per line.

What sources do you aggregate data from?

We collect, clean and sort compromised domain lists from:

• urlhaus.abuse.ch
• hole.cert.pl
• stamparm/blackbook
• romainmarcoux/malicious-domains
• iplists.firehol.org (iblocklist_abuse_zeus.netset)
• iplists.firehol.org (firehol_level1.netset)
• blocklist.de