URLhaus Checker
abuse.ch's database of malware-distribution URLs hosted on this domain.
This is one independent signal used by the Domain Security Score, and can also be run on its own for any domain.
Based on: abuse.ch — URLhaus
About this validation
abuse.ch's database of malware-distribution URLs hosted on a domain.
- Vendor documentation:
- Rules reviewed:
- Sep 6, 2026
SEOTechTests methodology: Data source: a live URLhaus API query (Auth-Key required) for this hostname. FAIL (critical) when an actively online malware-distribution URL is found; PASS on no results; UNKNOWN without a configured key or on a request failure.
Standards and vendor-documented behavior can change. This reflects the source as last reviewed above, not a permanent guarantee.
FAQ
What does URLhaus check?
It queries abuse.ch's URLhaus database for URLs on this domain that are known to have distributed malware, and reports whether any are currently marked online.
Why does SEOTechTests use URLhaus?
abuse.ch is a well-established, free community threat-intelligence project specifically focused on tracking live malware-distribution infrastructure, complementing the broader-scope blocklists this score also checks.
What's the difference between an 'online' and a historical URLhaus entry?
This check only treats a currently "online" malware URL as a FAIL -- a URL that was reported in the past but is now marked offline/taken down does not, by itself, fail this check.
Why can this check return UNKNOWN?
abuse.ch requires a free Auth-Key for API access. Without one configured, or if the request fails, the result is UNKNOWN rather than an assumed-clean PASS.