Hunt.io Expands URLx Threat-Hunting Dataset to 10.6 Billion URLs
Summary
Hunt.io says URLx now contains more than 10.6 billion URLs, with new filtering fields and SQL queries. The company demonstrates searching for a path associated with phishing and malware activity attributed to suspected North Korean operators.
Key points
- URLx has expanded to more than 10.6 billion URLs and is growing by about 1 billion URLs per month, according to Hunt.io.
- Users can filter URL records by domain, path, last-seen time, and other fields through the SQL API and URLs tab.
- Hunt.io says the dataset can help identify exposed endpoints and infrastructure associated with campaigns, including phishing kits, C2 panels, and exploit pages.
- The article demonstrates searching for a WordPress path that researchers have associated since late 2024 with phishing and malware delivery attributed to suspected North Korean operators.
- Hunt.io says the query returned hostnames previously mentioned on social media and one previously unreported domain associated with a lifestyle brand; that URL now returns a 404, and the company withheld the domain.
Article Details
- Event Type
- Hunt.io expanded its URLx dataset and added richer fields for querying and filtering URLs.
- Impact
- URLx now contains 10.6 billion URLs and grows by 1 billion URLs per month, according to the article. The update is intended to help defenders and researchers find exposed assets and investigate malicious infrastructure, including phishing and malware-delivery activity.