Reward Program for malicious URL reporters

This webpage explains how CRDF Labs rewards reporters for submitting malicious URLs that do not meet our detection criteria. The reward program encourages our reporters to report any malicious URLs that do not meet our detection criteria. Thus, we make the Web more secure together!

Claim previous month Leaderboard
Malicious URL reporter reward-program illustration

⚡ Participate in Our Reward Program

Not interested in rewards? You’ll still be counted in our results, but won’t be able to claim any rewards.

Conditions of Access

  • Submit your malicious URLs via our form or API.
  • Use the same email for all reports each month to get counted correctly.
  • Have a cryptocurrency wallet (BTC, USDC, USDT) on supported networks (BTC, BEP20, ERC20, Polygon).
  • Contact us to claim your reward — payments are not automatic.
  • Payments in USDC/USDT/BTC (1 USDC/USDT = 1 USD).
  • Use the claim page at the end of each month if you reached a reward level.
  • Only one reporter reward procedure is available each month.
  • Network fees for rewards are at your expense.

Important Notes

  • Malicious URLs must be accepted by our experts to count.
  • Only validated reports count; duplicates, whitelisted, or invalid URLs won’t.
  • You have one month to claim rewards after the current month ends.
  • If the monthly procedure has already been opened or completed, additional reporters must wait for a later eligible period.
  • Proof of email ownership is required for payment.
  • CRDF Labs is independent, non-commercial, and self-financed.

Thank you for helping us build a safer web! Check our FAQ for more info.

For best results, submit complete URLs so experts can verify them properly.

List of Awards

To claim a reward, you need to have your malicious URL reports validated consistently over a full month. The monthly procedure is limited to one reporter and remains manually reviewed by CRDF Labs. Check below to see where you stand and what you’ve earned!

Confirmed malicious URLs Prize
1,000 confirmed malicious URLs 0.01 USD
10,000 confirmed malicious URLs 0.1 USD
More than 10,000 confirmed malicious URLs 0.00001 USD / additional confirmed malicious URL