Just publish the URLs, duh. Are they trying to keep it secret so they can sell their threat intelligence product?