fetches all suspicious urls