Hi Orion!
Thank you for reporting this. URLhaus is a partner that generates a list of ClamAV signatures to target malicious URLs. Signature
Urlhaus.Malware.452652-9766253-0 looks for a malicious URL inside HTML files, which is why it is alerting on the URLs you mentioned. We found these FPs some weeks ago and added an extra check on new ClamAV signatures to prevent them from alerting on legitimate URLhaus content. We are currently updating older ClamAV signatures to ensure they don't FP on non-malicious HTML files.
Best regards,
Lilia Gonzalez
Malware Research Team
Cisco Talos