threat intelligence data

A database of malicious domains, updated daily

ThreatLog is a service by NoVirusThanks that tracks domains linked to malware, phishing, scams, fake shops and fraudulent websites. These domains are detected by our internal honeypots, manual analysis, malware sandboxes and community submissions.

382,127Unique domains
14 yearsTracking since 2012

capabilities

An up-to-date malicious domains database.

380K+ malicious domains

A continuously-growing blocklist of phishing, scam, suspicious, malware and fraud domains. Human-verified and updated daily.

API available

Query the full database programmatically and integrate domain reputation into your product, gateway or SIEM. Powered by APIVoid.

Domain Reputation API →

Used in URLVoid

Our data feeds directly into URLVoid's website reputation scanner, improving detection for hundreds of thousands of daily scans.

See URLVoid →

Sourced from honeypots

Domains are collected from our own honeypot network, manual URL analysis, sandbox analysis and verified community reports.

Minute-level updates

New threats are added within minutes of human verification, so our partners such as URLVoid can block them as quickly as possible.

False-positive friendly

Accidentally listed? Just contact us via email and we'll review your domain within 1-7 business days. Every entry is revocable.

community

Spotted a malicious domain? Report it.

Anyone can submit a suspicious or malicious domain for review. Verified reports are added to our blocklist; which propagates to URLVoid, APIVoid, security products and the wider partner network so everyone blocks it faster.

  1. Send us the detailsDomain, URL path, IP (if known) and a short description of the threat are the basic information we need.
  2. Include referencesURLVoid scan report, screenshots, email headers, sandbox reports; anything that backs the claim and can help us.
  3. We verify & publishGenerally within 24-48 hours. The reported domain is then blocked across our partner services, e.g. URLVoid.

integrate

Need real-time domain reputation in your product?

Try the APIVoid Domain Reputation API directly from your backend, gateway, or SIEM. Check domain reputation in seconds and scale to millions of queries per day with reliable, real-time results.