ThreatLog

What is ThreatLog?

ThreatLog is a database of malicious domains maintained by NoVirusThanks. It tracks domains linked to malware, phishing, scams, fake online shops and fraudulent websites, detected by internal honeypots, malware sandboxes and verified community submissions.

How often is the database updated?

New malicious domains are published within minutes of verification. The database has been continuously maintained since 2012.

Is there an API to query the ThreatLog database?

Yes. Domain reputation can be queried programmatically through the APIVoid Domain Reputation API, which uses ThreatLog data alongside other reputation sources.

How do I report a malicious domain?

Anyone can submit a suspicious or malicious domain by contacting us via email. Provide the domain, the URL path or IP if known, a brief description of the threat, and supporting references such as URLVoid scans or screenshots. Verified reports are typically reviewed within 1-2 business days.

What if my domain was incorrectly listed?

If you believe a domain has been listed as a false positive, contact us with the details. Every entry is revocable and disputes are reviewed within 1-7 business days.