About vspam.org

vspam.org is a community-driven phishing intelligence clearinghouse built for mail operators, sysadmins, and security researchers. We aggregate threat reports from the global anti-abuse community and publish them as a free, queryable database and DNSBL feed.

Our mission is to make phishing infrastructure visible and actionable. Every report is community-verified. Threat data is free for non-commercial use — researchers, sysadmins, and open-source projects. Commercial use requires a license.

How it works

01

Report

Community members submit phishing URLs, malicious domains, spam IPs, and threat email addresses with supporting evidence.

02

Verify

Trusted reporters vote to confirm or reject each submission. Reports reaching the confidence threshold are marked Confirmed.

03

Distribute

Confirmed IOCs are published to the DNSBL feed, STIX 2.1 bundle, and REST API within seconds of verification.

By the numbers

2.8M+
IOCs in database
18,000+
Active reporters
41M
DNSBL queries/day
99.2%
Uptime SLA

Trust Tiers

Reporter trust is earned through consistent, accurate submissions. Higher tiers carry more weight in the confidence scoring algorithm and receive higher API rate limits.

TierVote weightRequirementsPerks
NewAccount createdSubmit reports, cast votes
Contributor50+ confirmed reportsAPI access, CSV export
VerifiedOrg email + 200+ reportsSTIX export, bulk submit
TrustedInvite-only, vetted operatorsUnlimited API, DNSBL zone access

Sponsors

vspam.org is funded by organizations that share our commitment to a safer email ecosystem. Infrastructure costs are covered by sponsors; the data remains free for all.

Get involved

vspam.org is open source (AGPL-3.0). Contributions, bug reports, and feature requests are welcome on GitHub. Threat data is free for non-commercial use.