iOS - What websites got blocked? what threats have been found on my iPhone?

[CalmKoala]

Issue abstract: 1 Threat detected - Device - iPhone 17

Detailed description: How do I see what this threat is?? is it a malicious link? if so, which link got blocked? I need to know these things Norton. Even AVG iOS app has this feature, why don’t you??? It’s beyond frustrating. I need to know what links and what is being detected.

Product & version number: 26.10.1.20260609.4015

OS details: iOS 26.5

[bjm]

@CalmKoala

iOS - What websites got blocked? what threats have been found on my iPhone?
1 Threat detected - Device - iPhone 17
How do I see what this threat is?? is it a malicious link? if so, which link got blocked? I need to know these things Norton. Even AVG iOS app has this feature, why don’t you??? It’s beyond frustrating. I need to know what links and what is being detected.
Product & version number: 26.10.1.20260609.4015
OS details: iOS 26.5

Hello @CalmKoala
As far as I’m aware, neither the current iOS nor Android Norton mobile apps provide a detailed threat history comparable to Security History in the Windows product. The Protection Report appears to be primarily a summary of activity rather than a detailed event log showing the specific URL, threat name, or detection details.

The Protection Report is intended as a summary of protection activity over a selected period. It is different from the detailed Security History available in Norton 360 for Windows. A Protection Report statistic such as “1 Threats Avoided” is an aggregate count and does not necessarily imply that a corresponding detailed event record is available on the device.

The Protection Report summarizes activities that your Norton product has performed to protect your devices and identity.

Protection Report is an aggregate counter/reporting feature across platforms, whereas Security History (where available) is the feature intended for reviewing individual security events.

The Protection Report statistic (“1 Threats Avoided”) appears to be an aggregate count of protection activity rather than a detailed event record. If you’re looking for the specific URL, threat type, and timestamp associated with that count, I don’t believe the current iOS app exposes that information through the Protection Report. It sounds like you’re looking for a detailed event history similar to what you believe AVG provides.

Caveat: I’m not familiar with AVG nor iOS

[CalmKoala]

Thanks for that but how do I request that Norton actually make it possible? I’ve left feedback many times and yet nothing gets done. Don’t people find it useful to know what websites have been blocked at least? and what Norton has protected me from? As someone who works in security I find this useful.

[bjm]

@CalmKoala

OS - What websites got blocked? what threats have been found on my iPhone?
1 Threat detected - Device - iPhone 17
How do I see what this threat is?? is it a malicious link? if so, which link got blocked? I need to know these things Norton. Even AVG iOS app has this feature, why don’t you??? It’s beyond frustrating. I need to know what links and what is being detected.

@CalmKoala

Thanks for that but how do I request that Norton actually make it possible? I’ve left feedback many times and yet nothing gets done. Don’t people find it useful to know what websites have been blocked at least? and what Norton has protected me from? As someone who works in security I find this useful.

Hello @CalmKoala
We’ll try to call attention to your issue/concern. No promises. No timeline.

Protect your devices and identity by checking your Norton Protection Report

What the article does not provide is a way to map that statistic back to:

• a specific URL,
• a timestamp,
• a threat name,
• or an event record.

Norton Protection Report / Stats Summary Across Platforms

Platform	Protection Report Availability	Level of Detail	Can View Specific URLs / Timestamps / Events?	Notes
Windows / Mac	Yes (full Protection Report)	High-level aggregates only	No	Shows totals (threats blocked, sites blocked, scans, etc.). Detailed logs are in separate sections (Security History).
iOS	No dedicated report	Very basic summary only	No	Only shows overall status and a few recent counts in the dashboard.
Android	Limited / Basic	Basic summary	No	Similar to iOS — mostly high-level status with minimal history.
My Account Portal my.norton.com	No full report	High-level aggregates across devices	No	Shows device status and overall totals, but no event-level details.

Key Takeaway

• The Protection Report (and account stats) are always high-level across all platforms.
• Norton does not provide a way to trace statistics back to specific URLs, timestamps, or individual events on any platform, including the web portal.
• For more detail on desktop, users must go into Security History instead of the main Protection Report.

Norton 360 on iOS does not provide any Security History, activity log, or detailed event records.
There is no Security History, no activity log, no blocked URLs list, and no way for the user to review past protection events on the iOS app.

Norton Event Logging – Availability by Platform

Event Type	Windows / Mac	Android	iOS	My Account Portal	Notes
Blocked websites (Safe Web)	Yes	Limited	No	No	Only desktop shows individual URLs
Specific blocked URLs	Yes	No	No	No	Desktop only
Timestamps of events	Yes	No	No	No	Desktop only
Threat / malware names	Yes	Limited	No	No	Desktop provides names
Malware detections	Yes	Limited	No	No	Full details only on desktop
Scan results & history	Yes	Basic	Basic	No	iOS/Android show only recent scans
Web protection events	Yes	Limited	No	No	No granular data on mobile
Overall protection totals	Yes	Yes	Yes	Yes	Available on all platforms
Device-level status	Yes	Yes	Yes	Yes	Available everywhere

Summary

• Windows and Mac: Full detailed event logging (URLs, timestamps, threat names).
• Android: Very limited — mostly basic counts only.
• iOS: Almost no recorded events available to the user.
• My Account Portal: Only high-level aggregates across devices; no detailed events.

Aspect	Explanation	Primary Reason
No detailed history on iOS	Norton chose not to implement or expose any event logging in the iOS app	By design
Apple platform restrictions	iOS does impose limits on background activity and data collection	Contributing factor
Android	Similar lack of detailed logs, even though Android allows more flexibility	By design
Desktop (Windows/Mac)	Full detailed logging is available	By design

Key Points:

• While Apple’s restrictions make rich logging more difficult, Norton could still provide basic history (e.g., recently blocked domains or a simple list of events). Many competing security apps do this on iOS.
• Norton appears to have made a deliberate choice to keep the iOS (and Android) apps very lightweight and simple, sacrificing transparency and detailed reporting.
• The fact that even the My Account portal doesn’t show detailed mobile events further supports that this is a product design decision rather than a technical impossibility.

Quick comparison:

App	Shows blocked websites / history on iOS?	Level of detail	Notes
AVG	Yes	Basic to moderate	Users can usually see recently blocked sites
Bitdefender	Yes	Moderate	Provides a protection history list
Malwarebytes	Yes	Basic	Shows blocked threats and sites
Norton	No	None	No history available at all

Conclusion

Many competing antivirus apps on iOS do provide some form of history or blocked sites list, while Norton deliberately does not.

More verbose recording and reporting is possible on iOS, as demonstrated by other security apps like AVG, Bitdefender, and Malwarebytes.

Norton has by design chosen not to implement detailed history or blocked site logging in its iOS app. This appears to be a deliberate product decision rather than a technical limitation.

Smart Chat sourced content may make mistakes

[peterweb]

The one threat detected in the Protection Report for an iOS device is usually when a new iOS version is released. Norton flags that until you update the device. This is indicated by the Device notation to the right of the Threats Avoided circle. In this instance, your issue has nothing to do with any websites being blocked.

[bjm]

@peterweb

The one threat detected in the Protection Report for an iOS device is usually when a new iOS version is released. Norton flags that until you update the device. This is indicated by the Device notation to the right of the Threats Avoided circle. In this instance, your issue has nothing to do with any websites being blocked.

Hello @peterweb
Hello @CalmKoala
fwiw ~ Smart Chat agrees:

When you see “1 Threats Avoided” with the “Device” label, Norton is treating the fact that your iPhone is running an older iOS version as the “threat.” It will keep showing this until you update iOS. It has nothing to do with blocked websites or malware.

As of June 2026, the latest version is iOS 26.5.1 (released June 1, 2026).
Since the OP is on iOS 26.5, updating to 26.5.1 should resolve the “Device” threat that Norton is showing.

In most cases with Norton, the “Device” threat entry in the Protection Report is historical — it records that the device was on an outdated OS at the time the report was generated. Updating to iOS 26.5.1 will usually stop Norton from flagging it going forward, but the existing entry in the report often remains visible as a past event and does not automatically disappear.

So updating will likely prevent new “Device” threats from appearing, but it probably won’t erase the historical record that’s already there.

The OP was expecting details about a specific threat detection (like a blocked website or malware), but what they actually saw was a device-level flag — Norton simply noting that the iPhone was running an outdated iOS version.

The OP was asking for details on a malicious link or threat that was supposedly blocked, but the “1 Threats Avoided – Device” entry has nothing to do with any blocked website or malware. It’s simply Norton flagging that the device is running an outdated iOS version.

Smart Chat sourced content may make mistakes

[CalmKoala]

Thank you so much everyone! I really appreciate your replies. The strange thing is my iPhone is already up to date, and I installed it on my new iPhone for the first time. So that’s why I thought it was url blocking related, even though I didn’t get a notification for it. So it scared me seeing it blocked something. I just wish I knew what.

[bjm]

@CalmKoala

So it scared me seeing it blocked something. I just wish I knew what.

Do you still think Norton “blocked something”?

[CalmKoala]

I had a worm virus and was hacked in 2024, so ever since I’ve been paranoid. I’ll just see it as a false positive for now and hope for the best. Thanks.

[bjm]

@CalmKoala

Issue abstract: 1 Threat detected - Device - iPhone 17

@CalmKoala

I had a worm virus and was hacked in 2024, so ever since I’ve been paranoid. I’ll just see it as a false positive for now and hope for the best. Thanks.

So, on your side – Do you see 1 Threat detected - Device?
I see 1 Threats Avoided - Device

When the report reads “1 Threats Avoided” alongside a Device notation on iOS, it typically means an outdated operating system vulnerability.

Because of Apple’s strict “sandboxing” security model, traditional web viruses cannot infect an iOS device the way they do a PC or Android. Instead, the greatest risk to an iPhone or iPad comes from unpatched system bugs.

Why an iOS Update Triggers This Metric

• System Vulnerabilities: Every time Apple patches security flaws with a new iOS release, those older unpatched versions officially become “vulnerable device risks”.
• The “Avoided” Label: By notifying you to update, or counting the patch after you install it, Norton marks the unpatched exploit path as Avoided. You stopped a potential entry point before a hacker could use it against your hardware.
• No Web Connection: This specific tally has nothing to do with malicious websites, blocked links, or phishing attempts.

How to Verify and Confirm the Threat Details

1. Open the Norton 360 app on your iOS device.
2. Tap the Menu icon at the bottom of the screen.
3. Select Device Security.
4. Look under the Operating System or Device Security section. It will detail exactly what system risk was flagged (e.g., an outdated iOS version notice).

If you want, you can check your iPhone’s main Settings > General > Software Update to confirm if you are running the absolute latest software version available.

The Norton Protection Report is a 30-day historical log rather than a live tracker of your current status.

Because the report tallies everything that occurred over the previous month, seeing “1 Threats Avoided - Device” when you are already fully updated makes perfect logical sense for a couple of reasons:

1. It Records the Act of Updating

When an iOS update was released earlier in the month, Norton flagged the device as “vulnerable”. The moment you installed that update, you successfully closed the loop and eliminated the risk. Norton records this successful fix in the monthly ledger as a threat “Avoided.”

2. A Delay in Report Refreshing

The Protection Report operates on its own calendar or weekly summary cycle. Even if a user updates their iPhone, the counter in that specific monthly card will continue to display the action until the report resets for the next 30-day period.

3. Missing Passcodes

Aside from software updates, the “Device” metric on iOS also triggers if the phone temporarily lacked a lock-screen passcode. If the user disabled their passcode even briefly over the last 30 days and then turned it back on, Norton logs the resolution as a threat avoided.
The Original Poster (OP) is entirely safe. The report is simply displaying a “pat on the back” for an action they already took earlier in the month.

AI sourced content may make mistakes

[CalmKoala]

I’m now trying out Avast for iOS the web detection is free and it tells me what websites it’s blocking. I won’t be renewing my Norton membership. I cannot believe Norton is owned by the same company as avg and avast, yet it doesn’t have the same basic features like telling us what is being blocked, what url and port.

[bjm]

@CalmKoala

I’m now trying out Avast for iOS the web detection is free and it tells me what websites it’s blocking.

Hello @CalmKoala
Are you reporting that on iOS. Norton Safe Web does not render informative page block?

Norton 360 on Android blocks and reports similar:

===

We’ll need iOS user to confirm Safe Web block or not.

[CalmKoala]

Okay, my bad. I just noticed it’s just the same as Norton. After blocking one website with a notification, it now says 22, yet I can’t see what websites it blocked.

[bjm]

@CalmKoala

Okay, my bad. I just noticed it’s just the same as Norton. After blocking one website with a notification, it now says 22, yet I can’t see what websites it blocked.

Hello @CalmKoala

I tested Norton 360 for Android and found that a Safe Web block page was displayed when visiting a known unsafe site. However, I was unable to find a corresponding entry in the Activity Log afterward. The latest Activity Log entries were unrelated operational events. This suggests Safe Web blocking events may not be retained in the user-accessible Activity Log, which could explain why users have difficulty reviewing previously blocked URLs.

Norton 360 for Windows, the Resolved Security Risks / Security History style views tend to be:

• more granular (individual events listed)
• more “audit-like” (what was detected, what was blocked, when)
• more inspectable (entries you can click into for detail)
• closer to a traditional security log model

So a Windows user can more easily answer:

“What exactly was that detection?”

---

Why it feels different from mobile

On mobile (iOS / Android), Norton 360 is typically designed around:

• OS sandbox constraints (especially iOS)
• reduced background visibility into other apps/processes
• simplified UX expectations
• battery/performance considerations
• “at the moment” protection feedback rather than forensic logging

So instead of a full Security History equivalent, you often get:

• Safe Web block page (real-time detail)
• Safe SMS counters
• Protection Report summaries
• limited activity logs focused on maintenance events

---

The key mismatch you’re noticing

You’ve essentially identified a platform split in philosophy:

Platform	Design tendency
Windows	more verbose, event-log oriented
Mobile	more abstracted, summary-driven

===

Mobile security apps (iOS and Android) are fundamentally operating in a different architectural environment than PC/Mac:

---

1. OS-level restrictions (especially iOS)

On iOS in particular:

• Apps are heavily sandboxed
• No deep filesystem or process visibility across the system
• No continuous background inspection of other apps/processes
• Network filtering is mediated through OS-approved APIs (VPN-style tunnels, content filters, etc.)

That means a product like Norton on iOS can usually:

• inspect traffic as it passes through its filter
• block or allow in real time
• show a “this was blocked” event immediately

But it cannot easily behave like Windows Norton, which can:

• maintain a richer local security event database
• correlate processes, files, and network events
• build persistent “Security History” views from system-wide telemetry

---

2. Android is more flexible — but still constrained

Android allows more visibility than iOS, but still:

• scoped storage limits long-term local logging strategies
• background process limits affect continuous tracking
• privacy and battery constraints discourage verbose event logging
• VPN-based filtering still abstracts network-level detail

So you often get:

• real-time detection
• partial logging
• but not a full forensic-style event history layer

Which matches exactly what you saw on your device.

---

3. Desktop is a different class of platform

Windows/macOS allow:

• persistent local databases of security events
• file + process + network correlation
• deeper kernel-level hooks (within driver/security framework limits)
• richer UI for historical inspection

AI sourced content may make mistakes

[CalmKoala]

Okay I guess I just need to be grateful it’s doing a good job at blocking web links. It’s a bit scary seeing 22, my iPhone could be infected I’ll never know unless I know what sites are being blocked. Oh well. I might have to do a factory reset and loose everything or just leave it and assume it’s safe.