Until recently, domain data from Spamhaus has been limited to a binary "yes it's listed" or "no it's not." Helpful for a blocklist but not so helpful if you want contextual insight into the reputation of that domain. All this is changing with the beta release of Domain Reputation Data via Spamhaus Intelligence API (SIA). Read on to discover the rich data points available via this easy-to-consume API and how you can become one of only 30 beta testers.

Welcome to a world of rich reputation data

For over a decade, the researchers have had a dedicated team observing domains 24/7. This will come as no surprise because, as the team discussed in the new domain report released in July, “No matter what you’re doing on the internet, legitimate or otherwise, you must (almost always) use a domain name.” Domains are part of the fabric of DNS.

Until now, the only data shared with users are DNS blocklists (DNSBLs) for email and Response Policy Zones (RPZ) for DNS Firewalls. However, researchers continuously monitor global signals to create these lists, compiling vast swathes of data relating to domains.

It’s time to enable our users to drink at the fountain of reputation!

Domain Reputation Data via SIA

This data provides detailed insight into every domain the research team observes (and that’s a lot of domains). The following metadata fields are included in the dataset:

  • Reputation
    • Great
    • Good
    • Neutral
    • Bad
  • Malicious
  • Registrar
  • Date created
  • First seen timestamp
  • Last seen timestamp
  • IPs of email senders
  • Reputation changes over time
  • Nameserver history and reputation
  • Threat type

How is the data accessed?

Easy. By API – making it easy to either use as a standalone dataset or to enrich existing data sources.

Who could use this data?

There are multiple uses for this data-rich domain intelligence. Here are just a few ideas:

  • Deliverability specialists, such as Email Service Providers (ESPs) – monitor the reputation of sending domains.
  • Registries – to check the overall “health” of their TLDs.
  • Registrars – to assess new domains they are taking on and monitor the health of their registered domains.
  • Hosting companies – examine IPs’ reverse DNS (rDNS) and monitor the sending domains from within their network.
  • Security vendors – enhance domain-centric products with this data.

Want to become a beta tester?

We are only looking for 30 beta testers, so it’s a case of first come, first served. If you’d like to register your interest, please go to https://www.spamhaus.com/campaign/domain-reputation-via-api/ and complete the form. However, please remember the following:

  • Beta period: September 20th to December 16th, 2022.
  • Beta testers will be required to query, test, and give feedback on the data within the above time frames.
  • A third party will undertake the feedback, which will be anonymized.

If you have the resources to “kick the tires” of this new dataset, we’d love to have you test it and help shape future iterations. Register here.

Related Products

Spamhaus Intelligence API (SIA)

This API provides access to multiple datasets containing metadata relating to compromised IP addresses. These IP addresses may be exhibiting compromised behavior, including malware, worm, and trojan infections, and SMTP-specific traffic emitting spam, or cybercriminals are using them to control infected computers – botnet command & controllers.

The breadth of data available via an easily consumable API provides security developers with scores of opportunities.

  • Save valuable time investigating and reporting
  • Simple and quick to access
  • Data you can trust in


Increased performance and search capabilities for users of IP reputation data via API

28 October 2022

Blog News

Commercial or developer subscribers to any IP datasets via Spamhaus Intelligence API (SIA) will experience improved performance and search capabilities for this service.

Kentik provides proactive threat intelligence using Spamhaus’ IP data

23 August 2022

Case Study

Network intelligence provider, Kentik, support companies like Sky, Tesla, Spotify. Read how they're using Spamhaus' data to provide proactive threat intelligence to their customers.

The Extended Botnet Controller List is now available via the Spamhaus Intelligence API

25 January 2022


The breadth of reputation data available via the Spamhaus intelligence API is increasing - the extended Botnet Controller List is now included.