Have you been blocked?
All blocklists are researched and managed by The Spamhaus Project.
Simply click on the link below, which will take you to the Project’s IP and Domain Reputation Checker. From here you will be able to enter your IP or Domain and begin your request for removal.
Please note that the Project’s IP and Domain Reputation Checker is the only place where removals are handled.
IT and security teams consistently face multiple business challenges. Discover how our solutions can help overcome some of those issues.
From processing issues, to email-borne threats our blocklists easily integrate with your current email set-up to improve anti-spam & anti-virus email filtering.
Employ our threat intelligence to increase visibility across security events, reveal potential weaknesses in your network, and threats to your brand.
Stay on top of the latest threats and proactively combat botnet infections, and other forms of abuse, with our solutions.
From clicking on phishing emails to visiting malware dropper sites, our threat intelligence provides automatic protection for your users.
Data for Integration
Enhance your service and create competitive advantage by integrating Spamhaus’ world-class IP and domain reputation data.
Our products provide additional layers of security for networks and email. They also present security teams with additional insight into malicious behavior.
Border Gateway Protocol (BGP) Firewall
Block the worst of the worst at your network edge, taking advantage of your existing BGP-capable routers. Configuration only takes minutes.
Data Query Service (DQS)
Benefit from industry-leading real time blocklists. These DNSBLs easily plug into your existing email infrastructure to block spam and other email threats.
A powerful research tool to investigate relationships between internet infrastructures. Quickly pivot to new areas of concern to rapidly investigate potential threats.
Immediately block connections to dangerous sites, including phishing and malware dropper websites. A ‘set and forget’ solution.
Spamhaus Intelligence API
Threat intelligence data in API format to enable users to easily integrate metadata relating to threats with their own applications, programs, and products.
abuse.ch Real Time Feeds - coming soon
Actionable data signals on cyber threats, with a focus on malware and botnets, to strengthen threat investigations, detections, and help prevent data breaches.
Integration | MDaemon
Block over 99% of email-borne threats with Spamhaus’ real time DNS blocklists and MDaemon® Email Server.
Integration | Halon
Safeguard your email stream using Spamhaus’ real time DNS blocklists and Halon’s secure email infrastructure.
Integration | Messageware
Enhance Microsoft Exchange protection by blocking malicious IP addresses from connecting to your on-premise server in real time.
A wide range of datasets, providing multiple layers of protection. They can be plugged directly into your existing hardware, making them an affordable choice.
Exploits Dataset Statistics
View the geolocation, hosting network, malware names associated with each detection, and other critical data points.
Border Gateway Protocol (BGP) Feeds
Do Not Route Or Peer (DROP) and Botnet Controller List (BCL) datafeeds can peer with your existing BGP-capable router.
Domain (DBL), Zero Reputation (ZRD) and Hash blocklists (HBL) enable you to block content in emails, filtering out a higher rate of email-borne threats.
Data for Investigation
Passive DNS and extended datasets give you additional information on internet resources. They provide deeper insights into incidents and possible threats.
DNS Firewall Threat Feeds
A wide range of feeds to apply to your DNS recursive server. Choose the right level of protection for your organization.
Spam (SBL), Policy (PBL), Exploits (XBL) and Auth (AuthBL) blocklists allow you to filter email from IPs associated with spam, botnets, and other threats.
abuse.ch Threat Intelligence Feeds – coming soon
URLhaus, MalwareBazaar, ThreatFox, YARAify, Feodo Tracker and Sandnet enrich CTI feeds and support vulnerability mangement.
Find out more about us.
Learn more about Spamhaus; who we are, and what we do.
Find a partner
Discover our partners and how they can support you.
Become a partner
Learn about the benefits of being a Spamhaus partner and how to get started.
Discover a wide range of blog posts, case studies and reports.
Spamhaus’ insight into malware, botnet C&Cs, and the domain reputation landscape.
Commonly asked questions about Spamhaus products and processes.
The Blocklist Tester
A tool to help you check if your servers are correctly configured to use Spamhaus DNSBLs.
The Reputation Portal
A tool for ASN owners to get visibility of their IPs’ reputation and proactively manage listings.
Help for the Project's legacy DNSBLs users
Using the Project’s legacy blocklists and suddenly experiencing email issues? This page may be able to help.
In depth information about the technical details and implementation of our products.
Posted by The XYZ Team on 16 Mar 2022
There are many products and services on the market that make it incredibly easy to buy a new domain name and set up a website and custom email address for business or personal use. However, we don’t see many easy-to-reference resources helping you understand the proper processes and procedures when sending email using a newly acquired domain name. So here are some key considerations from the XYZ team:
Email deliverability is a complex subject, and it can be difficult – even for professionals – to diagnose an issue. Spamhaus has even listed Change.org, an organization that sends billions of emails a month. No one is bulletproof. If you don’t follow best practices for sending, you will run into trouble.
A word from Spamhaus…In the case of Change.org, they looked at the listing as an opportunity to review their sending process and procedures. On discussing email reputation, Alice Cornell, Directory of Deliverability at Change.org, said, “Building your email reputation is just as important as building your brand reputation. We spend a lot of money on our brand reputation,” and she questioned, “Why would we not take that same amount of care with our domains and our IPs?”
There is a lot of misinformation about the cause of deliverability issues – including confusion around using new domain endings. The reality is that spam filters are highly-tuned to identify unwanted email – and it isn’t related to your domain ending (otherwise known as a top-level domain.) However, it is related to your email reputation.
A freshly registered domain means handling email with care
Another word from Spamhaus… The reason for this is that the expected behavior of a legitimate new domain owner isn’t to send out bulk email having just registered it. Conversely, cybercriminals “burn” through domains. They register a domain (in any TLD), immediately use it, and as soon as it’s listed or flagged as malicious, it’s cast aside. Spamhaus has a whole blocklist dedicated to domains listed within the past 24 hours.
One thing many people do not know is that for the first 30 days after initial registration, most spam protection companies will flag a newly registered domain (in any TLD). The flag simply means the domain is under heightened scrutiny, and it is watched for spammy activities, which include immediately sending mass emails.
During these early days after registration, it is ill-advised to send marketing emails that could be interpreted as spam. For this reason, it can be a good idea to register a domain while in the planning stages of your business. In fact, affordable domain pricing can enable anyone to register multiple ideas while they are still in the process of finalizing their decision.
Once a business plan has been finalized, the domain’s age(s) will have surpassed the watchlist period. The domain owner should be “warming up” the email domain by regularly sending small amounts of emails to people who expect to be emailed. It is imperative not to start sending unexpected messages in bulk or other harmful things that spammers do.
With email best practices in mind, it’s important to understand what constitutes spam. Essentially, spam pertains to all email that is sent without the recipient’s permission or consent.
Spamhaus features a comprehensive set of articles on best emailing practices and “how not to do what spammers do.” This includes taking necessary precautions such as:
Another tip to improve your online presence, which can help your email deliverability, is to make sure to set up your website early and provide an accessible method to contact you. It can even help to have a simple landing page and internal email before your entire website or business is ready to launch.
Be sure to interact with your community and be mindful of your brand quality and web presence. These practices are vital components in setting yourself apart from spammers and developing a good reputation for your domain name.
XYZ takes abuse very seriously and has a stringent anti-abuse policy. Not only do our abuse efforts help make the internet a safer place, but they also protect the reputation of our end users. We partner with various cybersecurity partners such as Spamhaus to help us confirm abusive domains. Each flagged domain is scanned by our internal tool and checked against our sophisticated software for evidence of abuse. Once a flagged domain is confirmed by our Anti-Abuse Team to be abusive, it is then immediately suspended, and the registrar is notified.
If a domain owner believes Spamhaus has wrongly listed their domain, they can use the IP & Domain Reputation Checker for more information on the listing and as a means to contact Spamhaus for removal. If they believe their domain has been wrongly suspended by the XYZ Anti-Abuse Team, they can request an unsuspension review at gen.xyz/unsuspend.
It’s our belief that we all need to work together to end online abusive practices while championing growth and innovation. Cybersecurity companies do their best to detect abuse in their areas of expertise. Junk mail filters are responsible for detecting and filtering out content that is detected as spam.
Each of these measures can accomplish even more by reporting abuse to registrars, hosting companies, and registries, the organizations that have the means and the policies to take the abuse offline. XYZ gains no revenue in taking action. We do so because it is the right thing to do. Putting an end to online abuse and making the internet a safer place requires active participation and teamwork from all domain industry organizations.
We take on the responsibility to look after our users and treat them with respect.
Spamhaus’ Data Query Service (DQS) is an affordable and effective solution to protect your email infrastructure and users.
Using your existing email protection solution, you will be able to block spam and other related threats including malware, ransomware, and phishing emails.
The service has never failed and utilizes the longest established DNSBLs in the industry.
23 March 2022
Here, fTLD, the registry for .bank and .insurance top-level domains (TLDs), provides their view of how a TLD can make it simple for users to trust their interactions with websites.
10 March 2022
XYZ Registry explains how the lack of visibility into a bad actor's domain causes issues and provides suggestions to overcome this problem.
3 March 2022
We've been reaching out to registries for their views and opinions on combating internet abuse for this blog post series. Recently we had an in-depth conversation with XYZ on their approach to domain abuse.