Search tools

Blacklist check

Is an IP address, a mail server or a domain on a spam blacklist? 27 lists asked at once, with the reason for each listing and where to ask for removal.

22 IP + 5 domain lists No false listings IPv4 and IPv6 Nothing stored

Not asked from a browser

    Next

    Sent from your browser, not through webdaveAsked: nothing yet

    What is an email blacklist?

    Short answer

    A blacklist (DNSBL) is a list of IP addresses or domains seen sending spam, run by an anti-spam service. Mail servers ask it over DNS for every incoming message; if the sender is listed, the message is refused or sent to spam. Being on one major list is enough to lose mail.

    Type an address to check it, or a domain: the page finds the domain's mail servers (MX), checks each of their addresses, and checks the domain against the domain lists. For a domain whose own SPF names single servers, the email health check checks those too.

    Which blacklists are checked?

    Major: Barracuda, SpamCop and Mailspike, used by many business mail filters. Others: PSBL, UCEPROTECT (levels 1 to 3), DroneBL, s5h, 0spam, Anonmails, SPFBL, NordSpam, InterServer, blocklist.de, Spam Eating Monkey, GBUdb, Kempt, ZapBL, Fabel, Metunet and Backscatterer. Domains: NordSpam DBL, SuomiSpam, Scientific Spam, SPFBL and Day Old Bread (newly registered domains).

    Most lists only cover IPv4; IPv6 addresses go to the five that cover IPv6. Each list's own test entry is asked first; a list that stops answering it is shown as "could not check", never as clean.

    Why are Spamhaus and others not in the results?

    Spamhaus, SpamRATS, URIBL and SURBL refuse lookups that come through public resolvers such as Cloudflare's and Google's, and Spamhaus's terms require its paid service for commercial use. When asked anyway, they answer with codes such as 127.255.255.254 that look like a listing, which is why some free checkers say everything is blacklisted. This page never asks them and links to their own lookup pages instead. Microsoft's own block list is checked on its delist portal.

    How to get off a blacklist

    1. Find the cause first: a hacked mailbox (look for forwarding rules and sent mail you did not write), an infected computer behind the same address, a hacked website form, or a mailing to old, bought or scraped addresses.
    2. Stop it: reset passwords, turn on multi-factor sign-in, fix the form, clean the computer.
    3. Use each list's removal link. SpamCop and UCEPROTECT level 1 expire on their own within days once the spam stops; Barracuda and others take a short form.
    4. For a shared address (Microsoft 365, Google, a hosting company), the provider handles delisting: open a ticket with them.

    Questions

    It is the test entry every list publishes (RFC 5782), so it shows what a listing looks like. Real addresses are almost never on more than a few lists.

    Rarely. Those levels list whole networks and providers for other customers' spam, and few mail servers use them. They are shown, but not counted as a problem.

    The email health check takes up to 50 domains and checks each one's mail servers on these lists, along with SPF, DMARC and DKIM, and exports a CSV.

    Not by webdave: your browser asks Cloudflare's resolver, which asks each list. The lists see the questions as coming from Cloudflare. Private and reserved addresses are never sent anywhere.