Investigating a sudden delivery drop
A new listing on a widely-used zone explains a step change in bounces overnight, and the reason code points at whether it was volume, content or a compromised account.
Audits IP and domain reputation across major DNSBL / RBL spam blacklists including Spamhaus ZEN, Barracuda, SpamCop, and Invaluement.
—Audits IP and domain reputation across major DNSBL / RBL spam blacklists including Spamhaus ZEN, Barracuda, SpamCop, and Invaluement.
IP / Domain: 198.51.100.42
Clean: 5/5 providers · Spamhaus ZEN: Clean · Barracuda BRBL: Clean · SpamCop: Clean
Queries real-time DNSBL reputation lists via reverse-IP lookups.
A comprehensive reputation health check showing whether your email infrastructure is flagged as spam.
Your input is sent to YAS infrastructure because the tool requires server-side processing or public network queries. Input is not stored.
curl -X POST "https://yas.sh/api/v1/tools/dnsbl-radar" \
-H "Content-Type: application/json" \
-d '{"target":"1.1.1.1"}'const res = await fetch("https://yas.sh/api/v1/tools/dnsbl-radar", {
method: "POST",
headers: { "Content-Type": "application/json" },
body: JSON.stringify({
"target": "1.1.1.1"
}),
});
const data = await res.json();import requests
r = requests.post("https://yas.sh/api/v1/tools/dnsbl-radar", json={"target":"1.1.1.1"})
data = r.json()| Field | Type | Required | Description |
|---|---|---|---|
| target | string | Yes | IP address or domain |
{ "slug": "dnsbl-radar", "target": "1.1.1.1", "listedCount": 0, "totalAudited": 5 }Audit IP and domain reputation across Spamhaus, Barracuda and SpamCop.
400 VALIDATION_ERROR — invalid input or unsupported option.413 PAYLOAD_TOO_LARGE — input exceeds the 64 KB limit.429 RATE_LIMIT_EXCEEDED — rate limit exceeded (60 req/min).A DNS blocklist encodes reputation as DNS records. To check an address, the octets are reversed and the zone appended (203.0.113.7 against zen.spamhaus.org becomes 7.113.0.203.zen.spamhaus.org); an A record in 127.0.0.0/8 means listed, and the final octet encodes the listing reason — different codes for policy blocks, exploited machines and spam sources. NXDOMAIN means not listed.
Lists differ enormously in what they mean and how they are operated. Some list dynamic residential ranges as policy rather than as evidence of abuse; some list entire /24 blocks because of one neighbour; some have automated delisting after a quiet period and others require a manual request. Interpreting a hit requires knowing which list produced it, which is why a raw 'you are on 2 of 40 lists' figure is close to meaningless.
A new listing on a widely-used zone explains a step change in bounces overnight, and the reason code points at whether it was volume, content or a compromised account.
Recycled cloud addresses frequently arrive pre-listed from a previous tenant. Checking before warm-up saves weeks of reputation work.
Periodic checks catch a single compromised host before its listing affects the shared reputation of the whole range.
The reason code and the operating list determine whether delisting is automatic, self-service or requires evidence of remediation.
What this tool deliberately does not do, and where it will disagree with other implementations.