Skip to content
YAS.SH
TLS & Email🌐 YAS server-sideAPI availableadvanced

DNSBL & Spam Blacklist Radar

Audits IP and domain reputation across major DNSBL / RBL spam blacklists including Spamhaus ZEN, Barracuda, SpamCop, and Invaluement.

Processed by YAS · not stored
Ready to runInstant execution
All tools →
Result

What does this tool do?

Audits IP and domain reputation across major DNSBL / RBL spam blacklists including Spamhaus ZEN, Barracuda, SpamCop, and Invaluement.

Why would I use it?

  • Your transactional emails are suddenly bouncing or going to spam, and you need to check if your IP is blacklisted.
  • You are verifying the reputation of a new dedicated IP address before assigning it to production traffic.
  • You are monitoring domain deliverability posture.

Real-life example

Input
IP / Domain: 198.51.100.42
Output
Clean: 5/5 providers · Spamhaus ZEN: Clean · Barracuda BRBL: Clean · SpamCop: Clean

Queries real-time DNSBL reputation lists via reverse-IP lookups.

Input → Process → Output → Next

Input
Enter sending IP address or domain name.
Process
Queries authoritative reputation DNSBL zones across multiple global RBL providers.
Output
Clear breakdown of blacklisting status with provider details.
Next action
If listed, visit the provider's delisting portal to resolve the reputation issue.

Common mistakes

  • Ignoring listings on tier-1 blacklists like Spamhaus (causes immediate mail rejection).
  • Requesting delisting before fixing the underlying spam or compromised account source.
  • Not monitoring IP reputation continuously.

What the result means

A comprehensive reputation health check showing whether your email infrastructure is flagged as spam.

Privacy & security

Your input is sent to YAS infrastructure because the tool requires server-side processing or public network queries. Input is not stored.

API

Endpoint
POST https://yas.sh/api/v1/tools/dnsbl-radar
Request Header
Content-Type: application/json
cURL
curl -X POST "https://yas.sh/api/v1/tools/dnsbl-radar" \
  -H "Content-Type: application/json" \
  -d '{"target":"1.1.1.1"}'
JavaScript
const res = await fetch("https://yas.sh/api/v1/tools/dnsbl-radar", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({
  "target": "1.1.1.1"
}),
});
const data = await res.json();
Python
import requests

r = requests.post("https://yas.sh/api/v1/tools/dnsbl-radar", json={"target":"1.1.1.1"})
data = r.json()
FieldTypeRequiredDescription
targetstringYesIP address or domain
Success response
{ "slug": "dnsbl-radar", "target": "1.1.1.1", "listedCount": 0, "totalAudited": 5 }

Audit IP and domain reputation across Spamhaus, Barracuda and SpamCop.

Error responses
  • 400 VALIDATION_ERROR — invalid input or unsupported option.
  • 413 PAYLOAD_TOO_LARGE — input exceeds the 64 KB limit.
  • 429 RATE_LIMIT_EXCEEDED — rate limit exceeded (60 req/min).
Limits
  • Maximum input: 64 KB per request.
  • Rate limit: 60 requests/min per IP address.
  • Authenticated accounts benefit from higher tier quotas.

DNSBL & Spam Blacklist Radar: technical reference, use cases and FAQ

How DNSBL & Spam Blacklist Radar works

A DNS blocklist encodes reputation as DNS records. To check an address, the octets are reversed and the zone appended (203.0.113.7 against zen.spamhaus.org becomes 7.113.0.203.zen.spamhaus.org); an A record in 127.0.0.0/8 means listed, and the final octet encodes the listing reason — different codes for policy blocks, exploited machines and spam sources. NXDOMAIN means not listed.

Lists differ enormously in what they mean and how they are operated. Some list dynamic residential ranges as policy rather than as evidence of abuse; some list entire /24 blocks because of one neighbour; some have automated delisting after a quiet period and others require a manual request. Interpreting a hit requires knowing which list produced it, which is why a raw 'you are on 2 of 40 lists' figure is close to meaningless.

When to use it: real-world scenarios

Investigating a sudden delivery drop

A new listing on a widely-used zone explains a step change in bounces overnight, and the reason code points at whether it was volume, content or a compromised account.

Vetting an IP before you start sending

Recycled cloud addresses frequently arrive pre-listed from a previous tenant. Checking before warm-up saves weeks of reputation work.

Monitoring a sending fleet

Periodic checks catch a single compromised host before its listing affects the shared reputation of the whole range.

Reading bounce messages that cite a blocklist

The reason code and the operating list determine whether delisting is automatic, self-service or requires evidence of remediation.

Pro tips

  • Fix the cause before requesting delisting. Relisting after a premature request is treated far less sympathetically.
  • Weight the lists: Spamhaus ZEN carries real delivery consequences; obscure lists often carry none. Do not chase every hit.
  • Check the domain as well as the IP — domain-based lists (DBL) and URI blocklists affect content, not just connection.
  • Confirm reverse DNS, SPF, DKIM and DMARC are correct before delisting; providers check them when reviewing.

Limitations and edge cases

What this tool deliberately does not do, and where it will disagree with other implementations.

  • Coverage is partial — no tool queries every list, and major operators rate-limit or block public query services.
  • Listing criteria are opaque and vary; a hit is not proof of abuse.
  • Results can be cached, so a very recent delisting may still appear.
  • Being unlisted does not mean good reputation — the large providers run their own internal reputation systems that no public list reflects.

Frequently asked questions

How do I get delisted?
Fix the underlying issue — compromised account, open relay, bad list hygiene — then use the operator's delisting form. Most reputable lists remove promptly once the source is resolved; premature requests damage your standing.
How long does a listing last?
It varies by operator: some expire automatically after a quiet period of days, others persist until you request removal. The reason code usually indicates which applies.
I am not listed anywhere but my mail still lands in spam.
Gmail, Outlook and Yahoo rely primarily on their own internal reputation, engagement signals and authentication — not public blocklists. Check DMARC alignment, sending consistency and recipient engagement.
Should I worry about every list I appear on?
No. Weight by consequence: Spamhaus ZEN materially affects delivery, while many small lists are used by almost nobody. Investigate the cause regardless, but prioritise accordingly.
Ask YAS AI
🍪 Cookies & privacy. Essential cookies keep you signed in and remember language and theme. Google AdSense and reCAPTCHA are Google technologies: AdSense runs only after Accept All; reCAPTCHA loads on sign-in and contact forms. See how Google uses data: https://policies.google.com/technologies/partner-sites cookie policy · privacy policy.
Settings