Domain Blacklist Checker
Type a domain to see whether it’s on the blocklists and security filters that can stop its email or block its website. Each source is tested before we trust its answer, so “not listed” only ever means a real answer.
You can paste a full link or email address and we’ll use just the domain. We don’t keep the domains you check.
How to Read the Result
| Result | What it means |
|---|---|
| Listed | This source flags the domain. Systems that rely on it may reject the domain’s email or refuse to open its website. |
| Not listed | The source passed our test and has no entry for this domain. |
| Couldn’t check | The source failed our test or didn’t reply, so this says nothing either way. It’s not a pass. |
Why We Test Every List First
Blocklists often turn away automated lookups from shared web servers, and they don’t always say so. When we asked
Spamhaus’s domain list about its own official test name from our server, it returned nothing at all, which looks exactly like
“this domain is clean”. URIBL gave the same answer for every name we tried, including example.com.
So on every check we first ask each source about a name it should flag and a name it shouldn’t. If either answer is wrong, that source shows as “Couldn’t check”. Spamhaus and URIBL fail that test from our server, so we link to their own lookup pages instead of guessing.
What We Check
- SURBL lists domains that appear in unwanted email, with categories such as phishing and malware.
- NordSpam lists domains used in spam.
- Quad9 is a public DNS service that refuses to resolve domains it considers dangerous.
- Cloudflare 1.1.1.2 is the malware-blocking version of Cloudflare’s public DNS.
This tool covers domains. If you’re checking the address of a mail server, use our IP Reputation checker, because IP blacklists are separate from domain ones.
How to Get a Domain Removed
Fix the cause before you ask. A list will usually put the domain straight back, or ignore the request, if the problem is still there.
- Find out why. Look for a hacked website, a compromised mailbox, a form that bots use to send mail, or a mailing list people never signed up for.
- Fix it. Clean the site, change the passwords, and turn on two-factor sign-in.
- Protect your mail. Check your records with the DMARC Checker, or build new ones with the SPF and DMARC Generator.
- Ask each list that flagged you. Use the removal link in your result, and explain what went wrong and what you changed.
NordSpam’s removal is free and manual, and for a domain the request has to come from an email address at that domain. SURBL starts its process from its lookup page. For a wrong block, Quad9 takes reports through its support page, and Cloudflare through its domain feedback form.
What This Check Can’t Tell You
- Whether a domain is safe. A brand-new scam site may not be on any list yet. “Not listed” isn’t a recommendation.
- Whether your email reaches the inbox. Gmail, Outlook and other providers also use private reputation data that nobody outside can query.
- Every list that exists. We only report on sources that pass our test. Some companies run private lists that can’t be checked from outside.
Frequently Asked Questions
What is a domain blacklist?
It’s a list of domains linked to spam, phishing or malware, published so that mail servers and security tools can look them up. You’ll also see it called a domain blocklist, or a DBL or URIBL.
What’s the difference between a domain blacklist and an IP blacklist?
An IP blacklist flags the server sending the mail. A domain blacklist flags the name, whether it’s the sender’s domain or a link inside the message, so moving to a new server won’t clear it. Our guide to IP address blacklists covers the other side.
My domain is listed but I’ve done nothing wrong. Why?
Hacked websites are a common reason: someone adds a phishing page and the owner doesn’t notice. Your domain can also be caught up if it appears in other people’s spam. Check for files and pages you don’t recognise, then follow the removal steps above.
Why does it say a domain doesn’t exist?
A normal DNS lookup found no such name. It might be mistyped or expired. We still check the blocklists, because a domain can stay listed after its website has gone.
Do you keep the domains I check?
No. The domain is sent to our server, checked, and the result comes back to your browser. We only keep a count of how many checks your address made in the last minute, and a total for the day, to stop abuse and stay within the lists’ limits.