Skip to main content
Home/Resources/Tools/Blacklist Checker

Free tool

Email blacklist checker

Check if your domain or IP is listed on 50+ major email blacklists. Identify delivery issues and protect your sender reputation.

Automate monitoring

InboxKit monitors your domains 24/7 and alerts you instantly if you get blacklisted.

Get Started

Overview

What is an email blacklist?

An email blacklist, also called a DNSBL or RBL, is a database of IP addresses and domains that an operator has seen sending spam. Receiving mail servers query these lists over DNS while your message is still in transit, and use the answer to decide whether to accept it, file it in spam, or reject it at the SMTP layer before it is ever delivered.

Listings are published by the blacklist operators, not by Gmail or Outlook. The major providers read those lists and act on them, which is why a single entry on a widely consulted list such as Spamhaus ZEN can stop a campaign that was delivering normally an hour earlier. Blacklists sit alongside authentication and engagement as one of the signals that decide whether your email reaches the inbox.

Lookup format

How a DNSBL lookup works

A blacklist check is an ordinary DNS query against the list operator's zone. The answer, not the absence of one, is what carries the meaning:

Query

4.3.2.1.zen.spamhaus.org

The sending IP is reversed octet by octet and prefixed to the list zone

Listed

127.0.0.2

An A record in 127.0.0.0/8 usually means listed, and the last octet says why. The exceptions are refusals (127.255.255.x, or 127.0.0.1 from SURBL)

Not listed

NXDOMAIN

No record at all is the clean answer, which is why silence has to be verified

Checking 203.0.113.45 against Spamhaus ZEN

dig +short 45.113.0.203.zen.spamhaus.org

Validation

What our blacklist checker checks

Every scan queries the lists live at the moment you run it, rather than serving a cached result from an earlier check:

Domain-based lists

Queries URI and domain reputation lists such as SURBL directly against the domain you enter

IP-based lists

Resolves your domain to its sending addresses and checks each one against every IP list

Tier-one coverage

Includes Spamhaus ZEN and SBL, SpamCop, Barracuda Central and CBL, the lists providers actually consult

Reason codes

Translates the 127.0.0.x answer into the specific zone that listed you, where the operator publishes one

Refused queries

Answers in 127.255.255.0/24, or 127.0.0.1 from SURBL, mean the list refused the query. Those lists show as Couldn't check, not clean

Delisting links

Surfaces the removal form for each operator that has you listed, so you can start the request immediately

Impact

Why domains get listed and what it costs

How Listings Happen

Spam traps

Mail to a recycled or pristine trap address tells an operator the list was bought or scraped.

Complaint volume

Enough recipients marking mail as spam triggers community-reported lists such as SpamCop.

Compromised sending

A cracked mailbox, open relay or malware on the network sends without your knowledge.

Shared IP neighbours

On shared infrastructure another tenant's spam lists the address you send from.

What A Listing Does

Hard rejections

Tier-one listings bounce mail at the SMTP layer, with the list named in the error.

Spam folder placement

Smaller lists rarely block outright, but they weigh against you in filtering.

Reputation damage

Providers keep their own internal reputation, which outlives the public listing.

Slow recovery

Placement returns over days or weeks of clean sending, not the moment you are delisted.

66

DNSBLs queried

3s

Timeout per list

50%

Coverage floor to score

Troubleshooting

Common blacklist mistakes

Requesting delisting before fixing the cause -- Most operators re-list within days, and repeat listings take longer to clear each time
Checking the domain but not the sending IP -- The two are listed independently, so a clean domain says nothing about the IP behind it
Treating a refused query as clean -- An answer in 127.255.255.0/24, or 127.0.0.1 from SURBL, means the list declined to answer, not that you passed
Chasing every minor list -- Obscure lists have little effect on placement; several at once is the signal worth acting on
Resuming full volume right after delisting -- Provider-side reputation lags the public list, so ramp back up gradually instead
Only checking after deliverability drops -- By then the campaign has already sent; check before each send while warming a domain

Blacklist response codes explained

Spamhaus ZEN answers a single query with the zone that listed you, encoded in the last octet. The zone matters, because the fix is different for each one.

AnswerZoneWhat it means
127.0.0.2SBLManually listed for spam from this address. Fix the sending, then request removal
127.0.0.4-7XBLCompromised machine: malware, open proxy or relay. Clean the host before delisting
127.0.0.9SBL DROPThe whole netblock is listed. Your provider has to resolve this, not you
127.0.0.10PBLA residential or dynamic address not meant to send mail directly. Relay through a smarthost
127.0.0.11CSSSnowshoe spam pattern: low volume spread across many addresses to stay under thresholds
NXDOMAINNoneNot listed. This is the clean answer
127.255.255.xRefusedThe query was rejected or over quota. The result is unknown, not clean
127.0.0.1Refused (SURBL)SURBL refuses queries from large public resolvers this way. Unknown, not a listing. On other lists, such as EFnet, 127.0.0.1 is a real listing
Any non-127 addressNot a listingThe name resolved to an ordinary web address, not a DNSBL answer. Shown as Couldn't check (non-listing answer)

A PBL listing is the one people misread most often: it is not an accusation of spam, only a statement that the address should not be talking to mail servers directly. The blacklist diagnosis guide walks through reading each code, and blacklisted IP recovery covers what to do once the cause is found.

How to get removed from a blacklist

Delisting is the last step, not the first. Operators re-list a sender that is cleaned up on paper but still sending the same mail, and each repeat listing is harder to clear.

  1. Identify which list, and which zone. The response code above tells you whether you are dealing with spam reports, a compromised host, or a policy listing that was never about your content.
  2. Stop the sending that caused it. Pause the campaign. A listing that appears mid-send gets worse with every message that goes out after it.
  3. Find the actual source. Audit for compromised mailboxes, an open relay, or a purchased list segment. Check whether the listing followed a specific import or a specific sending account.
  4. Clean the list that triggered it. Remove unengaged and unverified addresses with the email verifier before you send again, since spam traps are the most common cause.
  5. Confirm authentication still passes. Verify SPF, DKIM and DMARC with the DNS checker so the resumed sending is not failing on a second front.
  6. Submit the removal request. Use the delisting link the scan gives you for each list. Some lists expire on their own once abuse stops and need no request.
  7. Resume slowly and re-check. Ramp volume back up over days, send to engaged recipients first, and re-run this check before each send. The blacklist removal guide covers the per-operator forms in detail.

Blacklists are not the same as sender reputation

A blacklist is public, binary and operated by a third party: you are on it or you are not, and anyone can query it. Sender reputation is private, continuous and held by each mailbox provider, built from your complaint rate, bounce rate and engagement over time. Clearing a listing does nothing to the second one.

That is why mail can still land in spam the day after a successful delisting, and why a clean blacklist scan is a floor rather than a goal. Check the reputation side with the reputation checker and Google Postmaster Tools, and read domain reputation vs IP reputation for how the two are scored separately.

FAQ

Frequently asked questions

An email blacklist, also called a DNSBL or RBL, is a real-time database of IP addresses and domains known for sending spam. Receiving servers query these lists over DNS while your message is still in transit, and use the answer to decide whether to accept it, route it to spam, or reject it outright. A listing is published by the blacklist operator, not by Gmail or Outlook, but the major providers read those lists and act on them.

Enter your domain or sending IP in the checker above and run the scan. The tool resolves your domain to its mail-sending IP addresses, then queries both domain-based lists such as SURBL and IP-based lists such as Spamhaus ZEN, SpamCop and Barracuda Central. You get the status of every list, the reason code where the operator publishes one, and a delisting link for each list that has you flagged.

Fix the cause first, because most lists re-add a domain that is delisted while still sending badly. Find the compromised account, open relay, bad list segment or malware that triggered the listing and stop it. Then submit a removal request on the operator's own site: Spamhaus, SpamCop and Barracuda each run their own form. Some lists expire automatically once the abuse stops and need no request at all.

It depends on the list. Automated lists such as the Spamhaus PBL and CBL usually clear within hours of a successful request. SpamCop entries age out on their own, typically within 24 hours of the last spam report. Manually reviewed listings such as the Spamhaus SBL can take several days, and repeat listings take longer each time. Sending volume should stay low until the listing clears.

The two are listed independently. IP listings usually follow the behaviour of the sending server, which on shared infrastructure includes every other sender on that IP. Domain listings follow the domain in the message body or the From header, and usually come from URLs in your content. You can be listed on either side alone, which is why this tool checks both and reports them separately.

Spamhaus ZEN is the one to care about most, because Gmail, Outlook and most corporate filters consult it directly, and it combines the SBL, XBL, CSS and PBL zones in a single query. SpamCop and Barracuda Central carry real weight too. Beyond those, most of the smaller lists have little effect on inbox placement on their own, though several at once is a signal that something is genuinely wrong with your sending.

Yes, on the major lists. A Spamhaus ZEN listing commonly means outright rejection at the SMTP layer with a bounce that names the list. Smaller lists are more likely to push mail to the spam folder than to block it. Neither provider publishes exactly which lists it weighs, so treat a listing on a tier-one list as an incident and a listing on an obscure one as a warning to investigate.

Weekly is enough for a stable sending setup, and immediately whenever open rates drop, bounces rise, or a bounce message mentions a blacklist by name. If you are warming new domains or running cold outreach, check before each campaign: a listing that appears mid-send does far more damage than one caught early.

DNSBL operators rate-limit queries from shared and cloud resolvers. Instead of a listing, a refused query comes back as an answer in the 127.255.255.0/24 range, or as 127.0.0.1 from SURBL. The checker treats both as unknown, not clean: the list is marked "Couldn't check" with the reason "Blacklist refused the query". If a list answers with an ordinary web address instead of a 127.x code, it is not a real listing either, so the list is marked "Couldn't check" with the reason "Blacklist gave a non-listing answer". Neither error means you are listed. If coverage falls below half the lists, the result is marked unreliable rather than scored.

Yes. On shared sending infrastructure the IP reputation is collective, so another tenant's spam can list the address you send from even when your own sending is clean. You cannot fix that from your side beyond asking the provider to act. It is the main argument for dedicated or per-mailbox IPs on cold outreach, where a single neighbour can take out a whole campaign.

No. Delisting removes the block, but the reputation damage that caused it persists at the mailbox providers, who keep their own internal reputation separate from any public list. Expect placement to recover over days to weeks of clean sending, not instantly. Reduce volume, send to engaged recipients first, and keep authentication passing while reputation rebuilds.

Yes, entirely free with no sign-up and no limit on the number of checks. It queries the DNSBLs live at the moment you run it, so the result reflects the current state of each list rather than a cached lookup.

Get started

Monitor your blacklist status automatically

InboxKit monitors your domains 24/7 and alerts you instantly if you get blacklisted.