For increased peace of mind and enhanced levels of security, emails should be filtered by content, following the use of IP blocklists. This will provide further protection for mail servers, networks and users.

At Spamhaus we offer three different datasets based on content reputation: Domain Blocklists (DBL), Zero Reputation Domains (ZRD) and Hash Blocklists (HBLs). All blocklists are carefully curated by an expert team of researchers, who use machine learning, combined with manual investigations and heuristics, assessing over 3 million domains every day!

Using Spamhaus Content Blocklists in combination with our IP blocklists enables you to filter over 99% of spam and malicious emails, utilizing your existing email infrastructure.

Email administrators can block email containing links to listed domains by performing message body URI checks. You can use our return codes to simply block emails, or use them as part of a spam scoring system, according to your organization’s policies, risk profile and tolerance for false positives.

Domain Blocklist (DBL)

Domains owned by spammers and used for spam or other malicious purposes. This blocklist also contains domains owned by non-spammers which are used for legitimate purposes, but have been hijacked by spammers.

The Domain Blocklist protects email containing domains associated with spam, phishing, malware, botnet command and controllers (C&Cs) and redirector domains.

Due to our strong relationships with domain registries, some domains are listed before they are seen in the wild.

This blocklist is included in our Content Blocklist subscription and is available via our Data Query Service (DQS). It can also be consumed via an API. For further information, please contact us.

Zero Reputation Domain (ZRD)

This lists newly registered domains for 24 hours. Domains that have just been registered are rarely used by legitimate organizations immediately. Cybercriminals register and burn 100s of domains daily.

The Zero Reputation Domain (ZRD) blocklist helps to protect your users from clicking on links and visiting newly registered domains until it is established that they are not associated with zero day attacks; phishing, bot-herding, spyware and ransomware campaigns.

This blocklist is included in our Content Blocklist subscription and is available via our Data Query Service (DQS). It can also be consumed via an API. For further information, please contact us.

Hash Blocklist (HBL)

This blocklist contains the following content areas: cryptowallet (Bitcoin etc.), malware, email addresses and URLs (including shorteners, redirectors and online file storage providers).

Hash Blocklists (HBL) are lists of cryptographic hashes associated with malicious content, as opposed to IP addresses or domains. They are extremely useful for filtering fraudulent emails coming from ISPs, domains, or IP addresses that Spamhaus is unable to list e.g. Gmail, or URL providers we are unable to list, e.g. drive.google.com. ?Additionally, they block emails containing malware files and crypotwallet addresses.

Due to our collection and dissemination methods, our Malware Hash Blocklist can list malware within 30 secs of initial observation by our researchers – “This [HBL] is a game-changer. It’s the biggest single effectiveness improvement we’ve had in 10+ years, all for a simple one-off implementation.” Manager, Global Cybersecurity Software Provider.

This blocklist is included in our Content Blocklist subscription and is available via our?Data Query Service (DQS).?It can also be consumed via an API. For further information, please?contact us.