Reputation Lookup

About the operator lookup tool

The vspam.org operator lookup lets mail administrators and analysts check canonical domains, exact IPv4 and IPv6 hosts, and ASN reputation context from one place. Domain and ASN checks use the server-normalized operator lookup API, while exact-host infrastructure checks use the live IP RBL surface.

What you can look up

• Canonical domains — check whether a domain has been reported for hosting phishing pages or related abuse.
• IPv4 and exact IPv6 hosts — check whether a sending IP is listed for phishing, spam, or botnet activity.
• ASNs — review provider and allocation-level reputation context without treating ASNs as a blunt blocklist.

How listings work

Artifacts are normalized, enriched, and scored before publication. Canonical domains, exact hosts, and feed-backed infrastructure listings are published according to their own thresholds and policy rules. Listings can expire after inactivity, or be removed via the delisting request process.

Programmatic lookups

For automated checks, use GET /api/v1/public/operator-lookup for domains and ASNs, or query the DNSBL / IP RBL directly for exact hosts. DNS lookups remain available via GET /api/v1/rbl/check or direct DNS ( dig +short 1.0.168.192.dnsbl.vspam.org). See the REST API and the integration guides for Postfix, Exim, rspamd, and SpamAssassin configuration.