All Collections
Advanced Reporting
Spamhaus Reputation API (beta)
Spamhaus Reputation API (beta)

This article provides information related to Spamhaus' Reputation API

Updated over a week ago

Inbox Monster is part of a small group beta-testing Spamhaus’ new Domain Reputation API. Through this API, Spamhaus provides domain reputation Status along with additional Classifications should your domain reputation be poor.

Access Your Spamhaus Reputation

To access your Spamhaus reputation, log into your Inbox Monster account and, on the left menu items, select Reputation > Domains > select your domain. At the top of the next page, you will see 2 new Spamhaus tiles and a Spamhaus Reputation Trend chart.

Statuses

The reputation Spamhaus systems associate with the given domain. Values from Spamhaus and Inbox Monster's translations are as follows:

  • Spamhaus: Malicious = Inbox Monster: Malicious

  • Spamhaus: Bad = Inbox Monster: Bad

  • Spamhaus: Neutral = Inbox Monster: Neutral

  • Spamhaus: Good = Inbox Monster: Medium

  • Spamhaus Great = Inbox Monster: High

Dimensions

Spamhaus also provides reputation for domains across several "dimensions", each relating to a different area of focus for a domain's signals.

Per Spamhaus, the main supported dimensions are:

  • smtp: Reputation in the SMTP area

  • identity: Reputation of the identity of the domain. (Owner, registrar and more)

  • infra: Reputation of the infrastructure of the domain. (NS, hosts, etc.)

  • malware: Reputation of the domain affected by malware, bots and the distribution of such threats

  • human: The human reputation for a domain, accounting for operations and false positive fallouts. This dimension represents the opinion of Spamhaus researchers about the domain.

Spamhaus Scores are the value of all reputation dimensions combined. Zero is the neutral point, and the higher the positive number; the greater the positive reputation of the domain. Conversely, for "lower" negative numbers, the more negative the reputation.

Classifications

If the domain has been identified as the vector of some threat or behavior, this represents what that is. As such, the field would be missing entirely if no specific behavior or threat is associated with it. Possible values are:

  • Phish

  • Malware

  • Botnetcc

  • Snowshoe

  • Redirector

  • Adware

  • Sinkhole

If you have any questions, please don't hesitate to communicate with us using the Intercom icon in the bottom right of your Inbox Monster account. Thank you!

Did this answer your question?