IP/Domain Reputation Monitoring

Reputation Monitoring continuously tracks the reputation of your domains and sending IP addresses across major email blacklists and reputation services. A poor reputation can cause your legitimate emails to be rejected or routed to spam, even when your authentication records are correctly configured.

Accessing Reputation Monitoring

Navigate to Threat Intelligence → Reputation Monitoring in the sidebar. The dashboard shows all monitored domains and IP addresses along with their current reputation status.

Blacklists Monitored

SpoofWard checks your domains and IPs against a comprehensive list of major blacklist providers, including:

• Spamhaus — SBL, XBL, PBL, and DBL lists covering spam sources, exploits, and domain reputation
• Barracuda Reputation Block List (BRBL) — Maintained by Barracuda Networks based on email traffic analysis
• SpamCop — Automated spam reporting and blacklisting service
• SURBL — Tracks domains appearing in unsolicited messages
• URIBL — Identifies domains used in spam message bodies
• Composite Blocking List (CBL) — Detects hosts sending spam or infected with malware
• Invaluement — Focuses on snowshoe spam and other evasive sending patterns
• Additional providers — SpoofWard checks over 30 blacklists in total to provide comprehensive coverage

Reputation Score

Each monitored domain and IP receives a reputation score that reflects its current standing across all checked blacklists. The score is calculated based on the number and severity of listings:

• Excellent (90–100) — Not listed on any blacklists. Your sending reputation is clean.
• Good (70–89) — Minor listings on low-impact blacklists that are unlikely to affect deliverability significantly.
• Fair (40–69) — Listed on one or more moderate-impact blacklists. Some recipients may reject or filter your emails. Investigate and request delisting.
• Poor (0–39) — Listed on major blacklists. Email deliverability is likely severely impacted. Immediate action is required.

Monitoring Dashboard

The Reputation Monitoring dashboard provides an at-a-glance view of your reputation status:

• Status per blacklist — Each blacklist shows a Listed or Clean badge, so you can see exactly where problems exist
• Score history chart — Tracks your reputation score over time with daily data points. Use this to identify trends and correlate reputation changes with sending events
• Last checked timestamp — Shows when each blacklist was last queried so you know the data is current
• IP and domain breakdown — Separate views for domain-based and IP-based reputation, since they can be affected independently

Alerts and Notifications

SpoofWard automatically sends alerts when your reputation status changes. You will be notified when:

• A domain or IP is newly listed on a blacklist
• A domain or IP is removed from a blacklist (delisted)
• Your overall reputation score drops below a configured threshold

Alert notifications are delivered through your configured Alert Channels (email, Slack, webhook, or Microsoft Teams). You can customize alert thresholds in Alert Rules.

Adding IPs and Domains

SpoofWard automatically monitors the domains you have added to your account. To monitor additional IP addresses (such as your outbound mail server IPs), add them from the Reputation Monitoring settings page. We recommend adding all IPs listed in your SPF record to ensure complete coverage.