Is your website blocklisted, or flagged as malicious or spam?
Most firms find out the way one of our clients did: a prospect mentions a browser warning, or an offering memorandum blast silently lands in spam for weeks.
What gets checked
| Check | What it answers |
|---|---|
| Spamhaus DBL | Is the domain itself on a spam or malware domain list? |
| Spamhaus ZEN | Is the web or mail server IP listed (SBL, CSS, XBL, PBL)? |
| SURBL | Does the domain appear in spam or phishing messages? |
| Barracuda, SpamCop | Is the sending IP on a reputation blocklist that mail servers consult? |
| VirusTotal | Do any antivirus or URL-scanner vendors flag the site — and which ones? |
| Google Safe Browsing | Will Chrome or Gmail show a warning to visitors? |
| SSL / TLS | Is the certificate valid, who issued it, and when does it expire? |
| SPF and DMARC | Can anyone send email claiming to be your domain, and are failures rejected? |
Every result names the source and shows the exact answer we received, including the DNS lookup behind each blocklist row, so any finding can be verified independently.
Why a CRE firm should care
- Deliverability. Since 2024, Gmail and Yahoo require bulk senders to authenticate their mail. A missing SPF or DMARC record, or a listed sending IP, quietly pushes OM blasts into spam.
- Trust at the worst moment. A browser warning appears exactly when a prospect clicks the link in your email.
- It is rarely a dramatic hack. The usual causes are an outdated plugin, a shared mail server that got listed, or an expired certificate.
What to do if you are listed
- Diagnose. Find which list or vendor flags you, and why. "Your site is flagged" is not actionable; "listed on X for Y" is.
- Clean up. Patch plugins, remove injected files, rotate credentials and API keys.
- Harden. Valid SSL, SPF and DMARC, and basic security headers.
- Request review, then monitor. Submit delisting requests, then re-check so you know the moment it clears — or if it returns.
In DeshTEK Digital
- One scan costs 1 credit, and the free plan includes 5 credits a month
- Scheduled monitoring runs daily or weekly and alerts only when something changes
- Monitored domains: 1 on Free, 10 on Starter, 25 on Pro
- Every scan can be exported as a branded PDF for a client
Run it on your own site
The free plan includes 5 credits a month — no credit card, no time limit.
Start free →Frequently asked questions
How do I check if my website is on a blocklist?
Query the major blocklists for both your domain and its server IP. DeshTEK Digital's Website Reputation & Blocklist Check tests Spamhaus DBL and ZEN, SURBL, Barracuda and SpamCop, plus VirusTotal antivirus vendors and Google Safe Browsing, and shows the exact DNS answer behind each result.
Why are my offering memorandum emails going to spam?
The usual causes are a missing or misconfigured SPF or DMARC record, a sending IP on a spam blocklist, or a domain listed on Spamhaus DBL. Gmail and Yahoo have required bulk senders to authenticate their mail since 2024, so an unauthenticated domain is far more likely to be filtered.
What does it mean if antivirus vendors flag my website?
It usually means the site was compromised — an outdated plugin, injected code or a phishing page — or that it shares infrastructure with something that was. The report names each vendor that flags you and links to its report so you can confirm and request a re-scan after cleaning up.
How long does it take to get delisted?
It varies by list. Most accept a removal request once the underlying problem is fixed, and propagation typically takes 24 to 48 hours. Scheduled monitoring tells you the moment it clears.
Is the blocklist check free?
Yes, on the free plan. A scan costs 1 credit and the free plan includes 5 credits a month, with no credit card and no time limit.