You suspect your domain is blacklisted: traffic dropped, emails bounce or a customer saw a warning. Before you can fix anything, you need to know exactly where you are listed.
Here is a complete check you can run in about fifteen minutes.
Key takeaways
- Check four layers: browsers, security vendors, web filters and email blocklists.
- VirusTotal covers 90+ security vendors in one lookup.
- Google Search Console is the authoritative source for Chrome warnings.
- Web filter categories and email blocklists need separate checks.
1. Browsers: Google Safe Browsing
Chrome, Firefox and Safari rely on Google Safe Browsing. Check Google's Transparency Report site status page for a quick result, and Search Console's Security Issues report for the details and sample URLs.
2. Security vendors: VirusTotal
Paste your domain into VirusTotal. You will see verdicts from 90+ engines, such as Bitdefender, Kaspersky and CRDF. Check both the URL scan and the domain report, and click Reanalyse to get fresh results.
One or two detections out of 90 still matter. Those vendors protect millions of users and feed other systems. See one vendor flagging your domain.
3. Web filters and firewalls
Corporate networks use category databases that VirusTotal does not fully show. Look up your domain on the public tools of Fortinet, Cisco Talos, Palo Alto Networks and Forcepoint. A category such as Malicious, Phishing or Newly Registered can block business visitors.
4. Email blocklists
If emails bounce or land in spam, check Spamhaus, SURBL and other DNS-based blocklists for both your domain and your sending IP. Our comparison of email reputation and website blocklisting explains the difference.
Reading the results
For each listing, note the vendor, the label (malicious, phishing, suspicious, spam) and the date you checked. That list is the starting point for removal. Then follow our blacklist removal checklist or our complete playbook.
Frequently asked questions
How often should I check my domain?
At least weekly for business-critical domains. Automated monitoring checks daily and alerts you immediately.
Is VirusTotal enough?
No. It does not cover all web filter categories or email blocklists, and it does not show Google Search Console details.
Why do different tools show different results?
Each tool queries a different set of vendors, and vendors update at different times.
Can a subdomain be blacklisted separately?
Yes. Vendors can list a single subdomain or URL, so check the exact addresses your customers use.