Popular topics: Spam blocklist Abuse Contact ValidationPolicy blocklistWelcome listPotentially compromised accountsCombined blocklistDomain blocklistExploit blocklistRspamdWhat is XARF?


Newly Observed Domains (nod.mail.abusix.zone)

Status: Production
Type: Domain
Cloud DNS namespace: <key>.nod.mail.abusix.zone.
Rsync File: lists/nod.zone
Return Codes:
Test Points: *.test
Listing Duration: 25 hours


This list is built from data provided by our partner Farsight Security using their massive real-time Passive DNS sensor network and is not reliant on any data from WHOIS.  This has the advantage that it works across every single TLD and ccTLD, it also means that a domain could have been registered months previously, but not used until now.

This list contains all of the newly observed domains that we received from Farsight within the last 25 hours, with each domain wildcarded - it does not mean the domain is bad, but knowing a domain is new can be useful for other things like scoring or meta rules.


Our domain blocklist (dblack) already contains any newly observed domains that have been seen sending mail to any of our traps.


To make implementation of this list as easy as possible, it wildcards all domains.   This means that the parent domain is listed and any sub-domains, so you do not need to normalize the hostname or domain name before querying it.

Was this article helpful?

Can’t find what you’re looking for?

Our award-winning customer care team is here for you.

Contact Support