---
title: "Domainsure Realtime Blocklists"
type: "page"
post_id: "915"
slug: "rbl-realtime-blocklists"
canonical: "https://domainsure.com/rbl-realtime-blocklists/"
markdown_url: "https://domainsure.com/rbl-realtime-blocklists.md"
json_url: "https://domainsure.com/rbl-realtime-blocklists.json"
txt_url: "https://domainsure.com/rbl-realtime-blocklists.txt"
published: "2024-02-23T16:19:50+00:00"
modified: "2025-03-21T14:30:19+00:00"
author: "markjr"
categories:
tags:
site_name: "DomainSure Risk Intelligence Corp."
publisher: ""
language: "en-US"
generator: "easyPress Markdown"
generator_version: "1.0.2"
---
In the course of protecting our client portfolios, we come across hostile domain names that pose a risk to the community at large.

Domainsure makes these feeds available to other security vendors, DNS resolvers, and service providers as a way to collaborate and share data about harmful and hostile domain names.

**The following Realtime Blocklists (RBLs) are available:** (as of Feb 23, 2024)

Domainsure Crypto Defender RBL
------------------------------

Live phishes, clones, malware sites targeting known crypto and Bitcoin exchanges, wallets, DeFi platforms, token projects, DAOs and blockchains.

Query:
`{domain}.crypto.rbl.domainsure.zone`

Example:
`{domain}.crypto.rbl.domainsure.zone`

Or [Request Access](https://domainsure.com/rpz-access/) to the Response Policy Zone (RPZ).

Domainsure Verified Phishing RBL
--------------------------------

Live phishing attacks on external entities detected through our network of honeypots and sensors.

Query:
`{domain}.verified.rbl.domainsure.zone`

Example:
`$ dig example.com.verified.rbl.domainsure.zone`

Or [Request Access](https://domainsure.com/rpz-access/) to the Response Policy Zone (RPZ).

---

Domainsure RiffRaff and IPV4.RiffRaff RBLs
------------------------------------------

Domains and IPs listed in RiffRaff are those which have been identified as actively spamming or sending hostile payloads across the easyBrand ecosystem: easyDNS, Zoneedit or Domainsure itself.

Third-parties are welcome to use both lists:

### Block by RiffRaff Domains (RHS):

Query:
`{domain}.riffraff.rbl.domainsure.zone`

Example:
`example.com.riffraff.rbl.domainsure.zone`
Postfix Config:
`smtpd_sender_restrictions = {other stuff},<br></br>     reject_rhsbl_sender riffraff.rbl.domainsure.zone`

### Block by RiffRaff IPv4 Addresses:

Query:
`{reverse_ip}.ipv4.riffraff.rbl.domainsure.zone`

Example (for 192.168.3.4):
`4.3.168.192.ipv4.riffraff.rbl.domainsure.zone`

Postfix config:
`smtpd_client_restrictions = { other stuff},<br></br>     reject_rbl_client ipv4.riffraff.rbl.domainsure.zone`