Abusix Guardian Mail is a real-time threat intelligence and DNSBL service designed to protect email infrastructure from inbound spam, phishing, ransomware, zero-day malware, and malicious URLs. By querying real-time IP, domain, hash, and short-URL threat lists content filters can block or flag malicious messages before they enter user inboxes.
| Area | Test name | Description | Default scores |
|---|---|---|---|
| header | __RCVD_IN_AMI |
Received via a relay in Guardian Mail | -- |
| header | RCVD_IN_AMI_BLACK |
Received via a relay in Guardian Mail Black | 3.0 |
| header | RCVD_IN_AMI_EXPLOIT |
Received via a relay in Guardian Mail Exploit | 3.0 |
| header | RCVD_IN_AMI_DYN |
Received via a relay in Guardian Mail Dynamic | 3.0 |
| header | RCVD_IN_AMI_WHITE |
Received via a relay in Guardian Mail White | -0.1 |
| header | URIBL_AMI_DBLACK |
Contains a spam URL listed in the Guardian Mail domain blocklist | 3.0 |
| header | URIBL_AMI_WHITE |
Contains a domain listed in the Guardian Mail domain whitelist | -0.1 |
Abusix offers several subscription levels depending on server volume and query throughput requirements.
| Tier | Pricing | Daily Query Limit | Features & Support |
|---|---|---|---|
| Forever Free | $0 / month | Up to 5,000 queries / day | Access to all core zones (IP, Domain, Hash), standard threat updates, documentation support. |
| Pro | Starts at $10 / month | Scaled by volume (10k+ queries / day) | Live chat & email support, real-time query analytics dashboard, access to beta threat zones. |
| Enterprise | Custom | Custom volume / High-throughput | Dedicated SLA, rsync access option, custom billing terms, dedicated feed customization. |
Note: Query counts are calculated as total DNSBL lookups performed across all query zones over a 24-hour cycle. You can track your usage at https://app.abusix.com/email-protection/usage.
Follow these steps to generate your unique Abusix API key for Warden integration:
2ksdfhk2234233453sdf234524534533).