- Operator
- The Spamhaus Project
- Zone
- dbl.spamhaus.org
- Lists
- domain names
- Status
- Active
- Severity
- Critical
- Lookup
- check.spamhaus.org
- Removal
- self-service form (no guarantee): check.spamhaus.org
- Cost
- free
- Turnaround
- minutes after approval; up to 24h resolver lag
- Auto-expiry
- unpublished
What is Spamhaus DBL?
The Spamhaus Domain Block List (DBL) is a list of domain names observed in spam, phishing, malware or botnet command-and-control, plus legitimate domains that have been hijacked for abuse. It is queried with the domain itself (yourdomain.com.dbl.spamhaus.org), so it catches a sender whose IP reputation is fine but whose domain appears in spam, in a link, or in the From header.
Return codes tell you why: 127.0.1.2 is a spam domain, .4 phishing, .5 malware, .6 botnet C&C, and the 127.0.1.102 to 106 range marks a legitimate domain that has been abused. The distinction matters, because an abused-domain listing points at a compromise rather than at your own sending.
| 127.0.1.2 | Spam domain |
| 127.0.1.4 | Phishing domain |
| 127.0.1.5 | Malware domain |
| 127.0.1.6 | Botnet C&C domain |
| 127.0.1.102 | Abused legitimate domain (spam) |
| 127.0.1.103 | Abused spammed redirector |
| 127.0.1.104 | Abused legitimate domain (phishing) |
| 127.0.1.105 | Abused legitimate domain (malware) |
| 127.0.1.106 | Abused legitimate domain (botnet C&C) |
How serious is a Spamhaus DBL listing?
Critical: large providers and gateways enforce this list, so a listing turns into rejected mail rather than spam-foldering. Treat it as the first thing to clear. The lookup at check.spamhaus.org is the reference for whether you are listed today.
Why your domain got listed
What the operator lists: Domains tied to spam, phishing, malware, botnet C&C or hijacked for abuse — the list cold-email DOMAINS hit.
How to remove your domain from Spamhaus DBL
- 1
Look the domain up at check.spamhaus.org
The operator's own lookup shows whether the domain is listed and, where the list publishes reasons, why. Third-party checkers can lag or misread the zone.
- 2
Fix the cause before you ask
Domains tied to spam, phishing, malware, botnet C&C or hijacked for abuse — the list cold-email DOMAINS hit. A removal request while the cause is live is the fastest route to a repeat listing, and repeat listings are slower to clear.
- 3
Request removal at check.spamhaus.org
Self-service form (no guarantee). Cost: free.
- 4
Verify and watch for a return
Typical turnaround: minutes after approval; up to 24h resolver lag. Re-run the live check after that window; a listing that comes back means the source is still active.
- 01Look it upcheck.spamhaus.org
- 02Fix the causebefore you ask
- 03Self-service removalcheck.spamhaus.org
- 04Verifyminutes after approval
cost: free
How long removal takes
Typical turnaround: minutes after approval; up to 24h resolver lag. Automatic expiry: unpublished. Cost: free.
Frequently asked questions
How do I get removed from Spamhaus DBL?
Self-service form (no guarantee), at check.spamhaus.org, after the cause is fixed. Cost: free. Typical turnaround: minutes after approval; up to 24h resolver lag.
How long does a Spamhaus DBL listing last?
Automatic expiry: unpublished. Removal turnaround: minutes after approval; up to 24h resolver lag. A listing that returns after clearing means the cause is still live.
Does Spamhaus DBL removal cost anything?
Free. No third party can remove a domain from Spamhaus DBL faster than the operator's own process, so paid "express delisting" offers add nothing.
What does Spamhaus DBL list?
Domain names: Domains tied to spam, phishing, malware, botnet C&C or hijacked for abuse — the list cold-email DOMAINS hit. Zones: dbl.spamhaus.org.
How do I check whether I am on Spamhaus DBL?
Use the operator's lookup at check.spamhaus.org, or the live check on this page, which queries dbl.spamhaus.org directly.
Record checked against the operator's site on ; the whole set was last reviewed on . Cells that say undocumented or not found are gaps in the operator's own material, left as they are.