🚫 Spamhaus DBL
How the Spamhaus DBL classifies domains, what each return code means, and the removal-request flow.
Domain Block List (DBL)
dbl.spamhaus.org
ℹ️ About This Blocklist
The Domain Block List rates the domain itself, not the IP that sent the mail. It catches spam that originates from clean IPs — compromised marketing platforms, hijacked legitimate domains, phishing kits hosted on disposable subdomains.
What a Listing Means
The domain has been seen in spam — as the From address, as a URL inside the body, or as a redirect target. The IP that sent the mail is irrelevant; it is the domain's reputation that triggered the hit.
🔢 DNSBL Return Codes
When listed, the DNSBL returns one of these 127.x.x.x addresses. The specific code indicates the reason for the listing.
| Return IP | Meaning |
|---|---|
| 127.0.1.2 | Spam domain |
| 127.0.1.4 | Phishing domain |
| 127.0.1.5 | Malware domain |
| 127.0.1.6 | Botnet C2 domain |
| 127.0.1.102 | Abused legitimate domain (spam) |
| 127.0.1.103 | Abused legitimate domain (phishing) |
✅ How to Request Delisting
Look up the domain in the Spamhaus Blocklist Removal Center to see which category fired (spam domain, phishing, malware, abused legit). Fix the underlying issue (clean the compromised site, rotate credentials, take down the phishing kit), then file the removal request.
Request Removal from Spamhaus DBL ↗📚 Official Documentation
🔍 Check Your IP or Domain Against Spamhaus DBL
Run a live blacklist check against all 17 blocklists we monitor, including Spamhaus DBL.