🚫 Spamhaus DBL
How the Spamhaus DBL classifies domains, what each return code means, and the removal-request flow.
Published · Last verified · Maintained by TamingDNS
Our Blacklist Checker doesn't query this list
Spamhaus runs this zone, and it refuses lookups that come from shared hosting or public resolvers. Its free query service is for non-commercial users only. A check from our server would come back refused, or read clean when it isn't. Look the address or domain up at check.spamhaus.org instead. The listing details and return codes below still apply.
Domain Block List (DBL)
dbl.spamhaus.org
ℹ️ About This Blocklist
The Domain Block List rates the domain itself, not the IP that sent the mail. It catches spam that originates from clean IPs: compromised marketing platforms, hijacked legitimate domains, phishing kits hosted on disposable subdomains.
What a Listing Means
The domain has been seen in spam: as the From address, as a URL inside the body, or as a redirect target. The IP that sent the mail is irrelevant; it is the domain's reputation that triggered the hit.
🔢 DNSBL Return Codes
When listed, the DNSBL returns one of these 127.x.x.x addresses. The specific code indicates the reason for the listing.
| Return IP | Meaning |
|---|---|
| 127.0.1.2 | Spam domain |
| 127.0.1.4 | Phishing domain |
| 127.0.1.5 | Malware domain |
| 127.0.1.6 | Botnet C2 domain |
| 127.0.1.102 | Abused legitimate domain (spam) |
| 127.0.1.103 | Abused legitimate domain (phishing) |
✅ How to Request Delisting
Look up the domain in the Spamhaus Blocklist Removal Center to see which category fired (spam domain, phishing, malware, abused legit). Fix the underlying issue (clean the compromised site, rotate credentials, take down the phishing kit), then file the removal request.
Request Removal from Spamhaus DBL ↗📚 Official Documentation
🔍 Check Your IP or Domain Against Spamhaus DBL
Run a live blacklist check against all 20 blocklists we monitor, including Spamhaus DBL.