🚫 SURBL Multi

What the SURBL return codes mean and how to delist a domain from the SURBL Multi zone.

Type
Domain Block List (DBL)
Hostname
multi.surbl.org
Operator
SURBL ↗
Delist URL
Removal form ↗

ℹ️ About This Blocklist

SURBL tracks the URLs inside spam, not the IPs sending it. The "multi" zone is the union of all the SURBL sub-lists — phishing, malware, abuse, cracked content — answered in a single query.

What a Listing Means

Your domain has shown up as a link in spam messages seen by SURBL's feeds. Which sub-list fired is encoded in the return code.

🔢 DNSBL Return Codes

When listed, the DNSBL returns one of these 127.x.x.x addresses. The specific code indicates the reason for the listing.

Return IP Meaning
127.0.0.8 Phishing list (PH)
127.0.0.16 Malware list (MW)
127.0.0.64 Abuse list (AB)
127.0.0.128 Cracked-content list (CR)

✅ How to Request Delisting

Identify the sub-list from the return code. If the site has been compromised, clean it first — SURBL re-checks during delist. Then file the removal through the SURBL portal.

Request Removal from SURBL Multi ↗

📚 Official Documentation

SURBL info SURBL delisting

🔍 Check Your IP or Domain Against SURBL Multi

Run a live blacklist check against all 17 blocklists we monitor, including SURBL Multi.

Blacklist Checker → ← All Blocklists