🚫 SURBL Multi
What the SURBL return codes mean and how to delist a domain from the SURBL Multi zone.
Published · Last verified · Maintained by TamingDNS
ℹ️ About This Blocklist
SURBL tracks the URLs inside spam, not the IPs sending it. The "multi" zone is the union of all the SURBL sub-lists — phishing, malware, abuse, cracked content — answered in a single query.
What a Listing Means
Your domain has shown up as a link in spam messages seen by SURBL's feeds. Which sub-list fired is encoded in the return code.
🔢 DNSBL Return Codes
When listed, the DNSBL returns one of these 127.x.x.x addresses. The specific code indicates the reason for the listing.
| Return IP | Meaning |
|---|---|
| 127.0.0.8 | Phishing list (PH) |
| 127.0.0.16 | Malware list (MW) |
| 127.0.0.64 | Abuse list (AB) |
| 127.0.0.128 | Cracked-content list (CR) |
✅ How to Request Delisting
Identify the sub-list from the return code. If the site has been compromised, clean it first — SURBL re-checks during delist. Then file the removal through the SURBL portal.
Request Removal from SURBL Multi ↗📚 Official Documentation
🔍 Check Your IP or Domain Against SURBL Multi
Run a live blacklist check against all 20 blocklists we monitor, including SURBL Multi.