The Spamhaus Project · Domains only (no IP addresses). It is a domain DNSBL that lists domain names with a poor reputation — typically the domains appearing in message bodies (links/URLs), the From/Reply-To, or HELO/envelope, not the sending IP.
Spamhaus DBL (Domain Block List)
The DBL is a domain reputation blocklist published by The Spamhaus Project in domain-DNSBL format. It lists domain names — never IPs — that show signs of involvement in spam, phishing, malware, or botnet activity, so receivers can filter on the domains found inside a message (links, sender, HELO) rather than the connecting IP. It is highly automated, fed by an engine that continuously analyses a large share of global email flow, and is generally precise and conservative (it carries distinct return codes for spam, phishing, malware, botnet C&C, and "abused legit" domains), but a listing can sink delivery for any mail that references the domain.
Why you get listed
- The domain (in links, From/Reply-To, or HELO) appears in spam captured by Spamhaus traps and live feeds
- The domain is used for phishing, malware distribution, or as botnet command-and-control infrastructure
- A legitimate site is hacked/compromised and serving spam URLs or malicious redirects (the 'abused legit' categories)
- Newly registered or 'snowshoe' domains showing classic spammer registration/usage fingerprints
- A domain hosting redirectors/URL shorteners being abused to cloak spam links
- Reputation signals across the domain's infrastructure (nameservers, registrant patterns, associated IPs) crossing the listing threshold
Impact
Widely deployed: Spamhaus data is used by major mailbox providers, spam filters, and millions of servers, and the DBL specifically lets them reject or score-up any message that merely mentions the listed domain. Because it filters on the domain rather than the IP, a DBL listing follows your brand everywhere — mail sent from clean IPs still gets blocked or junked if it links to or is sent from the listed domain. For a sending/brand domain a listing is high-impact (broad deliverability damage); for an incidentally abused subdomain or third-party redirector the blast radius depends on how widely that domain is used in your mail.
How to delist from Spamhaus DBL (Domain Block List)
- First fix the underlying cause: if the domain was hacked, remove the malicious pages/redirects, patch the CMS/plugins, rotate credentials, and clean any open redirects or abused URL shorteners — delisting before the problem is fixed just re-lists the domain
- Confirm the listing and read the specific return code/reason at the Spamhaus IP & Domain Reputation Checker (https://check.spamhaus.org) by looking up your exact domain
- If the listing is automated and the abuse has stopped, wait — most DBL listings expire on their own once the domain stops matching the listing criteria; no manual action is needed
- If you have fixed the issue and need it cleared sooner, look up the domain on check.spamhaus.org and complete the Verification form it returns: if automatic removal is permitted the listing clears immediately, otherwise the Checker raises a ticket and routes you to the Ticket Center for support — removal is always free
- Do NOT use automated tools or scripts against the lookup/removal pages — Spamhaus firewalls automated queries and will block excessive or abusive removers
- Note that 'abused-legit' (hacked-site) categories may have removal handled differently or require the abuse to clearly cease; re-submitting repeatedly without fixing the root cause can get you blocked from the form
Good to know
- The DBL is self-expiring: most listings are automatic and drop off on their own once the domain stops matching the listing criteria — for many cases you fix the abuse and wait rather than file anything
- Removal is always free and only handled at check.spamhaus.org (the IP & Domain Reputation Checker, which replaced the old Blocklist Removal Center); Spamhaus has no affiliation with any paid 'blocklist removal' service and no third party can expedite or influence a Spamhaus removal
- Do not hit the lookup/removal pages with automated tools — Spamhaus firewalls bots, and excessive/abusive removers can be blocked from the form entirely
- DBL lists DOMAINS, not IPs — it is a different list from the IP-based SBL (manual/evidence-based, removed via the SBL listing's own instructions) and the PBL (a policy list of dynamic/residential IP ranges that end users self-remove or that ISPs manage); don't confuse a DBL domain listing with an IP listing
- Submitting a removal does not guarantee delisting, and clearing a domain while the abuse is still present will simply trigger an immediate re-list
- After an approved removal it propagates in minutes on Spamhaus's side, but downstream resolvers/filters caching the old data can take up to ~24 hours to reflect it
Stay off the lists in the first place.
Most listings trace back to volume spikes, bad lists, and cold domains. Scheduler Zero warms your domains, paces sending, and keeps your lists clean so you build reputation instead of blacklisting yourself.