What the Spamhaus DBL is
Spamhaus is a long-running organization that tracks spam and other online abuse and publishes several blocklists. The DBL, short for Domain Block List, is the one that lists domain names rather than server addresses. A domain ends up on it when Spamhaus has seen it used in spam, or linked to phishing or malware.
The DBL is one of the most widely used domain lists in email filtering, so a listing tends to have a noticeable effect. Its lookup zone is dbl.spamhaus.org, which is the name you will often see in bounce messages and filter logs.
It helps to know that Spamhaus also runs separate lists for IP addresses. If a bounce message mentions Spamhaus together with a server IP rather than your domain, it is probably one of those lists, and your email provider is usually the one who needs to act. Our Spamhaus IP blocklists page covers those lists (SBL, XBL, CSS and PBL).
How mail filters use the DBL
When a message arrives, many mail servers and spam filters look up the domains it contains against the DBL. That includes the domain in the sender address and, importantly, the domains in every link in the message body.
If one of those domains is listed, the filter may reject the message outright, send it to the spam folder, or add to its spam score. Exactly what happens depends on how each receiving server is configured, which is why some recipients still get your emails while others do not.
Because filters look at links, a DBL listing can hurt you even if you never send email from that domain. A shop domain that appears in your newsletter, or in the signature of every staff email, is enough.
Common reasons a domain gets on the DBL
- A compromised website. Attackers often hack a site and upload spam or phishing pages, then link to them in spam campaigns. Spamhaus sees your domain in the spam and lists it.
- Your domain linked in spam sent by others. Spammers sometimes include legitimate domains in their messages, or abuse open redirects on a site to disguise where a link really goes.
- Patterns typical of newly registered spam domains. Domains that are very new, have little history and start sending or appearing in a lot of mail can resemble throwaway domains that spammers use.
- Shared URL shorteners and tracking domains. If your emails use a public link shortener or a shared tracking domain that is listed, your messages can be filtered even though your own domain is clean.
- Your own sending practices. Mailing people who did not sign up, or using purchased lists, can lead to your domain being associated with spam.
- DNS changes that look like abuse. Fast changes to name servers or DNS records soon after registration resemble throwaway spam domains, so check your DNS for changes nobody on your team made.
How to confirm a Spamhaus DBL listing
Spamhaus offers a free lookup on its own website where you can enter a domain and see whether it is listed and, in most cases, some information about why. Use the official Spamhaus site directly rather than a third-party page that claims to remove listings for you. The official checker is at check.spamhaus.org, and the removal option for a DBL listing is linked from the lookup result.
You can also run your domain through our free Email Blacklist Checker, which checks Spamhaus DBL along with other spam blacklists in one go. This is useful because a domain listed on Spamhaus is often listed on other lists too, and each one needs its own request. The checker shows the verdict without an account and allows 5 checks per hour.
Check every domain that appears in your emails, not just your main one. Tracking domains, shop domains and link shorteners are easy to forget.
Step-by-step Spamhaus DBL removal
- 1Confirm the listing on the Spamhaus website and note any reason or category it gives.
- 2Find the cause. Scan your website for unfamiliar pages, files and redirects, check your server and CMS for recent changes, and review any email campaigns sent shortly before the listing.
- 3Fix it fully. Remove spam or phishing pages, update the software that let attackers in, change passwords, close open redirects and stop any mailing that went to people who did not opt in.
- 4Replace any listed link shorteners or shared tracking domains in your email templates with your own clean domain.
- 5Check the result: make sure no spam pages remain and that your site no longer redirects visitors to unexpected places.
- 6Submit one removal request through the removal option in the check.spamhaus.org result. Use an email address at a domain you control rather than a free webmail address, and explain briefly what happened, what you fixed and how you send email now.
- 7Wait for the response, then check the listing again and send a few test emails to confirm delivery has improved.
How long removal takes
Timing is decided by Spamhaus, not by us or by you. When the cause is clearly fixed and the request is well documented, removal can be fairly quick, sometimes within a day or so. If Spamhaus still sees problems, or the domain has been listed before, it can take longer or the request may be declined until more is done.
Once the domain is removed from the list, mail servers usually pick up the change within hours, as their cached lookups expire. Your inbox placement may take a little longer to recover, because mailbox providers also keep their own reputation history.
Spamhaus is known for being strict. A domain that is removed and then listed again for the same problem may find later requests harder, so it pays to fix the cause properly the first time.
What not to do
- Do not send repeated or angry requests. Multiple messages for the same listing, or demands and threats, tend to slow things down rather than speed them up.
- Do not request removal before the fix. If the spam pages are still on your site, the domain is likely to be listed again.
- Do not pay a site that promises guaranteed instant Spamhaus removal. Nobody outside Spamhaus can promise its decision.
- Do not switch to a new domain to escape the listing. A brand new domain has no reputation and can itself look suspicious.
- Do not ignore the other lists. If you only fix Spamhaus, listings elsewhere can keep hurting delivery.
Doing it yourself vs getting help
If you have one domain, know what caused the listing and are comfortable describing the fix, you can request Spamhaus DBL removal yourself. The process is free.
Getting help makes sense when you are listed on several lists at once, when you are not sure what caused it, or when you manage many domains and need to know about listings as soon as they happen. It also helps to have someone who knows what each operator expects to see in a request.
How BrandsDefender helps with Spamhaus DBL removal
We check monitored domains every day against Spamhaus DBL and other spam blacklists, plus 90+ security vendors. You get an email alert when a listing appears or clears, and you can connect webhooks if you want alerts in your own systems.
When your domain is wrongly listed, our team reviews the listing, prepares the evidence, submits the removal request through Spamhaus's official channel and follows up until they respond. We send you a confirmation when the listing is removed. We also handle any other listed domain blacklists at the same time.
We do not clean hacked websites or remove spam pages. If the listing is justified, we tell you what needs fixing based on what the list and scans show, and we only submit the request once it is resolved. Your developer, host or a cleanup specialist does that work. We also cannot guarantee that Spamhaus will remove the listing, or how fast.
Our terms are no cure, no pay. A one-time case is €39, paid when you open it, and refunded in full if Spamhaus refuses removal. On subscription plans a case credit is only used once removal is confirmed. If Spamhaus lists the domain again within 30 days of a confirmed removal and nothing changed on your side, we resubmit at no extra charge. This does not apply to justified listings, if you did not provide requested information, or if you withdrew the case.