Your domain is on a blacklist (Spamhaus DBL, SURBL, URIBL)

What it means

Some blacklists list domain names, not IP addresses. They look at the domains in the From address and in the links inside an email. The best known are:

• Spamhaus DBL (Domain Block List): widely used, high impact.
• SURBL and URIBL: lists of domains found in links of spam or phishing emails.

Why it matters

An IP listing can be avoided by changing server. A domain listing follows you everywhere: every email mentioning or linking to that domain can be filtered, whatever service you use to send it.

How to check

• Send a test email from the home page: the report checks the sender domain and every domain found in the links of your email.
• Use the Domain scanner at /domain-scanner or the Blacklist lookup at /blacklists to check a domain directly.

Look carefully at which domain is listed. It may be yours, or only a link in your email.

If a link in your email is listed

• Remove the link, or replace it with a link to a reputable website.
• Avoid public URL shorteners: they are often listed because spammers use them too. Link to your own domain instead.
• Check your email signature and images: a forgotten old link or tracking domain can be the culprit.

If your own domain is listed

1. Find the cause. Common reasons:
   • Your website was hacked and hosts phishing pages or spam links. Ask your web host to scan it, update your CMS and plugins, change passwords.
   • Spam was sent in your name because DMARC is not protecting your domain.
   • A hacked email account sent spam with your domain.
   • You sent marketing emails to people who never asked for them, or to an old list.
   • The domain is very new, or was used by spammers before you bought it.
2. Clean up first. Remove malicious pages, secure accounts, and pause bulk campaigns.
3. Protect your domain. Set up SPF, DKIM and DMARC, and plan to move DMARC to p=quarantine or p=reject.
4. Request removal on each list's website, explaining what you fixed:
   • Spamhaus DBL: check.spamhaus.org
   • SURBL: use the lookup form on the SURBL website.
   • URIBL: use the lookup page on the URIBL website.
5. Wait. Removal can take from a few hours to a few days. Requests made before the cause is fixed are often refused.

Prevent it from happening again

• Keep your website and plugins up to date.
• Only email people who gave you permission, and clean your lists.
• Use a strong DMARC policy so nobody else can send in your name.

Blacklist removal help is available in the paid Delivmail dashboard if you need guidance.

Check that it is fixed

Look the domain up again on the Blacklist lookup page, then send a new test email from the home page. The domain blacklist section should be clean.