DMARC Monitoring is coming soon: collect and analyze DMARC and TLS-RPT reports in one place. Learn more
Blacklist Monitoring · SURBL

Domain Listed on SURBL? Here's How to Clear It

SURBL doesn't list mail servers. It lists domains that show up in the links inside spam, phishing, and malware emails, so when your domain is on it, mail that mentions your domain gets flagged, no matter who sends it.

Examples:

Why Legitimate Sites Get Listed

Often it's a hacked website. Attackers plant phishing pages or malware on a real WordPress or Joomla site, and SURBL lists the domain until it's cleaned up. A hijacked DNS control panel can do the same thing by adding malicious subdomains.

Clean Up, Then Request Removal

For phishing, malware, and hacked-site listings, SURBL wants the site and every machine that uploads to it fully cleaned and secured before you ask. Check your DNS records too. Then look up your domain on SURBL's lookup page and follow the removal form it leads to.

Monitor It Instead

Find Out Before Your Customers' Filters Do

Generator Labs checks your domains against SURBL and 150+ other data sources and alerts you by email, Slack, SMS, or webhook when one gets listed, so a hacked site gets fixed in hours, not weeks. Free for your first host.

Listing detail with the data source and its delisting steps
Alert · Slack #mail-ops
example.com listed on SURBL
Delisting steps attached

Frequently Asked Questions

About SURBL listings.

Still have questions? Our support team is ready to help. Contact Us
Does SURBL list IP addresses?

No. It lists domains found in message bodies.

Why is my site listed as cracked?

It was probably hacked and is hosting content someone else put there. Clean it up, then request removal.

How do I request removal?

Through the removal form linked from SURBL's lookup page.