Most people know about IP blocklists (DNSBLs), lists of sending IP addresses with a bad reputation. Fewer know about their counterpart: URIBLs, which list domains found in the body of a message. This is why a mail server with a spotless IP reputation can still see its mail filtered, the problem is a domain in the links, not the address it was sent from.
DNSBL vs URIBL: the key difference
- A DNSBL answers: "is this sending IP known for spam?"
- A URIBL answers: "is this domain, appearing in a link or the From address, known for spam?"
Spam filters check both. A message can pass every IP check and still score as spam because one URL inside it points to a listed domain. The major URI blocklists are URIBL, Spamhaus DBL, and SURBL.
How a domain gets listed
- The domain (or one it redirects to) has been used in spam or phishing campaigns.
- A shared link shortener or tracking domain you use was abused by another customer.
- A newly-registered domain sending in volume before it has any reputation.
- A compromised page on your site is serving spam or malware.
The trap: you can inherit a listing from a domain you do not even own, a shortener, an ESP tracking domain, or an image CDN referenced in your template.
Check your domain
Run your sending domain, and any link/shortener/tracking domains in your templates, through the URIBL check. If a domain comes back listed, note which list flagged it, because each has its own delisting process.
One caveat worth knowing: when a URIBL is queried through a large public resolver it often answers with a "query refused" sentinel rather than a real result. A good checker treats that as inconclusive, not as a listing, so do not panic over a single ambiguous answer.
If you are listed
- Confirm it is really you. Check whether the listed domain is one you control or one you merely reference (a shortener, tracking, or CDN domain).
- Clean the cause. Remove compromised pages, stop the abusive campaign, or switch away from a poisoned shared domain.
- Request delisting at the specific blocklist that flagged you (URIBL, Spamhaus DBL, or SURBL). Do not request delisting before the underlying cause is fixed, or you will be relisted.
- Warm up new domains slowly rather than blasting volume from a domain with no history.
FAQ
My IP is clean but mail is filtered. How is that possible?
A URIBL listing on a domain inside your message, often a link shortener or tracking domain, can sink deliverability even with a perfect IP reputation. Check the domains, not just the IP.
How long does delisting take?
It varies by list. Some remove automatically once the abuse stops and the record expires; others process requests within hours to a couple of days after you fix the cause.
Should I stop using link shorteners?
Prefer a branded domain you control over a shared public shortener. Shared shorteners inherit the reputation of every other user, which you cannot control.