How to remove your domain from NordSpam DBL

Q: How do I remove my domain from the NordSpam DBL?

Fix the abuse first, then email delist@nordspam.com in English, in plain text, from the owner of the listed domain, including evidence the issue is resolved and how you will prevent it recurring. There is no automated removal form.

The NordSpam DBL flags domains tied to spam and abuse. Here is what a listing means and how to get your domain removed.

Check your domain free → NordSpam DBL removal tool ↗

What it is

The list, in plain terms.

The NordSpam DBL is the domain blocklist of the NordSpam Project, published as the DNS zone dbl.nordspam.com. NordSpam describes itself as a privately funded non-profit that tracks spammers and spam-like activity, aimed mainly at Nordic and European mail, and runs an RFC 5782-compliant DNSBL that receivers query to filter inbound mail.

The DBL lists domain names, not IP addresses — it flags the domain that appears in a message, such as the sender address or a URL in the body, rather than the server that sent it. NordSpam publishes a separate IP blocklist, bl.nordspam.com, for sending-server reputation; this guide covers the domain-based DBL. A listing means mail referencing your domain can be deferred or rejected by any receiver that consults the zone.

NordSpam is a smaller, regional list rather than a top-tier blocklist like Spamhaus, so its reach is narrower. If your mail is bouncing, confirm from the receiving server's rejection message that dbl.nordspam.com is actually the cause before you act on this listing.

Why you get listed

What a listing on NordSpam DBL means.

A domain used in spam NordSpam saw your domain under the control of, used by, or made available to spammers in unsolicited bulk email or other internet-based abuse. This is the core reason a domain lands on the DBL.

Domains appearing in message bodies A domain does not have to be the sender to be listed. A URL, redirect or link to your domain inside spam messages can trigger a listing, even when someone else sent the mail.

A compromised or abused domain A hijacked account, a defaced site, or an open mail form on your domain can emit or promote spam without your knowledge. The listing reflects the observed abuse, not your intent.

Poor sending hygiene High complaint rates, hitting spam traps, or bulk sending to recipients who did not opt in can all produce spam-like signals associated with your domain.

How to get removed

Delisting, in order.

Removal is free. Fix the cause first — a listing you clear without a fix comes straight back.

1 Confirm the listing. Query your domain against dbl.nordspam.com, or use the lookup on nordspam.com. A listed domain returns 127.0.0.2. Make sure the receiver that rejected your mail actually cites NordSpam before you spend time on this list.
2 Find and fix the abuse. Identify why the domain was flagged: secure any hijacked account, clean a compromised website, close an abusable mail form or open redirect, and stop the campaign that drew complaints. NordSpam does not disclose its exact listing criteria and will disregard a removal request that does not explain how the problem was fixed.
3 Email the delisting request. There is no automated removal form. Send a request in English, in plain text, to [email protected] from the owner of the listed domain. Include evidence that the abuse is resolved and an explanation of what you have done to prevent it recurring.
4 Wait for the manual review. Delisting is handled by hand. NordSpam states requests are typically investigated and processed within 1 to 48 hours when a valid explanation is provided. They may decline if the corrective action looks insufficient to prevent future abuse.
5 Re-check before resuming. Once removal is confirmed, re-query dbl.nordspam.com to verify the domain no longer returns 127.0.0.2, then resume sending. Fix the underlying cause first, because a domain that keeps appearing in abuse will simply be relisted.

The official route

Straight to the source.

Removal happens on NordSpam DBL's own tool — never through a paid service.

NordSpam DBL removal tool ↗

Return codes

127.0.0.2 Listed — the domain is on the NordSpam DBL. A TXT query returns further detail.

How long it takes

Removal is a manual, email-only process. NordSpam states valid requests are typically reviewed within 1 to 48 hours of submission. There is no automatic expiry and no self-service instant delisting, and a request without evidence that the abuse is fixed will be ignored or declined.

Common questions

About NordSpam DBL, specifically.

How do I remove my domain from the NordSpam DBL? Fix the abuse first, then email [email protected] in English, in plain text, from the owner of the listed domain, including evidence the issue is resolved and how you will prevent it recurring. There is no automated removal form.

Does NordSpam charge to delist a domain? No. NordSpam removal is free of charge. Any third party offering to remove a NordSpam listing for a fee is a scam — no outside service can influence or speed up a NordSpam decision.

How long does NordSpam removal take? NordSpam states valid requests are typically investigated and processed within 1 to 48 hours of submission. It is a manual review, so a request without a proper explanation of the fix can take longer or be declined.

Why was my domain listed on dbl.nordspam.com? NordSpam saw your domain used by or associated with spam or other internet abuse. That can mean a compromised account or website, a domain appearing as a link inside spam, or bulk sending to recipients who did not opt in. NordSpam does not publish its exact criteria.

What does a NordSpam DBL lookup return? A listed domain returns 127.0.0.2 for an A-record query against dbl.nordspam.com. A TXT query returns additional detail about the listing. NordSpam uses a single positive return code rather than a table of codes.

Is the NordSpam DBL widely used? NordSpam is a smaller, regionally focused list, so fewer receivers consult it than the major blocklists. Confirm from the bounce message that dbl.nordspam.com is the actual cause before treating it as your delivery problem.

The bounce behind the listing.

554 5.7.1 message rejected → The permanent bounce a listing most often triggers — what it means and how to clear it. 550 5.7.1 blocked → A rejection on reputation grounds — usually the same listing, seen from the sender side. Blacklist checker → Re-check your domain and every sending IP once the cause is fixed.

Do not fix it blind.

See every list you are on and every authentication problem behind the listing in one 40-second check — then let monitoring tell you the day a listing comes back.

Check your domain free → See monitoring