NordSpam Domain Name Blacklist (DBL)
NordSpam DBL is a moderated blocklist (or blacklist) of domains used for spam and phishing, focused on protecting Nordic and European users.
Updated on 17 Jun 2026: We updated this guide with NordSpam's query limits, DBL testpoints, delisting requirements, and high-volume usage guidance.
Summarize with
Check if you are listed on NordSpam Domain Name Blacklist (DBL)
And 143 other blocklists.
Spamhaus
0Spam
Cisco
NoSolicitado
URIBL
abuse.ro
ALPHANET
Anonmails
Ascams
BLOCKEDSERVERS
Calivent Networks
EFnet
JustSpam
Kempt.net
NordSpam
RV-SOFT Technology
Scientific Spam
Spamikaze
SpamRATS
SPFBL
Suomispam
System 5 Hosting
Team Cymru
Validity
www.blocklist.de Fail2Ban-Reporting Service
ZapBL
2stepback.dk
Fayntic Services
ORB UK
technoirc.org
TechTheftSpamhaus0SpamCiscoNoSolicitadoURIBLabuse.roALPHANETAnonmailsAscamsBLOCKEDSERVERSCalivent NetworksEFnetJustSpamKempt.netNordSpamRV-SOFT TechnologyScientific SpamSpamikazeSpamRATSSPFBLSuomispamSystem 5 HostingTeam CymruValiditywww.blocklist.de Fail2Ban-Reporting ServiceZapBL2stepback.dkFayntic ServicesORB UKtechnoirc.orgTechTheftSpamhaus0SpamCiscoNoSolicitadoURIBLabuse.roALPHANETAnonmailsAscamsBLOCKEDSERVERSCalivent NetworksEFnetJustSpamKempt.netNordSpamRV-SOFT TechnologyScientific SpamSpamikazeSpamRATSSPFBLSuomispamSystem 5 HostingTeam CymruValiditywww.blocklist.de Fail2Ban-Reporting ServiceZapBL2stepback.dkFayntic ServicesORB UKtechnoirc.orgTechTheftSpamhaus0SpamCiscoNoSolicitadoURIBLabuse.roALPHANETAnonmailsAscamsBLOCKEDSERVERSCalivent NetworksEFnetJustSpamKempt.netNordSpamRV-SOFT TechnologyScientific SpamSpamikazeSpamRATSSPFBLSuomispamSystem 5 HostingTeam CymruValiditywww.blocklist.de Fail2Ban-Reporting ServiceZapBL2stepback.dkFayntic ServicesORB UKtechnoirc.orgTechTheftSpamhaus0SpamCiscoNoSolicitadoURIBLabuse.roALPHANETAnonmailsAscamsBLOCKEDSERVERSCalivent NetworksEFnetJustSpamKempt.netNordSpamRV-SOFT TechnologyScientific SpamSpamikazeSpamRATSSPFBLSuomispamSystem 5 HostingTeam CymruValiditywww.blocklist.de Fail2Ban-Reporting ServiceZapBL2stepback.dkFayntic ServicesORB UKtechnoirc.orgTechTheftWhat is NordSpam Domain Name Blacklist (DBL)?
The NordSpam Domain Name Blacklist (DBL) is a URIBL, which means it lists domain names and URIs found in message content, not the sending IP addresses. Mail server administrators use this blocklist (or blacklist) to identify and filter messages that contain links to spam, phishing, or other abusive websites.
According to its policy, NordSpam lists domains that appear to be under the control of, used by, or made available for use by spammers and abusers in unsolicited bulk email (UBE), phishing, online scams, ransomware, webspam, or other internet abuse. To reduce false positives, all domains added to the reputation database are manually moderated. NordSpam does not disclose its exact listing criteria because that would help abusive senders avoid the blacklist.
The NordSpam DBL is an RFC5782 compliant DNS-based Blackhole List (DNSBL). Administrators query it using the zone dbl.nordspam.com. A query can use either an A record or a TXT record. If a domain is listed on this blocklist, an A record query returns 127.0.0.2, and a TXT query provides extra listing detail. For example:
DNS query examplebash
$ dig +short A test.dbl.nordspam.com 127.0.0.2 $ dig +short TXT test.dbl.nordspam.com "RFC5782 TEST-record."
Who runs NordSpam Domain Name Blacklist (DBL)?
The blacklist is operated by The NordSpam Project, a nonprofit organization. The project's main goal is to track and report spam and spam-like activity that primarily targets Nordic and European countries. The organization is privately funded and sponsored by a few companies, and it offers its blocklist data free of charge for both commercial and non-commercial use. The NordSpam Project follows the best practice guidelines in RFC6471 for operating its DNSBL services.
How should administrators query NordSpam DBL?
For manual checks, query the domain without the http, https, or www part. NordSpam's usage guidance lists dbl.nordspam.com as active, domain/URI-only data and recommends blocking at the MTA level when a local mail policy uses the DBL.
- Use the DBL only for domain or URI data. Do not query IP addresses through dbl.nordspam.com.
- Use A record queries for the positive response and TXT queries for extra context about the listing.
- Treat test.dbl.nordspam.com as the positive testpoint and invalid.dbl.nordspam.com as the negative testpoint. The list is not valid for filtering if either testpoint fails.
- Contact NordSpam before making more than 10,000 queries per day. For thousands of queries per hour, ask about API access or a zone transfer for a local cache.
How do I get removed and delisted from NordSpam Domain Name Blacklist (DBL)?
NordSpam only provides reputation data; it does not directly block your emails. Mail server operators decide whether to use this data to reject, quarantine, or score mail. If your domain is on this blocklist or blacklist, you must request removal directly from NordSpam.
The delisting process is manual and free of charge. Listings do not automatically expire, although NordSpam says old listings can be randomly rechecked and delisted if they no longer appear to be sources of spam. To request delisting for a domain, follow these steps:
- Resolve the issue before requesting removal by identifying and fixing the problem that caused the listing, such as a compromised website, phishing page, or unsolicited email.
- Send the request from an email address at the blacklisted domain, such as webmaster@yourdomain.com. NordSpam says it can verify the address by sending a confirmation message and asking for a response.
- Write the request in English and plain text, with evidence that the spam issue has been resolved.
- Explain what changed to prevent future spam or abuse. NordSpam says it almost certainly ignores requests without that explanation.
- Send the request to delist@nordspam.com.
Requests are typically processed within 1 to 48 hours when the request includes a valid explanation of how the abuse problem was eliminated. NordSpam can decline removal if the corrective actions are not sufficient to prevent future abuse.
Suped's product can support the cleanup by showing DMARC aggregate reports for unauthorized sources and authentication gaps while you investigate, but the actual delisting request still has to go through NordSpam.
What's the impact of being listed on NordSpam Domain Name Blacklist (DBL)?
The impact of a NordSpam DBL listing is usually lower than a listing on a broad global blocklist, but it depends on who receives your mail. NordSpam focuses on spam and abuse aimed mainly at Nordic and European users. If many of your recipients are in those regions, a listing can cause rejections, spam-folder placement, or higher filtering scores wherever the recipient's mail system uses the DBL.
