The SPFBL URIBL is a domain and IP blocklist operated by the Brazilian anti-spam project, SPFBL, which uses a database of user and contributor spam complaints to identify and list spam sources.
The SPFBL URIBL is a domain-based blocklist (blacklist) that lists domains found in the body of spam emails. It operates based on the main SPFBL system. The abuse data is collected from a network of customers and contributors. When their recipients report an email as spam, the complaint is processed and contributing domains are added to the URIBL. Mail servers using this blacklist reject or filter emails that contain domains listed on the SPFBL URIBL.
Who runs SPFBL URIBL?
SPFBL URIBL is operated by SPFBL, a Brazilian anti-spam organization. SPFBL was created in late 2015 with the primary goal of reducing spam originating from or targeting Brazil. It provides its blocklist services for free to any Mail Transfer Agents (MTAs) that want to block sources of spam and IP addresses unsuitable for sending email.
How do I get removed and delisted from SPFBL URIBL?
SPFBL provides a self-service removal process on their website. Before you request removal from this blocklist, you should resolve the underlying issue that caused the listing. There are separate rules for free and paid delisting. You can start the process at the SPFBL delisting page.
Free delisting requirements
Your IP must have a reverse DNS (rDNS) record that points to the same mail server IP, with Forward-Confirmed rDNS (FCrDNS) validation.
The rDNS must use a domain that you control. Generic rDNS from a data center or ISP is not accepted. The domain's TLD cannot be a free TLD and must have a public WHOIS record without privacy protection.
A 'postmaster' email account must be active and able to receive emails for the domain registered in the rDNS.
If you use IPv6 with a SLAAC flag, you must keep port 25 open to prove an active SMTP service is running.
The IP's reputation must have less than 25% negative points relative to its total sending volume.
Paid delisting requirements
Only for static IPs with a configured mail server reverse, even if FCrDNS is not valid.
You need a PayPal account. The email address for this account will be assigned as the responsible party for any abuse.
The PayPal user must consent to have their email address shown publicly on the SPFBL platform as the party responsible for the IP's abuse.
The IP's reputation must have less than 25% negative points relative to its total sending volume.
Important considerations: SPFBL notes that only IPs with active email servers can be delisted. If your IP is listed but does not run a mail server, they state there is no harm and no action is needed. You should also whitelist admin@spfbl.net to ensure you receive important messages from their system. Any email address used in the delist process will be registered as responsible for the IP and will receive abuse reports in ARF format. These reports must be handled, otherwise the IP will be listed on the blacklist again.
For some domains, free delisting is not an option. This occurs if the domain's WHOIS information is private. To resolve this, you must disable WHOIS privacy protection, wait an hour, and then attempt the free delisting. Additionally, domains registered with certain TLDs that are commonly used for spam are not eligible for free delisting. These TLDs include: best, bid, buzz, cam, cf, click, club, cyou, date, dev, durban, enterprises, faith, fit, fun, ga, gdn, gq, guru, icu, im, institute, joburg, life, limited, llc, loan, lol, men, okinawa, ooo, page, rest, review, ryukyu, site, space, stream, team, tk, today, top, uno, wang, webcam, win, work, world and xyz.
What's the impact of being listed on SPFBL URIBL?
The impact of being on the SPFBL URIBL is low, especially for senders outside of Brazil. Its usage is concentrated among Brazilian ISPs and companies. However, being on any blocklist (or blacklist) negatively affects your email deliverability. A listing on a URIBL means that any email containing your domain name, not just emails sent from your IP address, are blocked or sent to the spam folder. It is always best practice to investigate the cause of the listing and request removal to protect your domain's reputation.