URIBL Black Domain Name Blacklist

URIBL is a domain-based blocklist (or blacklist) of domains used by spammers. Use Suped to monitor your email authentication.
Updated on 17 Jun 2026: We updated this guide to clarify URI-based listings, DNS response codes, and how to separate URIBL issues from email authentication failures.
Summarize with
Check if you are listed on URIBL Black Domain Name Blacklist
And 143 other blocklists.















What is URIBL Black Domain Name Blacklist?
The URIBL Black Domain Name Blacklist is a domain-based blacklist (or blocklist) that contains domain names found within links in unsolicited bulk and commercial email, often called UBE or UCE. It is a Realtime URI Blacklist (RHSBL), so it evaluates domains found in message content rather than the IP address that sent the message. It is frequently updated as new data becomes available, and its policy goal is to maintain high accuracy with zero false positives.
This blocklist is widely used by system administrators and anti-spam filters to complement existing spam controls. URIBL distributes its data through public DNS lookups and RSS feeds, with rsync or DNS data feeds for high-volume users. If you make too many queries to the public DNS mirrors, a response such as 127.0.0.255 or 127.0.0.1 means the resolver has been blocked or flagged for excessive use, and a dedicated Data Feed is the next option for continued use.
How URIBL Black checks domains
URIBL Black checks domains and some IP addresses found inside message URIs. URIBL says it strips host parts before listing in most cases, so a link to tracking.example.com is usually evaluated at the registered-domain level unless the subdomain itself is the abused host. That distinction matters during troubleshooting: a clean sending IP does not clear a domain that appears in message links.
- Use multi.uribl.com for combined public list results. It returns bitmapped values across URIBL's public zones, while black.uribl.com is the URIBL Black zone.
- A URIBL Black hit through multi.uribl.com returns 127.0.0.2. NXDOMAIN means URIBL has no result for that queried domain or URI destination IP.
- URIBL can list URI destination IPs, not the IP address that sent the email. IPv4 addresses are queried in reversed dotted-decimal form, such as 4.3.2.1.multi.uribl.com.
- A blocked-query response is not a domain listing. It usually means the DNS resolver has exceeded public mirror limits and needs lower query volume, a local caching resolver, or a commercial data feed.
Common URIBL DNS responses
127.0.0.2 = URIBL Black hit 127.0.0.1 or 127.0.0.255 = query blocked or excessive public mirror use NXDOMAIN = no result for that query
Who runs URIBL Black Domain Name Blacklist?
The blacklist is operated by URIBL.COM, a service dedicated to collecting and distributing data about domain names associated with spam. URIBL.COM does not register or host domains, and it does not have the authority to suspend them. The organization provides data to help others identify and filter unwanted email.
How do I get removed and delisted from URIBL Black Domain Name Blacklist?
If your domain is listed on this blacklist, use the official lookup form on the URIBL website to request removal. You must register for an account before you can submit a delisting request. You can find the form here. Before you request removal, fix the cause of the listing, such as a compromised site, abused redirect, or link domain used in spam. Then confirm these points:
- Do not send emails requesting delisting. All removal requests must go through the web form; email requests will be ignored.
- URIBL will not provide specific reasons for a listing. They do not offer feedback loops or disclose the trap data that led to the domain being blacklisted.
- Whitelisting is not available by request. The internal whitelist is used by URIBL's team and does not reflect a domain's reputation.
- Confirm the lookup form says the domain is listed by URIBL itself. The form can display separate URI blocklist results for convenience, but URIBL cannot delist domains from lists it does not run.
What's the impact of being listed on URIBL Black Domain Name Blacklist?
The impact of being listed on the URIBL Black Domain Name Blacklist is medium to high. Because it is used by anti-spam systems, a listing can cause emails containing that domain to be filtered into the spam folder or rejected outright by receiving mail servers.
The impact is different from an IP blacklist (or blocklist) because URIBL evaluates domains in the message body. If the listed domain is used for click tracking, redirect handling, branded short links, or other campaign links, every campaign that contains that domain can be affected even when SPF, DKIM, and DMARC pass.
A more severe consequence is that some domain registrars use URIBL's data to suspend, or place on hold, domain names found on the blocklist. If your domain is suspended, resolve the issue directly with your registrar because URIBL does not control that action.
Suped's product can help with the authentication side of a URIBL incident by showing whether legitimate mail is passing DMARC, SPF, and DKIM while you isolate the listed link domain. Suped does not remove URIBL listings, but it gives the reporting context needed to separate authentication failures from content-domain reputation problems.
Other URIBL Black Domain Name Blacklist blocklists
URIBL Grey Domain Name Blacklist
Organization
URIBL
Zone
grey.uribl.com
Type
Domain
Impact
Medium
Delisting
Manual
URIBL Multi Domain Name Blacklist
Organization
URIBL
Zone
multi.uribl.com
Type
Domain
Impact
Medium
Delisting
Manual
URIBL Red Domain Name Blacklist
Organization
URIBL
Zone
red.uribl.com
Type
Domain
Impact
Medium
Delisting
Manual
