Skip to content
All Articles
Blacklist Removal

How to Get Removed from Spamhaus: Step-by-Step Delisting Guide (2026)

Spamhaus is the most impactful email blacklist. Here's exactly how to get removed from SBL, XBL, PBL, and CSS — with the common mistakes that get you relisted.

7 min read

Why Spamhaus removal is different

Unlike most blacklists that offer simple self-service removal, Spamhaus has different removal processes for each of its zones — and some require manual review. Being listed on Spamhaus can block email delivery at Gmail, Outlook, Yahoo, and thousands of corporate mail servers that query Spamhaus before accepting email.

  1. 1

    Identify your Spamhaus zone

    Go to spamhaus.org lookup tool. Determine if you're on SBL, XBL/CBL, PBL, or DBL — each has a completely different removal path.

  2. 2

    Fix the root cause

    SBL: remove spam source, close open relay, clean compromised account. XBL: clean malware/botnet infection. PBL: ensure valid static IP with PTR record. DBL: stop domain use in spam.

  3. 3

    Gather evidence

    Document what caused the listing and exactly what changes you made to prevent recurrence. Spamhaus SBL requests require this for manual review.

  4. 4

    Submit removal request

    Use the zone-specific removal form on spamhaus.org. SBL requires manual review (24-72h). XBL/CBL offers automated removal. PBL is self-service.

  5. 5

    Monitor for relisting

    Set up automated blacklist monitoring. A relisting within days means the root cause was not fully resolved. Repeat offenders face longer waiting periods.

Spamhaus zone removal comparison

ZoneListing ReasonRemoval MethodTypical TimeDifficulty
SBLDirect spam source (server, network, operation)Manual request + Spamhaus review24–72 hoursHigh — requires documented fix
CSS (SBL subset)Snowshoe spam, high-volume commercial spamManual request + fix sending practices24–72 hoursHigh — repeat listings penalized
XBL via CBLCompromised device, malware, botnet, open proxyAutomated via CBL removal page after cleanupMinutes–hoursMedium — must fully remove infection
PBLDynamic/residential IP or policy blockSelf-service via PBL removal form if you have static IP + PTR1–4 hoursLow — straightforward if legitimate
DBLDomain in spam URLs or From headersDBL removal form after stopping domain spam use24–48 hoursMedium — domain may need clean history

Step 1: Identify which Spamhaus zone you're in

Go to spamhaus.org and use their IP or domain lookup tool. The result will tell you which zone(s) you're listed in:

- SBL (including CSS): Direct spam sources — requires manual review - XBL (via CBL): Compromised devices — automated removal available after cleanup - PBL: Policy-based listing for IPs that shouldn't send direct-to-MX email - DBL (domain blacklist): Domain-based listing for spam-associated domains

Each zone has a completely different removal process. Don't submit a generic removal request without knowing your zone.

Removing an SBL listing

SBL listings are for verified spam sources and require: 1. Fix the root cause — compromised server, spam campaign, open relay, or abuse of your IP space 2. Document what happened and what you've done to prevent recurrence 3. Submit a removal request via the Spamhaus SBL removal form 4. Spamhaus will investigate and may ask follow-up questions 5. Expect 24-72 hours for review after you respond

Critical: Spamhaus tracks repeat offenders. Being relisted after removal makes future removals harder. They may impose waiting periods or deny removal for persistent violators.

Removing an XBL/CBL listing

XBL listings from the CBL (Composite Blocking List) are for compromised devices. Steps: 1. Go to the CBL lookup page and enter your IP 2. The CBL shows what type of infection triggered the listing and when 3. Clean the infection (malware, spam-sending botnet, open proxy) 4. Request automatic removal via the CBL removal page 5. Removal takes effect within minutes after the infection is confirmed cleaned

If the IP is re-listed within days, the infection was not fully removed.

PBL removal

PBL listings indicate your IP shouldn't be sending direct-to-MX email. This is correct for dynamic residential IPs — you should relay through your ISP's mail server instead.

If you run a legitimate mail server on a static IP that's on the PBL: 1. Verify your IP has valid PTR (reverse DNS) 2. Submit a PBL removal request with your IP and mail server details 3. Spamhaus reviews and removes valid mail server IPs from PBL

Note: The PBL is partly populated by ISPs who list their own IP ranges. In that case, contact your ISP to have the IP removed from their PBL submission.

Check your domain's email health

Run a free scan against 60 blacklists. Validate SPF, DKIM, DMARC, and MX records in seconds.