FWIW I just registered surbl.net and surbl.com to prevent doofuses from registering them and setting up bogus RBLs on them, as I recall happened to another RBL.
Also set up an Apache redirect permanent for them to www.surbl.org, which remains the real domain.
Cheers,
Jeff C.