Blocklist Removal Center
Contacts  |  Official Statements  |  Sponsors  |  FAQs  |  News Blog   
Bookmark and Share Fraudulent fake DNSBL uncovered: nszones.com
Statement

Category: Report
Updated: 2021-04-19
Statement Ref: S08

Blocklist Help

Blocked? To check, get info and resolve listings go to
Blocklist Removal Center

Associated Documents

How Blocklists Work
Legal Questions
Glossary
2009-12-10. Spamhaus has uncovered a fake spam blocklist which was pirating and selling as it's own work DNSBL data stolen from major anti-spam systems including Spamhaus, CBL and SURBL, republishing the stolen data under the name "nszones.com".

Nszones operates a 'remove your IP' scam charging unsuspecting internet users a fee to be 'removed' from the pirated nszones DNSBLs. The operation also attempts to sell 'commercial subscriptions' to nszones' pirated DNSBLs.

Owned by Liberian-registered Aegeas Enterprises S.A. based in Greece, nszones.com was discovered pirating Spamhaus DNSBL data via an rsync service Spamhaus provided for some customers and 3rd party data services, and was found to be republishing the pirated data under the hostnames 'bl.nszones.com, sbl.nszones.com, dyn.nszones.com and ubl.nszones.com'. Secret seed data which Spamhaus adds into Spamhaus DNSBL zones to catch data pirates was found in bl.nszones.com, sbl.nszones.com and dyn.nszones.com.

Similarly, nszones' whitelist wl.nszones.com was found to consist of data verified to have been wholly pirated from whitelist service DNSWL.org.

Aegeas Enterprises S.A. which operates as aegeas.com, spamfilter.corp.gr, corp.gr, 1net.gr, hostingkey.gr, nskey.com and nszones.com, was blocked from accessing the Spamhaus and CBL rsync servers in December 2009 and was sent a formal Cease & Desist by Spamhaus. However as the nszones operation is both anonymous and likely makes some -albeit probably small- profit from the fake delisting fee scam, the actor behind nszones may simply leave the site up while still linked to by any unsuspecting 'Check your IP' sites.

Statements Index

Fraudulent fake DNSBL uncovered: Protected Sky (bad.psky.me)

Fraudulent fake DNSBL uncovered: nszones.com

EMarketersAmerica vs. The Spamhaus Project

Popular Myths About Spamhaus

Case Answer: e360Insight vs. The Spamhaus Project

TRO Answer: e360Insight vs. The Spamhaus Project

Case Dismissed: Ames & McGee v The Spamhaus Project

Spamhaus IPv6 Blocklists Strategy Statement

Report on the criminal 'Rock Phish' domains registered at Nic.at

DDoS and Virus Attacks on Spamhaus

Spamhaus Position on CAN-SPAM Act of 2003


Copyright © 2021 The Spamhaus Project SLU. Reproduction from "Fraudulent fake DNSBL uncovered: nszones.com" is permitted provided you quote the source as "The Spamhaus Project" and provide a link to the source url: https://www.spamhaus.org/organization/statement/8/fraudulent-fake-dnsbl-uncovered-nszones.com
© 1998-2021 The Spamhaus Project SLU. All rights reserved.
Legal  |  Privacy