What is Tornevall Networks Fraud Blacklist (FraudBL)?
The Tornevall Networks Fraud Blacklist (FraudBL) is an open-source DNS blacklist (DNSBL) that specifically targets servers involved in fraudulent activities. It is a specialized part of the more general dnsbl.tornevall.org, which handles a broader range of abuse like spam and proxies.
The primary policy of this blocklist is to list IP addresses of servers known for sending emails that could cause financial loss to the recipient. This includes phishing attempts and other fraudulent communications that often impersonate banks or other trusted institutions. While the main Tornevall blacklist (or blocklist) targets regular spam, FraudBL focuses exclusively on fraud.
Technically, the blacklist operates on the DNS zone bl.fraudbl.org. It also integrates with the main dnsbl.tornevall.org; hosts considered fraudulent are given an additional TXT record to signify their status. The system is used by network administrators and email providers who want to apply a stricter filter against financially motivated malicious emails.
Who runs Tornevall Networks Fraud Blacklist (FraudBL)?
The blacklist is operated by Tornevall Networks, a company based in Sweden. To ensure high availability and capacity for their DNS services, they utilize secondary DNS hosting through Linode. The project is community-driven in that it relies on reports from users. To contribute, users can forward fraudulent emails, including the full headers, to spam@fraudbl.org. The team primarily analyzes the "Received" headers to identify and block the source mail servers, not just the sender's email address.
How do I get removed and delisted from Tornevall Networks Fraud Blacklist (FraudBL)?
If your IP address is on this blacklist, you can request removal through their official delisting process. Before you submit a request, make sure you have resolved the underlying issue that caused the listing, such as securing a compromised server or stopping a malicious email campaign.
- Be patient after delisting. After you submit a removal request, the database is updated, but it can take some time for the changes to propagate across the DNS network.
- Avoid repeated requests. Making a large number of delisting requests can result in a penalty time being added to your IP, which will delay the removal.
- Use the correct channels. Do not use the website's comment system for removal requests. If the main form isn't working, they provide a non-ajax version and other support channels like Slack and social media.
What's the impact of being listed on Tornevall Networks Fraud Blacklist (FraudBL)?
The impact of being on the Tornevall Networks Fraud Blacklist (FraudBL) is generally considered low. Its specialized nature means it is not as widely used as some of the larger, more general-purpose blacklists. However, for senders whose emails are being delivered to networks that do use this blocklist, the impact can be significant.
A listing on FraudBL indicates that your server is associated with phishing or financial fraud. This is a serious allegation that can cause receiving mail servers to reject your emails outright or deliver them directly to the spam folder. It can damage your sending reputation and the trustworthiness of your domain.