Tornevall Networks Fraud Blacklist (FraudBL)
The Tornevall Networks FraudBL is a blocklist (blacklist) of IP addresses linked to phishing or fraudulent emails intended to cause financial harm.
Updated on 17 Jun 2026: We updated the delisting guidance for Tornevall's removal-tool upgrade and added a practical DNSBL lookup example.
Summarize with
Check if you are listed on Tornevall Networks Fraud Blacklist (FraudBL)
And 143 other blocklists.
Spamhaus
0Spam
Cisco
NoSolicitado
URIBL
abuse.ro
ALPHANET
Anonmails
Ascams
BLOCKEDSERVERS
Calivent Networks
EFnet
JustSpam
Kempt.net
NordSpam
RV-SOFT Technology
Scientific Spam
Spamikaze
SpamRATS
SPFBL
Suomispam
System 5 Hosting
Team Cymru
Validity
www.blocklist.de Fail2Ban-Reporting Service
ZapBL
2stepback.dk
Fayntic Services
ORB UK
technoirc.org
TechTheftSpamhaus0SpamCiscoNoSolicitadoURIBLabuse.roALPHANETAnonmailsAscamsBLOCKEDSERVERSCalivent NetworksEFnetJustSpamKempt.netNordSpamRV-SOFT TechnologyScientific SpamSpamikazeSpamRATSSPFBLSuomispamSystem 5 HostingTeam CymruValiditywww.blocklist.de Fail2Ban-Reporting ServiceZapBL2stepback.dkFayntic ServicesORB UKtechnoirc.orgTechTheftSpamhaus0SpamCiscoNoSolicitadoURIBLabuse.roALPHANETAnonmailsAscamsBLOCKEDSERVERSCalivent NetworksEFnetJustSpamKempt.netNordSpamRV-SOFT TechnologyScientific SpamSpamikazeSpamRATSSPFBLSuomispamSystem 5 HostingTeam CymruValiditywww.blocklist.de Fail2Ban-Reporting ServiceZapBL2stepback.dkFayntic ServicesORB UKtechnoirc.orgTechTheftSpamhaus0SpamCiscoNoSolicitadoURIBLabuse.roALPHANETAnonmailsAscamsBLOCKEDSERVERSCalivent NetworksEFnetJustSpamKempt.netNordSpamRV-SOFT TechnologyScientific SpamSpamikazeSpamRATSSPFBLSuomispamSystem 5 HostingTeam CymruValiditywww.blocklist.de Fail2Ban-Reporting ServiceZapBL2stepback.dkFayntic ServicesORB UKtechnoirc.orgTechTheftSpamhaus0SpamCiscoNoSolicitadoURIBLabuse.roALPHANETAnonmailsAscamsBLOCKEDSERVERSCalivent NetworksEFnetJustSpamKempt.netNordSpamRV-SOFT TechnologyScientific SpamSpamikazeSpamRATSSPFBLSuomispamSystem 5 HostingTeam CymruValiditywww.blocklist.de Fail2Ban-Reporting ServiceZapBL2stepback.dkFayntic ServicesORB UKtechnoirc.orgTechTheftWhat is Tornevall Networks Fraud Blacklist (FraudBL)?
The Tornevall Networks Fraud Blacklist (FraudBL) is an open-source DNS blacklist (DNSBL), also called a blocklist, for IP addresses linked to fraudulent email. It is part of the broader Tornevall DNSBL system, where dnsbl.tornevall.org covers general abuse and FraudBL focuses on phishing-like mail and other messages designed to cause financial loss.
FraudBL lists the source mail servers behind phishing and financial fraud messages rather than the visible sender address alone. These messages commonly impersonate banks, tax agencies, payment brands, or other trusted organizations.
Technically, the blacklist uses the DNS zone bl.fraudbl.org. Fraud indicators can also appear in the main dnsbl.tornevall.org zone through extra TXT records, so administrators should check both the FraudBL zone and any related TXT response when investigating a listing.
Who runs Tornevall Networks Fraud Blacklist (FraudBL)?
Tornevall Networks operates the blacklist, and FraudBL documentation identifies the service as located in Sweden. The public removal pages describe the project as privately maintained, so support availability varies.
Reports are community supplied. To report a fraudulent email, forward the full message with headers to spam@fraudbl.org. The reviewers focus on the Received headers to identify the source mail server that delivered the mail, not just the address shown in the From field.
How to check whether an IP is listed
FraudBL lookups work like standard DNSBL lookups: reverse the octets of the IP address and append bl.fraudbl.org. For 192.0.2.10, query 10.2.0.192.bl.fraudbl.org. An A record response indicates a listing, and TXT records can give extra context when the resolver publishes it.
Example DNSBL lookupbash
dig +short A 10.2.0.192.bl.fraudbl.org dig +short TXT 10.2.0.192.bl.fraudbl.org
How do I get removed and delisted from Tornevall Networks Fraud Blacklist (FraudBL)?
Before requesting delisting, fix the cause of the listing. Common causes include a compromised server, an abused web form, malware on a sending host, or a mail server relaying fraudulent messages. If the same traffic continues, delisting will not solve the delivery problem.
Use the Tornevall Networks removal page for the current process. The public page says the main removal form is under upgrade and disabled for reference use, so follow the instructions on that page and the linked FAQ if the normal workflow is unavailable.
- Expect DNS propagation delay after a successful removal. Tornevall notes that the database can update before DNS data has synchronized across resolvers.
- Avoid repeated delisting attempts for the same host. Large numbers of requests can add penalty time and delay removal.
- Do not request delisting in website comments. The removal page says comments are not a delisting support channel.
- If the AJAX flow fails, check the FAQ for the non-AJAX option before opening a support request.
- Use precise lookup scopes. The FAQ says CIDR lookups are supported up to a /16-sized block, while very large ranges are not accepted.
What's the impact of being listed on Tornevall Networks Fraud Blacklist (FraudBL)?
Because FraudBL is specialized, its reach is usually lower than broad spam blacklists. The impact depends on whether a recipient network queries bl.fraudbl.org or the related Tornevall DNSBL data during filtering.
Where it is used, the impact is serious. A FraudBL hit links the sending IP to phishing-like or financially fraudulent email, so receivers can reject messages, place them in spam, or add reputation weight against the sending infrastructure.
