- Discuss - Mailman 3

[WL #SUA-263-26520]: cnsa . ao ABUSE SURBL Removal Request
by SURBL Whitelist 08 Apr '25

08 Apr '25

Dear Requestor, We have removed the domain from our dataset. If the site appears in any outbound messages, please be sure that best practices are followed. In particular, we and many others urge that all subscriptions be closed-loop confirmed as described in some of the references below. Here are some references about best current practices (BCP) for email senders: Canada's Anti-Spam Law http://fightspam.gc.ca MAAWG Sender Best Communications Practices https://www.m3aawg.org/documents/en/m3aawg-sender-best-common-practices-ver… The Spamhaus Project Marketing FAQs https://www.spamhaus.org/faq/section/Marketing%2520FAQs If you need help with mail practices you may want to consult with any of the following. Institute for Spam and Internet Public Policy http://www.isipp.com/ Unspam http://www.unspam.com/ Validity - Return Path Certification https://www.validity.com/everest/sender-certification/ Word to the Wise http://wordtothewise.com/ Data Innovation https://www.datainnovation.io/en/ EmailConsul https://emailconsul.com/ Holistic Email Marketing https://www.holisticemailmarketing.com Email Industries https://www.emailindustries.com Postmastry - Masters in sending experience https://www.postmastery.com/ SendX (Brazil / Portugal) https://www.sendx.io Any of the listed partners can help you improve your sending experience Thank you for contacting - SURBL - https://www.surbl.org Ticket Details --------------------------------- Ticket ID: SUA-263-26520 Department: Whitelist Type: Removal Request Status: Open

1 0

[WL #KIS-796-89431]: 7cont . pt SURBL Phishing, Malware, Cracked Site Removal Request
by SURBL Whitelist 01 Apr '25

01 Apr '25

Dear Requestor, The domain has been removed from our dataset. We do not have the ability to see if the site has been properly secured. Please hire a security expert to do a full security audit on the web site and all computers used to connect to it. Insecure computers may be broken into again and used for phishing, identity theft, malware, stealing banking passwords, etc., including yours. Thank you for contacting SURBL - https://www.surbl.org Ticket Details --------------------------------- Ticket ID: KIS-796-89431 Department: Whitelist Type: Removal Request Status: Open

1 0

[WL #DAL-231-77838]: tkxel . com ABUSE SURBL Removal Request
by SURBL Whitelist 28 Aug '24

28 Aug '24

Dear Requestor, We have removed the domain from our dataset. If the site appears in any outbound messages, please be sure that best practices are followed. In particular, we and many others urge that all subscriptions be closed-loop confirmed as described in some of the references below. Here are some references about best current practices (BCP) for email senders: Canada's Anti-Spam Law http://fightspam.gc.ca MAAWG Sender Best Communications Practices https://www.m3aawg.org/documents/en/m3aawg-sender-best-common-practices-ver… The Spamhaus Project Marketing FAQs https://www.spamhaus.org/faq/section/Marketing%2520FAQs If you need help with mail practices you may want to consult with any of the following. Institute for Spam and Internet Public Policy http://www.isipp.com/ Unspam http://www.unspam.com/ Validity - Return Path Certification https://www.validity.com/everest/sender-certification/ Word to the Wise http://wordtothewise.com/ Data Innovation https://www.datainnovation.io/en/ EmailConsul https://emailconsul.com/ Holistic Email Marketing https://www.holisticemailmarketing.com Email Industries https://www.emailindustries.com Postmastry - Masters in sending experience https://www.postmastery.com/ SendX (Brazil / Portugal) https://www.sendx.io Any of the listed partners can help you improve your sending experience Thank you for contacting - SURBL - https://www.surbl.org Ticket Details --------------------------------- Ticket ID: DAL-231-77838 Department: Whitelist Type: Removal Request Status: Open

3 2

[WL #DAL-231-77838]: tkxel . com ABUSE SURBL Removal Request
by SURBL Whitelist 27 Aug '24

27 Aug '24

Dear Requestor, We have removed the domain from our dataset. If the site appears in any outbound messages, please be sure that best practices are followed. In particular, we and many others urge that all subscriptions be closed-loop confirmed as described in some of the references below. Here are some references about best current practices (BCP) for email senders: Canada's Anti-Spam Law http://fightspam.gc.ca MAAWG Sender Best Communications Practices https://www.m3aawg.org/documents/en/m3aawg-sender-best-common-practices-ver… The Spamhaus Project Marketing FAQs https://www.spamhaus.org/faq/section/Marketing%2520FAQs If you need help with mail practices you may want to consult with any of the following. Institute for Spam and Internet Public Policy http://www.isipp.com/ Unspam http://www.unspam.com/ Validity - Return Path Certification https://www.validity.com/everest/sender-certification/ Word to the Wise http://wordtothewise.com/ Data Innovation https://www.datainnovation.io/en/ EmailConsul https://emailconsul.com/ Holistic Email Marketing https://www.holisticemailmarketing.com Email Industries https://www.emailindustries.com Postmastry - Masters in sending experience https://www.postmastery.com/ SendX (Brazil / Portugal) https://www.sendx.io Any of the listed partners can help you improve your sending experience Thank you for contacting - SURBL - https://www.surbl.org Ticket Details --------------------------------- Ticket ID: DAL-231-77838 Department: Whitelist Type: Removal Request Status: Open

1 0

rspamd surbl-key
by Marcel Schmidt 26 Apr '19

26 Apr '19

Hi all, does anybody have a good example how to integrate a surbl-key into the rspamd config? Changing only the suffix for multi.surbl seems wrong. Kind regards Marcel Schmidt (Systemintegration) Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-318 https://www.mittwald.de Geschäftsführer: Robert Meyer, Maik Behring St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen

1 0

[WL #MOW-858-96621]: olsuswaenergy . com SURBL Phishing, Malware, Cracked Site Removal Request
by SURBL Whitelist 18 Dec '18

18 Dec '18

Dear Requestor, The site has been removed from the blacklist. We do not have the ability to see if the site has been properly secured. Please hire a security expert to do a full security audit on the web site and all computers used to connect to it. Insecure computers may be broken into again and used for phishing, identity theft, malware, stealing banking passwords, etc., including yours. Ticket Details --------------------------------- Ticket ID: MOW-858-96621 Department: Whitelist Type: Removal Request Status: Open

1 0

SURBL Support
by Sergey Gudimov 15 May '18

15 May '18

Hello community, Is there any chance to get support from SURBL? This link https://support.surbl.org/ doesn’t work I can’t check status of my removal request This email message, including attachments, may contain information that is proprietary, confidential, privileged and/or exempt from disclosure. Please hold it in confidence to protect privilege and confidentiality. Please be advised that the sender of this message is a licensee of SDventures.com and shall not be construed or deemed to be an employee, agent, partner, associate or joint venturer of SDVentures.com. If you are not the intended recipient, then please notify the sender and delete this message. Any viewing, copying, publishing, disclosure, distribution of this information, or the taking of any action in reliance on the contents of this message by unintended recipients is prohibited. This message cannot be guaranteed to be secure or error-free.

1 0

help urgently needed (with removal), but SURBL is not reacting/answering
by Michael Krutwig 02 Feb '18

02 Feb '18

Hello community, id there anyone who can help me? We are DESPERATELY trying to get our domain krumedia.com removed from the ABUSE list. We are a are a legitimate business and not spamming at all. This list entry raises the damage to our company from day to day. Several removal request have been made over the last two weeks. We were receving a confirmation ticket by mail and that was it. If i reply to this ticket - no response. What can i do? We are no spammer, even have no newsletters. We did carefully check all sites for hacks. We did even create an anti spam policy page on our site. The (quite low) traffic on our site never had any suspect traffic peak, so we really don't belive that our domain could have appeared in any mass mailings. We have no clue why our domain is on this list. The common faq and help texts/link doesn't get me further. This is SO MUCH frustrating and it really causes a lot of extra work and damage. What can we do more? Really need HELP! thanks, Michael

1 0

Blacklist SURBL
by Ahmed Tantawy 11 Oct '17

11 Oct '17

Hello, Recently, our domains have been blacklisted by SURBL at least twice and this affects our customers integrating SURBL in their intelligence feed. I'd highly appreciate it if someone could contact me off-list from the team responsible to discuss this further or if anyone point me to how to prevent for this to reoccur in the future as customers depend to connect to those domains to reach our services. Moreover, to shed some light as to why our domains were blacklisted in the first place. Keep in mind, our domains are currently not blacklisted and I can't go through the "form" to remove blacklist. Best Regards, Ahmed Tantawy

2 2

Re: [SURBL-Discuss] false positives with common DNS
by Joe Wein 20 Apr '17

20 Apr '17

> Hello there, > > On Tue 11th Apr some of our company's domains got put on the SURBL "abuse" > list and one of the domains got suspended by the registry due to a report > by SURBL. I'm not aware of any abuse or problems on those domains and the > only common nominator is that they all use the same DNS service, e.g. > > anfe.ma -> listed on "abuse" > anfema.com -> same purpose as anfe.ma, not listed (and using a different > DNS) > lokato.online -> suspended, though completely unused (just an NS record, > nothing else) > > Can anybody explain what went wrong here? Gordon, These listings (#1, #3) were indeed false positives. We aim for near zero false positives, but mistakes do happen :-( The cause was a data error which we corrected as soon as we detected it. Feel free to forward this acknowledgement from our side to the registrar to help get the suspended domain unsuspended. Joe Wein SURBL > > Cheers, > Gordon > > -- > > > > _______________________________________________ > Discuss mailing list > Discuss(a)lists.surbl.org > http://lists.surbl.org/mailman/listinfo/discuss >

2 1

false positives with common DNS
by Gordon Schneider 13 Apr '17

13 Apr '17

Hello there, On Tue 11th Apr some of our company's domains got put on the SURBL "abuse" list and one of the domains got suspended by the registry due to a report by SURBL. I'm not aware of any abuse or problems on those domains and the only common nominator is that they all use the same DNS service, e.g. anfe.ma -> listed on "abuse" anfema.com -> same purpose as anfe.ma, not listed (and using a different DNS) lokato.online -> suspended, though completely unused (just an NS record, nothing else) Can anybody explain what went wrong here? Cheers, Gordon --

1 0

Three level TLDs
by Brooke Babcock 16 Mar '17

16 Mar '17

I have a question about the three level TLDs provided by SURBL. I’m a new user of SURBL and attempting to hook it into our company’s e-mail scanner using the guidelines listed here: http://www.surbl.org/guidelines <http://www.surbl.org/guidelines>. Guideline #2 instructs me to extract the base domain to use in the lookup to SURBL and points me to two different tables - a two level TLD table and the three level TLD table. According to the guidelines… “For any domain on the three level list, check it at the fourth level”. However, in the three level TLD table (http://www.surbl.org/static/three-level-tlds <http://www.surbl.org/static/three-level-tlds>), I see many two level domains. In my spot checking, I always see the same domain in the two level TLD table (http://www.surbl.org/static/two-level-tlds <http://www.surbl.org/static/two-level-tlds>) as well. Examples: fvg.it <http://fvg.it/> gov.ms ic.tr <http://ic.tr/> iki.fr <http://iki.fr/> info.at <http://info.at/> ro.com <http://ro.com/> How do I best treat these domains that show up in both lists? Are they on the three level list by mistake? Or should I do multiple lookups with different URI base domains (3 and 4 level) if the top domain is in both lists? For example, if I were to extract the URI, http://some.domain.fvg.it <http://some.domain.fvg.it/>, should I do a lookup on “some.domain.fvg.it <http://some.domain.fvg.it/>” and “domain.fvg.it <http://domain.fvg.it/>”, because “fvg.it <http://fvg.it/>" appears in both lists? Any help would be appreciated. Thanks much! ~Brooke

2 1

Abuse combat feed
by Rubens Kuhl 20 Feb '17

20 Feb '17

Is there an abuse combat feed available at SURBL ? The hope was to get information that would trigger abuse investigations and possible domain take-downs of phishing/malware that is enjoying benefit from the domain name (e.g., using a domain name like bank-name-security.TLD)... parsing the full URI data seems the most logical option, but that there doesn't seem to exist a TLD-specific feed or an specific $ condition for TLD registries. Ideas ? Tks, Rubens

3 7

Re: [SURBL-Discuss] SURBL Analysis Timing out
by SURBL Role 08 Feb '16

08 Feb '16

On Sunday, February 7, 2016, 5:50:36 PM, Paul Thursby wrote: > Hi, > I am trying to submit a IP delisting for 192.185.76.107 but the > application embedded on http://www.surbl.org/surbl-analysis just keeps > timing out. Can you help me solve this? > Regards Paul Please try it now. It should work. P.S. The IP is not currently listed. Almost always when and IP is listed it's because there is some service on it that is cracked, insecure or abused, such as a web server. Please fully secure all services against abuse and consult with a security expert if you need help.

1 0

Franchising Centre Blog.
by Simon Ryan 16 Mar '15

16 Mar '15

Hi Guys, how do I find out the progress on this site for my client being delisted please? Best wishes, Simon. Simon J. Ryan. Social Advisors Office: 01474 550290 Twitter: @socialadvisoruk Web: socialadvisors.co.uk FREE Downloads: Our guides to Social Media Success <http://adviserpost.co.uk/downloads/> Winners: FStech 2014 Best Use Of Social Media In Financial Services

3 2

Trying to Figure Something Out
by Anne P. Mitchell, Esq. 12 Mar '15

12 Mar '15

All, We are in the process of trying to help a sender to clean up their act and IP space, and in doing so, we came across a SURBL listing which we're trying to figure out. The domain that is listed is ibwmail.com; the problem that we are having is that there is no website at all on that domain, nor can we find any spam - anywhere - mentioning the domain. The only clue that we can find is that there is a gambling site that is using the domain as their MX (now, you may be saying that this is a big clue - but given that this is a domain listing, not an IP/MX listing - the two taken together don't add up, and that makes the delisting request process difficult because, for example, there is no message containing the (non-existent) website to include as required in a SURBL delisting request). This is a sender who is trying to reform their customers' practices, their space, etc... but it's awfully hard to whack anybody with a clue-by-four ("Bad sender! Bad, bad, bad!") when we can't find the puddle they stepped in (to torture a metaphor). Any thoughts, clues, or pointers would be greatly appreciated! Thanks! Anne Anne P. Mitchell, Attorney at Law CEO/President, Institute for Social Internet Public Policy Member, Cal. Bar Cyberspace Law Committee Member, Asilomar Microcomputer Workshop Committee Author: Section 6 of the Federal CAN-SPAM Act of 2003 Ret. Professor of Law, Lincoln Law School of San Jose Ret. Chair, Asilomar Microcomputer Workshop

4 6

More than 14 days - still blocked.
by Ryan Rigby 22 Feb '15

22 Feb '15

Hi All, I'm hoping someone on this thread can help me. Our site was added to the SURBL ws list back on the 5th Feb, I submitted a request and we were removed on the 6th Feb but we're still being blocked by sites like LinkedIn and some of our customers are also unable to access our content because the site is still showing on a SURBL list. We have contacted LinkedIn, who said there is nothing they can do to refresh or update their lookup list, I find it hard to believe that these blacklists are not refreshed in a 2 week period. I have verified that we have not been re-added and the google malicious site lookup confirms no malicious activity. My first question is - what can we do? Our site is clean (and always has been) and we were on one list for one day, this brief, and unwarranted addition to the list, has been impacting our business for 2 weeks now and continues to present a poor image of our company. My second question is - how did we get added? The automated response quoted 'multiple reports of unsolicited messages' but no evidence or source of this was provided, all our mailing lists require sign up and all our mail has unsubscribe options within it. We need to understand how we got on this list to ensure it never happens again and don't endure such a long and high impact issue as we are currently faced with. Any help you can provide will be much appreciated. Thank you, Ryan Rigby MCITP:SA Senior Systems Administrator Vision House, Wellfield Road Preston Brook, Cheshire WA7 3FR United Kingdom Desk: +44 1928 706 333 / +1 847 466 6333 Mobile: +44 7961 218 528 Fax: +44 1928 706 329 RRigby(a)flexerasoftware.com www.flexerasoftware.com CONFIDENTIALITY NOTICE: This email message (including any attachments) is for the sole use of the intended recipient and may contain proprietary, confidential, or trade secret information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. Thank you.

2 3

Lenght of time to remove a site from blacklist?
by SURBL Role 23 Jun '14

23 Jun '14

We don't handle removal requests here, but since your company appears to be a transportation consulting company, most likely you are inquiring about a web site that has been cracked (broken into) and malicious content placed on it. Insecure computers may also be used for malicious activity such as phishing, DDOS, identity theft, banking credential theft, etc. It is crucial that the web site and all computers used to connect to it have a full security audit done by a competent security expert.

1 0

Lenght of time to remove a site from blacklist?
by Stephanie Wright 23 Jun '14

23 Jun '14

I am submitting information to remove a site from the JP blacklist. I can't seem to find any estimate on how long removal takes. Does anyone know? Thank you!

2 1

Surbl Blacklist Removal Request
by Elliott Tyndale 12 Mar '14

12 Mar '14

> When you say the removal request wasn't received do you mean an email was never received, or because I may have not completed the removal request correctly, a ticket wasn't created? > The reason I ask is, I would like to determine whether I just need to resend my already created removal request to whitelist(a)surbl.org, or whether I need to re do the removal request to fit the procedure. > If it is the latter, could you please shed some light on what I may have done wrong as there are many fields on this form. > Regards, >Elliott Tyndale Hello Surbl, Could anybody shed some light on my previous message please? Regards, Elliott Tyndale

3 2

Surbl Blacklist Removal Request
by SURBL Role 07 Mar '14

07 Mar '14

No removal request was received. Most likely you did not complete the removal request correctly. Please follow the removal procedure.

2 1

Surbl Blacklist Removal Request
by Elliott Tyndale 07 Mar '14

07 Mar '14

Hello Surbl, I sent a Surbl Blacklist Removal Request email to the whitelist(a)surbl.org email address after experiencing some problems with the website form. The email was sent on the 21st February at 10:21, but I haven't received a reply or any indication as to whether our domain is going to remain blocked or not. Could anyone shed some light on this please? The domain in question is www.givemegoodies.co.uk Regards, Elliott Tyndale

2 2

Policy Triggers
by Dave Doucette 16 Feb '14

16 Feb '14

I am interested in RPZ and am wondering what policy triggers are supported. Is it just QNAME, or is IP, NSIP and NSDNAME also included. Dave

2 1

domains listed
by Jason van Wyk 03 Feb '14

03 Feb '14

Hi can someone please explain to me why all new domains we register are automatically listed with SUBRL - JP. Thanks Jason

3 7

Re: [SURBL-Discuss] How to figure out the virtual host, containing malware
by Michele Neylon - Blacknight 23 Sep '13

23 Sep '13

They publish feeds by AS number and you can also check blocks of IPs Sorry on mobile so I can't provide the link ------------------------ Mr. Michele Neylon Blacknight http://Blacknight.tel Via iPhone so excuse typos and brevity > On 21 Sep 2013, at 12:11, "Neil Schwartzman" <neil(a)cauce.org> wrote: > > >> On Sep 20, 2013, at 6:47 AM, Michele Neylon - Blacknight <michele(a)blacknight.com> wrote: >> >> Roger >> >> Check the Google feeds - they specify the URL / domain that's being abused > > michelle - interesting. but which google feeds? > >> >> Regards >> >> Michele >> >> -- >> Mr Michele Neylon >> Blacknight Solutions >> Hosting & Colocation, Domains >> http://www.blacknight.co/ >> http://blog.blacknight.com/ >> http://mneylon.tel/ >> Intl. +353 (0) 59 9183072 >> Locall: 1850 929 929 >> Direct Dial: +353 (0)59 9183090 >> Fax. +353 (0) 1 4811 763 >> Twitter: http://twitter.com/mneylon >> ------------------------------- >> Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty >> Road,Graiguecullen,Carlow,Ireland Company No.: 370845 >> >> ________________________________________ >> From: Roger Schreiter [roger(a)planinternet.de] >> Sent: 20 September 2013 14:06 >> To: discuss(a)lists.surbl.org >> Subject: [SURBL-Discuss] How to figure out the virtual host, containing malware >> >> Hello, >> >> we are operating email servers and approx 100 virtual web servers on the >> same machine. >> >> Some email receivers do block our emails, because our server >> seems to distribute malware on a virtual webserver and is now listed >> on surbl.org. >> >> Ok, now I have to figure out, which of our 100 customers is hosting >> a malware on his virtual webserver, most like without knowledge >> and being victime of a spyware or an unsecure CMS. (The latter should >> be of course removed asap from our server.) >> >> I wonder, how can I get a hint, which customer's web space is >> affected? Is there any mean to get more details from surbl.org, >> about the malware source? Domainname or addidional even a filename would >> be very helpful. >> >> Thanks for any hints! >> Roger. >> >> -- >> Roger Schreiter >> Lutherstr. 9 >> D-71576 Burgstetten >> Tel.: +49 7191 8929678 >> >> _______________________________________________ >> Discuss mailing list >> Discuss(a)lists.surbl.org >> http://lists.surbl.org/mailman/listinfo/discuss >> >> _______________________________________________ >> Discuss mailing list >> Discuss(a)lists.surbl.org >> http://lists.surbl.org/mailman/listinfo/discuss > > > _______________________________________________ > Discuss mailing list > Discuss(a)lists.surbl.org > http://lists.surbl.org/mailman/listinfo/discuss

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss