Blogs

Repost from Spamhaus website

Spamhaus has uncovered a fake spam filter company which was pirating and selling DNSBL data stolen from major anti-spam systems including Spamhaus, CBL and SURBL, republishing the stolen data under the name "nszones.com".

Nszones.com operates a 'remove your IP' scam charging naive internet users to be removed from the pirated nszones.com DNSBLs.

Owned by Liberian-registered Aegeas Enterprises S.A., based in Greece, nszones.com was discovered pirating DNSBL data via rsync from Spamhaus, CBL and SURBL and republishing the pirated data under the hostnames 'bl.nszones.com, sbl.nszones.com, dyn.nszones.com and ubl.nszones.com' which nszones.com was then selling as its own work. Secret seed data which Spamhaus inserts into Spamhaus DNSBL zones to catch data pirates was found in bl.nszones.com, sbl.nszones.com and dyn.nszones.com.

Similarly, the whitelist zone, wl.nszones.com, is data verified to have been pirated from DNSWL.org.

Aegeas Enterprises S.A. which operates as aegeas.com, corp.gr, spamfilter.corp.gr, 1net.gr, hostingkey.gr, nskey.com and nszones.com, has been blocked from accessing the Spamhaus and CBL rsync servers and was issued a formal Cease & Desist by Spamhaus in December 2009.