Delisting from polspam.pl
RBL polspam.pl does not delist notorious spamming domains.
The only situation in which a domain would be delisted pertains to one-off incidents which are believed to not have been done on purpose. Deliberation includes using a separate domain for spamming, hiding behind a different domain, outsourcing spam, using mass spam services, using landing pages etc.
If you send us an e-mail in HTML, containing scripts or remotely loaded tracking objects - even graphics or logos - do not count on any future interaction from us. We accept messages in plain/text format only.
Each e-mail should include the following information:
- Domain name.
- Domain IP address.
- Description of the suspected listing cause.
- No signature is required – we don't care who you, personally, are.
- Treat the correspondence as if it were a domain communicating with another domain.
- Do not lie, we'll find out whether you're giving us the whole truth.
The following statements are examples of how one should describe the suspected reason for which they were/are blacklisted by polspam.pl.Do not copy these, as they are just examples made for general aid. Always be honest.
Instead of buying an ad I wished to increase sales without larger costs and started spamming from my own mailbox and the company domain. I kept spamming for a month. I got the e-mail address list on the black market from (who and for how much) and/or I was spamming clients from my own data base from issued invoices. The spam had the following content……
Instead of buying an ad to improve the quality of my e-store I wanted to be sly and bought a spam account using a third party (what kind) that allowed me to send thousands of e-mails to random people and spy on them (what did the spying allow and whether the users had to accept the terms of this tracking). I sent two rounds of spam this way to a hundred thousand recipients each time. I got the address list from mass mailing providers. Some obvious ones I generated using…. The spam had the following content…….
Instead of fairly advertising my business I wanted to increase sales and dishonestly compete with other companies in my branch. I had bought an anonymous domain and e-mail account and using a third party I was spamming from behind the anonymous domain until I got discovered. All of my factual domains were added to the black list. The spam in question had the following content…. I was also making phone calls to these clients (describe the topic of the telemarketing).
I wanted to quickly sell masks and visors to profit off of COVID-19. Using auction sites, however, did not give the expected results - likely due to high competition. Thus, I decided to spam random e-mail accounts in order to compete in an unfair way and offer my products at lower prices outside of the auction sites. Since spamming is free I was able to offer lower prices and free shipping. Unfortunately, despite buying a one-off domain, I was discovered and all my true domains got blacklisted together with the one-off domain.
I am a hosting provider and I did not check whether my clients were sending spam. In all honesty, I didn't care. I was mostly interested in the sales of my company and ignored my clients' spamming. In the case of some clients, i enabled them to send spam in massive amounts. Additionally, I helped hide their identities--which I collected extra pay for. I sold them “Warmed up infrastructure” and helped to create landing pages beyond EU jurisdiction. I did not feel like checking which of my domains were spamming and consequently got blacklisted. Neither users using my server for spamming nor my honest clients can now use it for normal mailing activity as the server's been blacklisted and all e-mails sent out either return or are automatically recognized as spam. No one wants to communicate with me and my clients or even connect to my spamming server. I ignored reports of spamming and did not react to complaints. I ignored abuse@... and postmaster@... accounts.
(You may provide additional description, as some users spam using just text while others use tracking and profiling elements.)
When sending spam I was tracking potential clients by sending them e-mails in HTML with remotely loaded graphics, scripts and fonts to track their IP addresses and check for the time at which they would open the e-mail. Opening such an e-mail left a cookie in their browser, which meant I could spy on them if they visited my site or one of my “trusted business partner” sites. I did not receive any permission for these actions and I did not inform about this in the sent spam.
My domain has been previously cleared on valli.org, but it’s IP address is still blacklisted. Is there any way you could help me? Once again, I haven't sent any spam.
Before writing: please read the above document and do not lie.
Furthermore, describe exactly what happened. Describe which and how many domains were involved in unfair competition or breaking GDPR laws. Did you have the permission or consent to make phone calls or send e-mails to these people? If you are honest then maybe your domain will have a chance to be removed from the blacklist. We will not ask any questions or negotiate if you do not write the whole truth with the exact details. For us each domain is the same and we either aren't aware of it’s reputation or can see that it is blacklisted. Do not ask to have a single IP addresses delisted as the reason for it's listing is the domain, wherein the IP address is listed automatically as the hostname where the domain is placed. It is the 'name of the host' - meaning the name of the server or virtual server. Whenever the listed domain ceases it's spamming, then the host IP address is delisted after 7 days without any intervention needed.
Many domains can be hosted on a single IP address. With that in mind, remember that even just one spamming domain can cause the host IP address to be added to the bl.rbl.polspam.pl blacklist and will lower the reputation of other domains using the same IP address. Without help from the hosting provider you will not be able to determine why your e-mails are being mistreated when your domain is not on any black list. If you're having such troubles, then your hosting provider’s IP address is most likely on a black list because of a different domain's suspicious activity. If the domain is cleared on http://multirbl.valli.org you should ask your provider to clarify the situation.
RBL polspam.pl will not offer help with resolving such problems as we do not know what the domain in question is. If you don't have any idea, then RBL polspam.pl certainly doesn't either. RBL polspam.pl does not always have an up-to-date list of your provider’s domains. A domain could have been transferred together with it’s black list entry from outside servers and could have “infected” it’s new host. Changing providers will not help. If a domain is blacklisted, it will “infect” the new host after it is transferred. The new host will automatically be flagged as containing a spamming domain and recipients will be instantly suspicious of your e-mails. It is important that providers care about the reputation of their clients and do not allow blacklisted domains on their servers.
Only the provider can really check which domain is spamming and creating the bad reputation. The provider must check all domains and their subdomains using the following commands in a loop:
nslookup domaininquestion.tld.rhsbl.rbl.polspam.pl nslookup domaininquestion.tld.rhsbl-h.rbl.polspam.pl
Once the spamming domains are removed, the host's IP address will automatically be delisted in 7 days. Hosting providers should regularly check the domains they are hosting the entries on the most popular RBL lists for.
Please read until the end:
RBL polspam.pl does not block nor ban anything. A domain listed in RBL polspam.pl can still receive and send e-mails. No one can change this fact. No one is blocking the domain’s server or mailbox. The individuals to whom the domain is sending e-mails can decide whether they want to receive them or not. Server administrators (or the users themselves) decide from whom they want to receive correspondence, and the way it should be classified. An entry on the RBL polspam.pl list means only that the domain or it’s host is known for sending out spam. Even if the domain is not spamming at the moment, this doesn’t mean it wasn’t seen doing so in the past.
RBL polspam.pl is one of hundreds of lists gathering reports of spamming domains. It is managed based on cooperation with the general internet community. It works on a similar basis to anti-spam projects which block intrusive ads. RBL polspam.pl does not take any donations or gifts, does not earn any money, does not have any commercial activities and is not sponsored in any way. RBL polspam.pl is a hobby, which has been built up by a community. It is not, in legal terms, a provider of any services and does not provide any electronic services. RBL polspam.pl does not gather nor collect any personal data and wishes that the correspondences sent to polspam.pl are not signed in a way that allows identification of the sender. No one is interested in who the owner of a domain/IP address is or what the contents of the website on this domain are.
The task of RBL polspam.pl is strictly to inform about spamming, based on reports from the community. Each volunteer has a right to report spamming to the common database. Anyone can also report a false entry and try to resolve any problems concerning it. A common cause of spamming is computers infected by viruses. Another would be badly configured servers. Such cases are easy. You give the name of your domain, the domain to which you cannot send emails and describe your problem. E.g. “My son has an infected computer. The same IP address is also used for the mail server. This address or domain got listed on RBL.”. Then, enter examples of returned e-mails, headers and message sources (without personal data), describe the problem, and it will most certainly be solved. It is utmost important that you present trustworthy evidence. We require IP addresses and domain names, which will go through a verification process. It may turn out that the hosting operator has all of his IP address' ranges on the black list as they do not pay attention to the reputation of the served spamming domains. If so is the case, we advise you to change your operator. In other cases; do not lie or pretend you do not know why you were listed.
On the internet, a domain’s history is always created at the very moment it is registered. It is common knowledge which addresses have hosted your domain (and at what times). It is easy to check your domain’s neighbors on the same IP address or in a range/class of IP addresses. If the domain was used in a group, it will be seen in the history of that group. The same is true about the contents of IP addresses. This information is available for up to a dozen years in the past. You, under no circumstance, will be able hide the fact that you had a few domains and were using them for spamming/to advertise the rest of the domains. Even if you delete the spamming domains and change their IP addresses, this information is publicly available on the internet. Do not lie about such things. Spammers normally use many different domains with different hosts, often abroad. They use some addresses to send out spam advertising their other domains. They enter the domain name in the text of the message, not in the header. This is done to divide the spam to a couple of sending domains so the mailbox operators do not realize that this is a spamming operation spread out among many hosts.
If you were spamming from a shared IP address then you have caused it significant damage. Your domain was blacklisted but it’s host’s shared IP address was blacklisted as well. Your actions have caused all other domains on the shared IP address to have problems with e-mails as they've become blacklisted due to your spamming. If you were outsourcing spamming, you must also admit to that. There are a multitude of services which offer fake domains. These domains will spam in order to hide your identity . Outsourcing spamming is doubling the problem for everyone. Your real domain will be blacklisted along with the fake domain which was sending the spam. Additionally other domains and mail server IP addresses taking part can be blacklisted. It is the only way to stop spam as spammers can change domains daily and use them for only one wave of spamming.
If you yourself or someone else have come up with the idea of using “warmed up infrastructure” then you must be made aware of a couple of things. This is one of the most cunning ways of spamming and deserves special condemnation. “Warmed up infrastructure” in other words is a newly bought domain name and IP address, usually out of EU jurisdiction. Remember that this kind of hiding does not work. You will have to reveal yourself to the client after all. This is premeditated spamming.
If you've bought an advertisement campaign from an outside company, you'd probably hoped that it would buy radio or TV screen time in your name, pay for advertising banners on websites or print pamphlets. You might be very wrong. Often, such companies will send e-mails in your name to millions of random people. This will, in some cases, result in consequent entries on black lists all over the world and permanent bans on various social media platforms. Remember that the clients you're targeting have the unwanted e-mails, billings or telephone conversation recordings. They did not consent to your spam and may have started recording after realizing that the call was for telemarketing purposes.
“Warmed up infrastructure”, in the language of spammers is:
- buying a never used, clean IP address with no history; usually outside of EU laws.
- buying another IP address in a different part of the world to be an outgoing e-mail server with a new domain that was registered 3-6 months earlier.
- buying mass mailing services.
- buying a landing page – a basic site with no address data that is used to intercept personal data and install the spy elements.
The operation can look as follows:
Let's say you've received spam and are being convinced to open a certain website. Sometimes, the e-mail domain may also be the website’s domain. Often, within the text of the e-mail, there are links to different domains and mail addresses. There is no general rule here. After entering the spammer's website you will see the landing page. It’s purpose is to intercept personal data, deceitfully acquire agreements to marketing and illegally use spying techniques such as cookies, single pixels, scripts or (in extreme cases) install a virus. After visiting such a website, the spammer will be able to track you on different websites or cooperating internet stores. Spammers often exchange data between one another.
You can liken it to a hypothetical situation wherein while exiting a supermarket, the service sticks a bar code on your back. Now, if you visit another shop from this chain the workers will be able to recognize you and offer you the products which you put back on the shelf in the previous store. Different chains will then exchange data between one another and you'll be recognized at a shop from a different chain or a gas station (if it’s taking part in this operation). In a simplified way, this is similar to how cookies work.
Interaction with spam can, obviously, vary. You can answer an e-mail, fill out a form on a website, or a website will recognize you from your earlier visited sites. Sometimes this is all it takes for the spammer to call you. Knowing your name as if you met earlier, that is. The phone number could have been acquired from a different market chain when exchanging data and cookies. It is entirely enough that you bought something, somewhere, and left your contact information. Sometimes your data may also come from criminal activity, data leaks, data theft or electronic burglary.