Your IP is clean… until suddenly it isn’t. You've unknowingly been pulled into a residential proxy network. 😱 These networks continue to pull in unsuspecting IPs, and the repercussions can be messy - degraded reputation, service disruption, and the risk of landing on a blocklist. If you’ve just discovered your IP was listed because of residential proxy abuse, you’re not alone. To help, we’ve put together a simple FAQ explaining what happened and how to fix it. First, let's start with how this happened: ➡️

FAQs | Residential Proxies | Spamhaus

Then follow the steps to fix it: ➡️

FAQs | Residential Proxies | Spamhaus

#ResidentialProxies #Support #TicketDesk

❄️ As winter settles in and the temperatures drop, we’re seeing a rise in a UK-based “winter heating allowance” phishing scam. First spotted earlier this year, this campaign sends text messages posing as the Department for Work and Pensions (DWP), claiming the recipient has not yet submitted applied for this year’s allowance. 📄 See article -

the Guardian

Winter fuel allowance: the scammers pounce on government U-turn

Fraudsters send out texts claiming to be from the Department for Work and Pensions urging pensioners to apply for a £300 payment

Recently, we’ve observed a surge in related domains appearing on the Spamhaus Domain Blocklist, suggesting the campaign is resurfacing. Many of these domains begin with “uk-” and containing keywords like “winterfuelling,” “fuelgrant,” “fuelhelp,” “energyassist,” or similar terms. Have you received a phishing attempt? Share it with us here 👉

Threat Intel Community | The Spamhaus Project

Keep an eye out for suspicious messages this winter 🕵️ Wishing you a warm and cozy Christmas from all of us at Spamhaus 🎄✨

📢 ISPs & Hosts | Following last month's Endgame 3.0 announcement, if you've received a notification, and are yet to take action, here's what you need to do: 👉 Go to this remediation webpage:

Endgame takedown | Remediation data and support | Spamhaus

👉 Enter the access code included in the email. 👉 Download the list of infected machines 👉 Verify each infected machine, and where necessary, contact the owner and ask them to run antivirus and malware removals tools, and reset their passwords for any online services they may have accessed from them (there's a ready-made email template for you to use on the remediation webpage 😀) Thank you again to everyone who is part of this important effort 🙏 #Trustandsafety #Endgame3 #Takedown

📢 In case you missed it….we recently published a detailed piece on the 'Anatomy of Bulletproof Hosts' - exploring how these services are evolving and what it means for the threat landscape. In this blog, we cover: - The decline of monolithic bulletproof hosts - The shift toward separation of liabilities - The growing abuse of trusted services - And what’s next for the threat ecosystem 👉 Read the full post here:

Resources | The anatomy of bulletproof hosting – past, present, future | Spamhaus Project

❗Latest Spamhaus DROP listings - representing the worst of the worst IP traffic: 👉 SBL689777 - https://check.spamhaus.org/results?query=SBL689777 👉 SBL689721 - https://check.spamhaus.org/results?query=SBL689721 👉 SBL689720 - https://check.spamhaus.org/results?query=SBL689720 👉 SBL689719 - https://check.spamhaus.org/results?query=SBL689719 👉 SBL689718 - https://check.spamhaus.org/results?query=SBL689718 👉 SBL689717 - https://check.spamhaus.org/results?query=SBL689717 👉 SBL689716 - https://check.spamhaus.org/results?query=SBL689716 👉 SBL689706 - https://check.spamhaus.org/results?query=SBL689706 👉 SBL689704 - https://check.spamhaus.org/results?query=SBL689704 Avoid connecting with these at all costs ✋ ⤵️

📈 We’re continuing to see IPs being abused by residential proxy networks, and there’s no sign of it slowing down. Ending up part of one can be a nightmare, not to mention the risk of getting listed on our side. If you discover your IP has been listed because it’s part of a residential proxy network, you'll no doubt have questions: What exactly is a residential proxy? How did my IP get pulled into this? And how do I fix it? 🤯 Don't worry, we are here to help. ⤵️ ⤵️

digitalocean[.]com is currently the #1 network hosting #botnetCCs, with 153 detections over the last 30 days. It’s disappointing to see so many major global networks still appearing in this Top10. But why does this keep happening? 🤔 Earlier this year, we explored the root causes behind this ongoing issue and what networks must do to break the cycle - learn more here ⤵️

Botnet Spotlight | Networks Hosting Botnet C&Cs: Same Players, Same Problems | Blog

Spamhaus #ReputationStatistics 👉 https://www.spamhaus.org/reputation-statistics/networks/botnet/

Meet the 🔝 5 URL leaderboard contributors (last 30 days)! 🏆 🏅Contributor: N147 - over 100,000 URLs! 🏅Contributor: LP31 🏅Contributor GF24 🏅Contributor: EL67 🏅Contributor: MM89 Amazing efforts - THANK YOU to all our amazing contributors for your continuous support and submissions! 🙌✨ Did you know you can change your name on the leaderboard? It only takes a minute to review your 'Display Name' and give consent to share it on the leaderboard. Login here: 👉

The Spamhaus Project