Hello,

Can you please remove emil[at]intercage.com from the abuse contact for onlineabusecenter.com.

Getting the following over and over from a IP we do NOT control:

Spamvertised web site: http://www.heavyright.com/
http://www.spamcop.net/w3m?i=z3500320024z3...8952641989a80cz
http://www.heavyright.com/ is 200.63.43.8; Sun, 21 Sep 2008 02:25:00 GMT

Spamvertised web site: http://www.quarthope.com/unsubscribe.php?m...=c71b339244e723
http://www.spamcop.net/w3m?i=z3500320942z0...9a6037bbf6bf46z
http://www.quarthope.com/unsubscribe.php?m...=c71b339244e723 is 200.63.43.8; Sun, 21 Sep 2008 02:25:33 GMT

Spamvertised web site: http://www.wrongbread.com/
http://www.spamcop.net/w3m?i=z3500311375z9...72cb111000df61z
http://www.wrongbread.com/ is 200.63.43.8; Sun, 21 Sep 2008 02:16:09 GMT

Seems emil[at]intercage.com, abuse[at]glbx.net, abuse[at]estdomains.com are all WRONG abuse contact.

Thanks!

You should have a response link in the reports you get but will email deputies for you with request for over-ride. Routing picked up in http://www.spamcop.net/sc?action=rcache;ip=200.63.43.8Seems like you need to do something about abuse.net

NOTE: Fixed link for public use

As this is a Reporting issue, this Topic will be moved to the Reporting Help Forum section with this post.

As Farelf noted, one of the actions in the Abuse Response Center URL is "I am not the right person to contact about this" ..... Have you used that selection to respond to the Report?

abuse.net is another third-party that seems to be involved. If the data they are providing is wrong, he needs to be conteacted about the required correction.

In addition to the observation from Farelf that abuse.net is probably the place to raise this you should be aware that the SC deputies are not guaranteed visit these forums on a regular basis. To raise an issue with them you need to to use the documented contact methods.

Don (one of the admins) does come by fairly often but you'll have a better guarantee going the 'official' routes.

HTH

Andrew

Where to get Help

I think pretty much all the regulars here know my email address. I can't imagine why they wouldn't simply give it to you instead of making you jump through hoops to find it.

You can contact me directly at: service[at]admin.spamcop.net

We use the Abuse.net database to get contact addresses for our reports.

http://www.heavyright.com/ resolves to 200.63.43.8

We're finding onlineabusecenter.com as the owner of 200.63.43.8

http://www.abuse.net/lookup.phtml?domain=o...abusecenter.com

When we go to Abuse.net for reporting addresses, we get:

postmaster[at]liteupinc.com
abuse[at]estdomains.com
postmaster[at]onlineabusecenter.com
postmaster[at]directi.com
emil[at]intercage.com
abuse[at]gblx.net

You can ask Abuse.net to remove you from their reporting address registration if you don't want reports about the onlineabusecenter.com network.

I will be happy to do that for you if you want, but you have to email me directly so that I can show Abuse.net the basis for my change request.

- Don D'Minion - SpamCop Admin -
.

I did what I imagined was going one better than that, I sent an email to deputies for him, as I said I would - I think everyone else may have been operating with that knowledge.

It looks like the message got lost.

Ellen says she hasn't seen it and I'm not finding anything in our archives about the issue.

Maybe you could resend it to me. I'll be happy to handle it.

Just for the record... I just discovered from looking through the archives that I told Emil about Abuse.net a month ago, so he should be aware of how we get reporting address.

- Don D'Minion - SpamCop Admin -
.

Thanks Don, forwarded just now, subject [Fwd: Stop reports request/routing.]

Ah, I have just noticed one of my provider's 4 outgoing servers is listed on spam.dnsbl.sorbs.net - 203.59.1.108 - that might explain a thing or two. Will also send via Hotmail JIC. And have words with provider.

FWIW, I'm travelling away from home a lot at the moment and didn't immediately have Don's Email address in my mind and I did note that Farelf had offered to forward the information.

Andrew

This is not our job and we don't always have all the tools handy when we respond to posts. That's one reason why we have tried to provide answers to frequently asked questions here in the FAQ forum. Sometimes it's better to provide a link than to re-type the same information, avoiding typos and saving time.

It's too bad that the email sent to you didn't arrive (and that no NDR was sent) - just goes to demonstrate that email is not always a reliable means of communication.

Miss Betsy

Reports still going to emile - http://www.spamcop.net/sc?id=z2271132753z0...b8245a060e3663z with purposesharp.com resolving to 200.63.43.12 and "If reported today":
postmaster[at]liteupinc.com
abuse[at]estdomains.com
postmaster[at]directi.com
emil[at]intercage.com
postmaster#onlineabusecenter.com[at]devnull.spamcop.net
abuse[at]gblx.net

No "spamvertized url" reports actually sent on the above one (parser said couldn't resolve on the first run).

Yep. If he wants a change he's going to have to write to me directly or do it himself. If I write to Abuse.net for him, I'm going to need his email for evidence and archives.

- Don -

Fair enough. In terms of logging in, he only hung around for the first 2 replies (and may not have even seen those). Hopefully he sees it through one way or the other but he's the one with the incentive after all. But you already gave him the solution a month ago. There's no figuring ...

I guess this explains a few things:

Intercage, which has also done business under the name Atrivo, was knocked offline late Saturday night when the last upstream provider connecting it to the Internet's backbone, Pacific Internet Exchange, terminated Intercage's service (Thanks to Stephen Bye in the NGs).

'Malware-friendly' Intercage back among the living

A day after security experts celebrated the death of a network provider accused of hosting a large concentration of the world's cybercrime, California-based Intercage appeared to be among the living again.

IP transit provider UnitedLayer agreed to provide upstream service to Intercage about 36 hours after its last transit provider pulled the plug. UnitedLayer's move, which is sure to prove unpopular in some circles, came after Intercage agreed to completely sever ties with Esthost, the Eastern European web host believed by many to be responsible for the lion's share of abusive traffic carried by Intercage.

Well, that didn't last long. They're visible again too.
H:\>nslookup intercage.com
...
Non-authoritative answer:
Name: intercage.com
Address: 216.255.187.125
H:\>

InterCage, Inc. INTENSE SERVERS. Website Coming Soon

But http://hexillion.com/asp/samples/ValidateEmail.asp for emil[at]intercage.com still just times out.

Anyway, all the more reason to straighten out their abuse records and to give the matter some priority, noting the contention that some of the heavily involved sites weren't 'theirs' at all - the one complained of and its near neighbours tracking back to Panama:

H:\>whosip 200.63.43.8

WHOIS Source: LACNIC
IP Address: 200.63.43.8
Country: Panama
Network Name: PA-ONLI-LACNIC
Owner Name: Onlineabusecenter.com
From IP: 200.63.43.0
To IP: 200.63.43.255
Allocated: Yes
Contact Name: Online Abuse Center
Address: PO-BOX PTY136478, 0, 0, 0 - Panama - PA
Email: abuse[at]ONLINEABUSECENTER.COM
Abuse Email: abuse[at]ONLINEABUSECENTER.COM
Phone: +507 000 2652454 []
Fax:
...

And I'm seeing the abuse.net entry seems to have been fixed (sorta) just showing the rfc default - postmaster@(domain) - but SC seems to do better:

http://www.spamcop.net/sc?track=http%3A%2F....heavyright.com

now agreeing with the IP lookup (that is, abuse[at]onlineabusecenter.com). Remarkable.

I'm thinking this can be marked "resolved" now. Don (or someone) has worked some prudent magic.