Jump to content

Reporting address incorrectly figured


Mrak

Recommended Posts

- 1 -

Please take a look at reports history about spamvertised site

http://otdih.travel.to and also about http://travel.to/otdih

http://www.spamcop.net/mcgi?action=showhis...id&val=30548129

http://www.spamcop.net/mcgi?action=showhis...id&val=30401052

Reports are being sent to ampira.com. I think that reporting address is figured incorrectly. I cant't see any connection between ampira.com and v3.com (who hosts travel.to and similar domains) except their IP's are close neighbours. Lookup at www.abuse.net for domain 'travel.to' returns 'abuse[at]v3.com' and this looks right.

- 2 -

Usually, nobody bothers to open spamvertized URL, but these '.to' URLs are mere redirectors. The site itself is hosted elsewhere. In case of spam mentioned above, both URL point at http://sochiru.terrashare.com

When I tried to figure reporting address using SpamCop, it gave out:

Parsing input: sochiru.terrashare.com

host 208.185.127.163 = mws-mail.northsky.com (cached)

Reporting addresses:

abuse[at]freeservers.com

Parsing input: terrashare.com

host 69.42.82.199 (getting name) no name

Reporting addresses:

abuse[at]gblx.net

antispam[at]webair.com

postmaster[at]webair.com

Again, lookup at abuse.net returned different addresses and they look correct:

postmaster[at]terrashare.com

abuse[at]terrashare.com

- 3 -

Same spammers sent quite a bunch of junk earlier this summer, with URLs:

http://svetlana.on.to

http://www.spamcop.net/mcgi?action=showhis...id&val=30630839

http://sochiru.fly.to

http://www.spamcop.net/mcgi?action=showhis...id&val=34486198

http://www.sochi.on.to

http://www.spamcop.net/mcgi?action=showhis...id&val=31258767

All above '.to' URLs are now deactivated, but when they were alive they pointed to same site http://sochiru.terrashare.com

Policy of terrashare.com is zero spam tolerance , I tried to send them reports, myself (26 and 31 jul 2004), got no reply and the site is still active. Maybe I was alone who tried sending complaints about this case.

Link to comment
Share on other sites

Hi, Mrak,

...There are some folks who participate here in the fora who may be able to give you meaningful replies but this looks like something that is more appropriate for SpamCop Newgroups spamcop.geeks and spamcop.routing.

Link to comment
Share on other sites

Hi, Mrak,

...There are some folks who participate here in the fora who may be able to give you meaningful replies but this looks like something that is more appropriate for SpamCop Newgroups spamcop.geeks and spamcop.routing.

The routing newsgroup would be the place. Not worth doing though, since Ironport took over SpamCop, 99% of the routing requests get ignored. The group is full of requests going back for over a month that haven't been acted on.

Link to comment
Share on other sites

The routing newsgroup would be the place. Not worth doing though, since Ironport took over SpamCop, 99% of the routing requests get ignored. The group is full of requests going back for over a month that haven't been acted on.

Though I see that you've already been there, just thought I'd add this for others reading this Topic ... from the newsgroups today;

> Are there no longer any deputies who handle spamcop.routing?

Yes I still handle routing -- but obviously I am behind. I will get caught

up as soon as I can.

Ellen

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...