alsonmedia, maybe incorrect reporting address?

[Jank1887]

have been steadily getting AlsonMedia.com sourced spam.  they're reporting address comes up as alson@alsonmedia.com.  Their spam/abuse page gives abuse@alsonmedia.com as the notification address. (https://alsonmedia.com/antispam_policy.html), and abuse.net lists both the alson@ and the abuse@ address. I realize it pulled the alson@ from the domain WHOIS record.  Wasn't sure if it was worth adjusting the reporting address based on their stated abuse reporting destination.

example report: https://www.spamcop.net/sc?id=z6696312978zfb08e15f2244f3e87214f2e29b52cabaz

[gnarlymarley]

On 12/22/2020 at 9:01 AM, Jank1887 said:

Their spam/abuse page gives abuse@alsonmedia.com as the notification address. (https://alsonmedia.com/antispam_policy.html), and abuse.net lists both the alson@ and the abuse@ address.

Interesting they list the two addresses.  I have seen it where companies want different abuse addresses to track where it comes in from.  Would be nice if companies would keep their contact information up to date in whois.

I also noticed it is prefering the /23 over the /16.

Using smaller IP block (/ 9 vs. / 16 )
Removing 1 larger (> / 9 ) route(s) from cache

 

[petzl]

1 hour ago, gnarlymarley said:

Would be nice if companies would keep their contact information up to date in whois.

I remember when it was postmaster@blal.blah that address got spammed to oblivion.
Many now want spam reports done on secret web pages. Gmail give a reply to abuse page/form now
 

Quote

f you would like to report suspected spam, Malware, Phishing, or other abuse on Google Cloud, please fill out the form at the following link:
https://support.google.com/code/contact/cloud_platform_report

 

Edited December 23, 2020 by petzl

[gnarlymarley]

On 12/23/2020 at 2:41 PM, petzl said:

I remember when it was postmaster@blal.blah that address got spammed to oblivion.

I remember when I used to submit tons of reports to the postmaster address.  Kind of interesting that if someone lets the spamming go on, they get spammed, no matter what their address is.  I find it easier to have my address and postmaster sharing the same box and then I can filter on the "To:".