On Thu, Dec 04, 2025 at 07:55:35AM +0100, Sebastian Nielsen via mailop wrote:
> Of course you can’t guess the abuse adress, but the server name is
> clearly indicated in the X-AntiAbuse headers, then it shouldn’t be
> that hard to find that the server name is actually the web hotel,
> which is a customer to hivelocity.net, and thus just put abuse@ in
> front of the server name.
The ONLY header that can be trusted in a spam message is the "Received"
trace header added by the local SMTP server. This contains the client
IP address. Everything else is suspect.
The party responsible for managing abuse from a given network is the
service provider that manages the IP space, they can interface with
their customers as/when appropriate. The WHOIS abuse contact for the ip
block in question is the canonical contact for abuse reports. Period.
--
Viktor. 🇺🇦 Слава Україні!
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
