Fusepoint (formerly RoundHeaven Communications) - legal threats against the blocklist maintainer instead of booting their spammers! Also - forwarding all spam complaints directly to their spammers. fusepoint.com, fusepoint.net, roundhaven.com, roundheaven.com, roundheaven.net, [199.243.148.0 - 199.243.151.255], [205.150.176.0 - 205.150.179.255]: Access denied! === Notification about the legal threat === NNTP-Posting-Date: Fri, 28 Feb 2003 16:51:15 -0600 Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Newsreader: knews 1.0b.0 (mrsam/980423) From: Sam Subject: Oh no, I'm being reported to the US Department Of Justice Newsgroups: news.admin.net-abuse.email Followup-To: news.admin.net-abuse.email X-1: ------------------------------------------------------------------------ X-2: NOTE - spamtrap in use, valid address, legit mail accepted, but delayed. X-3: ------------------------------------------------------------------------ Organization: Kookbusters X-Goober-FAQ: http://www.killfile.org/~tskirvin/faqs/grubor.html X-SpeedBump-FAQ: http://www.ultranet.com/~eclipse/sbfaq.html X-NutScum-FAQ: http://www.netscum.org/ X-Grep-Bait-1: qmail, Archimedes Plutonium, turkey, Kibo, meow, Vulis, Grubor. X-Grep-Bait-2: "Some people are alive only because it is illegal to kill them." Message-ID: Date: Fri, 28 Feb 2003 16:51:15 -0600 Lines: 35 NNTP-Posting-Host: 66.92.103.29 X-Trace: sv3-LCFyqjwMY5w+MNGo4RKOJp522Zqiuy2qQ3WdXkC+mXYEMtpMms8sjcRVZbPzm0WSKyGrKa4cX5 y5kqQ!WT4rfkS8TEEMM7A+UsMQTdUfaDl3vUDh2vAnIDBNOYmca/mAIhtrWAYzMhHtN09AxMzzwucFQ I4Q!BcEj25xZkktmq8x6RExfRr66 X-Complaints-To: abuse@speakeasy.net X-DMCA-Complaints-To: abuse@speakeasy.net X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly X-Postfilter: 1.1 Path: uni-berlin.de!fu-berlin.de!feed.ac-versailles.fr!proxad.net!proxad.net !border1.nntp.aus1.giganews.com!nntp.giganews.com!nntp3.aus1.giganews.com !nntp.speakeasy.net!news.speakeasy.net.POSTED!not-for-mail Xref: uni-berlin.de news.admin.net-abuse.email:1930842 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 A Canadian provider thinks that I run SPEWS, Spamhaus, and WIREHUB. All three of 'em: it's me pulling the strings behind the curtain, folks. As a result of that, I'm on the receiving end of not just one, but two Fedexed 'tooneygrams. They don't actually come out and say so, but it has to be the explanation. They are furious because, allegedly, I've blacklisted the entire /24 where they hosting the gotmarketing.com bulk mailhouse, when in fact I've only blackballed the single IP address that kept shitting into my mailbox. In the course of investigating this latest development, I determined that the /24 in question has been firmly shitlisted by the top three popular antispam BLs. So they got now a bunch of pissed off customers whose mail is bouncing; I'm probably the only one who ever nastygrammed them (neither SPEWS, nor Spamhaus, nor WIREHUB sends out notices), complaining about gotmarketing, and they get gotmarketing.com come up when they punch in their IP into SPEWS, Spamhaus, or WIREHUB. That's the only possible answer. Enjoy: http://www.spambag.org/cartooneys/fusepoint/index.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) Comment: http://www.geocities.com/SiliconValley/Peaks/5799/GPGKEY.txt iD8DBQE+X+fi3ejdWUS0ltARAuRsAKCDUVH7i4lr8DpWgyjaCpbO5JfkjwCfeK9U 8NPMMeHjGTTnlkEIA3B9cQc= =GxXf -----END PGP SIGNATURE----- === The evidence file is on the Spambag.org page: === === http://www.spambag.org/cartooneys/fusepoint/index.html === === Mirrored locally: === === http://www.DolphinWave.org/spam/Fusepoint_RoundHeaven/mirror/index.html === |spambag.org| - Fusepoint legal threat 2/27/03 - It took some time, but the first legal threat is in. And, boy, did I hit the cartooney jackpot. Not one, but two sets of lawyers at once. The story begins on 2/13/2003, when I got spammed by Gotmarketing. Gotmarketing already spammed me several times before, from other Internet providers. Very few actors in the spam industry manage to stay at one provider for a long time. They bring up a colo-ed box, or a circuit at one provider, generate complaints, and are forced to quickly pack their bags. Sometimes they manage to hang on for quite some time; but sometimes the providers are quick to pull the trigger and they must leave town quickly. So, anyway, I already blocked the IP addresses Gotmarketing was spamming me from. Now, they began to use a new IP address that was apparently assigned to a Canadian provider called |roundhaven.com|. So, I quickly blocked that IP address from sending me mail, and sent my usual complaint to |roundhaven.com|. A week later I receive an obvious form letter, claiming that they need 45 days to pull the plug. Now, look at my reply . It wasn't inflammatory by any stretch of imagination. It was mostly an "oh, well, you're going to let your customer spam for 45 days, so be it" kind of a repsonse. Well, that innocent, one paragraph response made all the hell break loose. The next thing I know, these guys send not one, but two Fedexes. Here's the icing on the cake: in their zeal, instead of addressing it to |spambag.org|'s mailing address, these guys apparently Fedexed a pair of addresses they got out of a phonebook. One address was my street address in a very rural area. It's a house that I'm in the process of selling. I'm not there during the day, making things rather difficult. The second copy went to a completely different city. These guys were so anxious for an answer that they, originally, gave me only one business day to respond. But it took a week for their demand letter to get here. The published mailing address would've been much, much quicker. This demand letter must set a record of sorts. It's five pages long. It's not one, but two demand letters at once. First, there's a three-page monologue from |roundhaven.com|'s Canadian lawyer. Then, because allegedly I did not respond to their Canadian's lawyers demands, there's a demand letter from an American law firm. The American letter is dated one business day after the Canadian letter, and I never received the Canadian letter in the first place, until now. I can almost hear "The Merry Go-Round Broke Down ", playing in the background. Anyway, here's the good stuff: Page 1 Page 2 Page 3 Page 4 Page 5 Anyway, while deciphering all of that one thing kept nagging me - they claimed that I blocked an entire /24 block, instead of a single IP address (which I did). I finally managed to figure it out just before I replied to this joke of a demand letter. Read my reply for the punchline. ------------------------------------------------------------------------ spambag.org privacy policy http://www.spambag.org spambag.org FAQ === Some data (1-Mar-2003) === $ whois 205.150.176.0@whois.arin.net [whois.arin.net] UUNET Technologies, Inc. UUNET-2-A (NET-205-150-0-0-1) 205.150.0.0 - 205.150.255.255 RoundHeaven Communications Canada Inc. RHEAVEN-UUBLK1 (NET-205-150-176-0-1) 205.150.176.0 - 205.150.179.255 # ARIN WHOIS database, last updated 2003-02-27 20:00 $ whois 199.243.148.132@whois.arin.net [whois.arin.net] Bell Canada WORLDLINX05 (NET-199-243-0-0-1) 199.243.0.0 - 199.243.255.255 RoundHeaven Communications Canada Inc. NET-199-243-148-0-1 (NET-199-243-148-0-1) 199.243.148.0 - 199.243.151.255 # ARIN WHOIS database, last updated 2003-02-27 20:00 $ whois fusepoint.com [whois.crsnic.net] Whois Server Version 1.3 Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information. Domain Name: FUSEPOINT.COM Registrar: REGISTER.COM, INC. Whois Server: whois.register.com Referral URL: http://www.register.com Name Server: NS1.ROUNDHEAVEN.NET Name Server: NS2.ROUNDHEAVEN.NET Name Server: NS3.ROUNDHEAVEN.COM Status: ACTIVE Updated Date: 23-jun-2002 Creation Date: 16-may-2002 Expiration Date: 16-may-2003 >>> Last update of whois database: Fri, 28 Feb 2003 17:31:07 EST <<< <...> Organization: Fusepoint Managed Services DNS Fusepoint 2323 - 595 Burrard Street Vancouver, BC V5L2L2 CA Phone: 6046877757 Email: dns@fusepoint.com Registrar Name....: Register.com Registrar Whois...: whois.register.com Registrar Homepage: http://www.register.com Domain Name: FUSEPOINT.COM Created on..............: Thu, May 16, 2002 Expires on..............: Fri, May 16, 2003 Record last updated on..: Sat, Jan 11, 2003 Administrative Contact: Fusepoint Managed Services DNS Fusepoint 2323 - 595 Burrard Street Vancouver, BC V5L2L2 CA Phone: 6046877757 Email: dns@fusepoint.com Technical Contact: Fusepoint Managed Services DNS Fusepoint 2323 - 595 Burrard Street Vancouver, BC V5L2L2 CA Phone: 6046877757 Email: dns@fusepoint.com Zone Contact: Fusepoint Managed Services DNS Fusepoint 2323 - 595 Burrard Street Vancouver, BC V5L2L2 CA Phone: 6046877757 Email: dns@fusepoint.com Domain servers in listed order: NS1.ROUNDHEAVEN.NET 205.150.176.17 NS2.ROUNDHEAVEN.NET 205.150.176.18 NS3.ROUNDHEAVEN.COM 205.150.178.29 Register your domain name at http://www.register.com $ whois roundhaven.com [whois.crsnic.net] Whois Server Version 1.3 Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information. Domain Name: ROUNDHAVEN.COM Registrar: DOMAINPEOPLE, INC. Whois Server: whois.domainpeople.com Referral URL: http://www.domainpeople.com Name Server: NS1.ROUNDHEAVEN.NET Name Server: NS2.ROUNDHEAVEN.NET Name Server: NS3.ROUNDHEAVEN.COM Status: REGISTRAR-LOCK Updated Date: 07-nov-2002 Creation Date: 16-jan-2002 Expiration Date: 16-jan-2004 >>> Last update of whois database: Fri, 28 Feb 2003 17:31:07 EST <<< <...> Registrant: RoundHeaven Communications Canada Inc 2323-595 Burrard Str Vancouver, BC V7X1L4 Canada Registrar: Domain people Inc. Domain Name: roundhaven.com Created on .............WED JAN 16 08:01:26 2002 Expires on .............FRI JAN 16 08:01:26 2004 Record last updated on .SAT FEB 02 01:01:23 2002 Administrative Contact: RoundHeaven Communications Canada Inc DNS Admin 2323-595 Burrard Str Vancouver, BC V7X 1L4, CA ( )604-6877757 () dnsadmin@roundheaven.com Technical Contact: RoundHeaven Commucations Canada Inc DNS Admin 2323-595 Burrard Str Vancouver, BC V7X1L4, CA ( )6046877757 () dns@roundheaven.com Billing Contact: RoundHeaven Communications Canada Inc DNS Admin 2323-595 Burrard Str Vancouver, BC V7X 1L4, CA ( )604-6877757 () dnsadmin@roundheaven.com Domain servers in listed order: ns1.roundheaven.net ns2.roundheaven.net ns3.roundheaven.com (roundhaven.com) Register your domain name at http://www.domainpeople.com === Forwarding all spam complaints directly to their spammers === Path: uni-berlin.de!fu-berlin.de!peer01.cox.net!cox.net !border3.nntp.aus1.giganews.com!nntp.giganews.com!wn14feed!worldnet.att.net !204.127.198.203!attbi_feed3!attbi_feed4!attbi.com!rwcrnsc54.POSTED !not-for-mail Newsgroups: news.admin.net-abuse.email Subject: FUSEPOINT forwards complaints to GOTMARKETING From: "Morely 'I drank what?' Dotes" Organization: Lumber Cartel (TacOps Division) Message-ID: User-Agent: Xnews/5.04.25 Hamster/1.3.23.4 Hamster/1.3.23.4 X-From: listme@listme.dsbl.org Lines: 157 NNTP-Posting-Host: 12.225.50.233 X-Complaints-To: abuse@comcast.net X-Trace: rwcrnsc54 1057990169 12.225.50.233 (Sat, 12 Jul 2003 06:09:29 GMT) NNTP-Posting-Date: Sat, 12 Jul 2003 06:09:29 GMT Date: Sat, 12 Jul 2003 06:09:29 GMT Xref: uni-berlin.de news.admin.net-abuse.email:2025226 I just got off the phone with "Dmitri" at FUSEPOINT (that's the guy who handles Abuse@Fusepoint.com email). Fusepoint Managed Services DNS Fusepoint 2323 - 595 Burrard Street Vancouver, BC V5L2L2 CA Phone: 6046877757 HE verified that the email you see below does, indeed, mean that FUSEPOINT forwards any spam complaints about their customers *TO*THE*SPAMMING*CUSTOMERS*. He prattled about contreacts and legal obligations; I informed him that I am not obligated to accept his traffic (and as of this moment, I am not accepting it). I suggest everyone else go and do likewise; FUSEPOINT is not as big as LEVEL3, but they are certainly just as greedy and evil. Received: from spooler by mail.pc-gamereview.com (Mercury/32 v3.32); 11 Jul 03 19:59:55 -0700 X-Envelope-To: Return-path: Received: from mailb.fusepoint.com (66.244.223.181) by mail.pc-gamereview.com (Mercury/32 v3.32) with ESMTP ID MG0002B2; 11 Jul 03 19:59:49 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.0.6249.0 content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: RE: Become a Listing Superstar Date: Fri, 11 Jul 2003 19:59:36 -0700 Message-ID: <77F055FA968580429F4546414D8C10E701519F2A@s102b.rhcci.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Become a Listing Superstar Thread-Index: AcNHyhvthqs/9tMFTRK7gVd+f8/uHAAV4JZw From: "Abuse@Fusepoint.com" To: "Abuse Desk" We appreciate your response and comments regarding our SPAM notification. Due to the time constraints placed on us by our ISP provider, we are unable to investigate the legitimacy of each complaint and must notify all of our customers using a standard template. We do understand that there will be subscribers that will forget they have signed up to your list and will erroneously report the email as SPAM.However, our ISP requires a response, including the steps taken to resolve the complaint within 48 hours of receiving the SPAM complaint, regardless of the list legitimacy. We will continue to notify you about any SPAM complaints we receive regarding your site/network so you can fix the email addresses in your database. Because of the serious actions our ISP can take regarding SPAM complaints, including blacklisting our IP address space, we will require a response from you on every complaint with the actions taken to resolve the problem. Your response can be a standard template/reply with a message that user subscription is terminated or the user has been deleted from an addressdatabase. Please let us know if there is a specific email address you would like us to forward the SPAM complaints to. -----Original Message----- From: Abuse Desk [mailto:abuse@spamblocked.com] Sent: Friday, July 11, 2003 9:31 AM To: abuse@easydns.com; abuse@comcast.net; abuse@spews.co.uk; Abuse@Fusepoint.com; abuse@godaddy.com; abuse@uunet.ca Cc: nanas; Val_Hansen_srvywz@gm44.com; susan@nationwidehousevalues.com; customerrelations@remax.net Subject: Become a Listing Superstar Repeat spam on behalf of Val Hansen, a RE/MAX agent. GODADDY: You are providing domain registration of GM44.COM which is the immediate source of this spam. Please note that, not only am I not in the Real Estate business, nor do I have any business relationship with either GM44 nor Val Hansen, the agent behind this spam, he has been previously notified both by email and telephone that I am not interesed, has promised not to spam, and has violated his promise (as well as the laws of 29 US States). UUNET.CA: GM44 is your customer. GM44 has sent me spam, in violation of your Acceptable Use Policy. Please enforce the published terms of that policy. RE/MAX: Your agent has repeated his violation of law and spammed me again. I request that you immediately disassociate yourself from the spammer, to avoid liability for his violation of law. I would also point out that, as he is not licensed to sell Real Estate in Oregon, where I am, his solicitation could cause the cancellation of RE/MAX's Oregon business licenses, and will almost certainly result in a State Real Estate Board censure if he remains your agent. Val, you evidently didn't learn from your first spam run and our long telephone conversation. I am disappointed; I thought you were smarter than that. You expressed your understanding that spam constitutes theft by conversion and trespass to chattel at that time; this means that you are knowingly and willfully violating the law in conduct of Interstate = commerce. That's really, really not smart. Valentine Hansen REMAX Properties 8201 Cantrell, Suite 225 Little Rock, Arkansas Office: 501-224-4111 Direct: 501-960-4667 Susan Hansen: susan@nationwidehousevalues.com nationwidehousevalues.com 4 Johnson Ranch Rd Little Rock, AR 72223 US Phone- 800-399-2704 Fax- 888-462-8023 This is a recommendation for an immediate listing of the following = servers and domains for spamming and/or spam support: nationwidehousevalues.com MX (Mail Exchanger) Priority: 5 mail.nationwidehousevalues.com nationwidehousevalues.com MX (Mail Exchanger) Priority: 10 smtp.easydns.com hansenhomes.com valhansen.com valentinehansen.com valhansen.net mta4.gm44.com [216.176.55.20] I am not SPEWS. -----Original Message----- Microsoft Mail Internet Headers Version 2.0 Received: from arwen.sterling.net ([199.108.225.50]) by = ALDER.keyknife.com with Microsoft SMTPSVC(5.0.2195.5329); Fri, 11 Jul 2003 08:14:22 -0700 Received: from mta4.gm44.com (mta4.gm44.com [216.176.55.20]) by arwen.sterling.net (8.11.6/8.11.6) with SMTP id h6BFELB26444 for <[redactd]>; Fri, 11 Jul 2003 08:14:22 -0700 Message-ID: <23031178.1057936373156.Kada.KadaSegment2-75@mta4.gm44.com> Date: Fri, 11 Jul 2003 11:12:53 -0400 (EDT) From: Val Hansen To: [redacted] Subject: Become a Listing Superstar -- Want a custom-built PC designed by gamers, for gamers? Visit http://kryptonite.pc-gamereview.com Tired of spam in your mailbox? Come to http://www.spamblocked.com