The Email Signal

Phone numbers can be generic helpdesks. Email addresses are more specific — they imply an individual or team that receives, reads, and acts (or doesn't). The 3,873 shared email links are higher-signal than the phone clusters:

The High-Spread Anomalies

tech@cloudinnovation.org — 15 ASNs

One email address responsible for abuse across fifteen autonomous systems. This is the Seychelles entity documented in 053B and 057F. The email exists because RDAP requires one. Its purpose is to satisfy the field requirement.

15 ASNs means Cloud Innovation purchases or leases IP space from at least 15 different upstream providers (Yisu Cloud, UCloud, CNSERVERS, Scloud, NEEVAI, and others). Each provider's abuse system routes complaints to this single email. The owner of this inbox — if anyone checks it — receives complaints from fifteen different networks about traffic they're intentionally generating.

hm-changed@vnnic.vn — 14 ASNs

"hm-changed" — hostmaster changed. This isn't a real contact. It's a Vietnamese NIC system flag indicating the record was modified. Yet 29 malicious IPs across 14 ASNs list it as their abuse email. Reports sent here arrive at a system mailbox that exists to document record changes, not to receive abuse complaints.

The organizations behind these IPs: Dang Duc Duy, Do Minh Tam, Ecofly — small Vietnamese hosting operators whose RDAP records were updated by the Vietnamese NIC (VNNIC) at some point, leaving the system marker as the contact. Nobody fixed it. Nobody needed to — no audit checks whether abuse contacts actually work.

jsipmanager@163.com — 3 ASNs

A personal email address on China's 163.com (NetEase) service. Not a corporate domain. Not an organizational address. Someone used their personal email for IP management across three Chinese ASNs (ChinaNet Jiangsu, Chinanet Sichuan). This is a single person managing IP allocations as a side business — or a reseller operating informally within the Chinese internet's registration framework.

The Individual vs. Institutional

The email clusters reveal a spectrum from institutional (anti-spam@chinatelecom.cn — government-backed ISP with formal processes) to individual (jsipmanager@163.com — one person with a 163 mailbox):

The irony: the most responsive category (individual operators like fdias@frantech.ca) is often labeled "bulletproof-tolerant." Francisco Dias actually reads and responds to abuse reports — he just gives customers time to respond before terminating. The shell entities and system markers never respond at all, yet face less public criticism because they're less visible.