Based on recent spam, it is becoming clear that ScienceDomain International Ltd, IK Press and ResearchPromotion.com are in fact one and the same.
- 18.104.22.168/28 is listed on the Spamhaus Block List – SBL
- 22.214.171.124/32 is listed on the Spamhaus Block List – SBL
- 126.96.36.199/32 is listed on the Spamhaus Block List – SBL
- smiconferences.co.uk is listed in the DBL
Scientific Spam has had an IP in 188.8.131.52/28 listed since 20150710, and the rest since December 2015.
Endurance (webhostbox.net) did the right thing and suspended the domain names and all services for a variety of Annex Publishers domain names and websites so that IP addresses that had sent Annex Publishers spam could be delisted.
A while back, somebody who is not related to us noticed HotCampus.
A few days later, it arrived at a participating university. Professor figures it is spam, because he/she/it has never heard of HotCampus or signed up. Given that HotCampus only started operations roughly two months ago, it’s not altogether surprising.
Something calling itself “ScienceDomain International Ltd”, apparently of Third Floor, 207 Regent Street, London, W1B 3HH, continues to turn up in spamtraps. They have existed as an UK company twice, but both registrations have been dissolved (Reg. No 07794635 – Dissolved on 14 January 2014; Reg. No 08988029 – Dissolved on 24 November 2015). Nonetheless, they process personal data without having ever registered with the Information Commissioner’s Office, which in itself is a criminal act in the United Kingdom.
Somebody else beat us to blogging about it, with far more effect than our puny little efforts.
This spammer has multiple IPs in 184.108.40.206/24. In addition, they rent services under a variety of names from Salesforce Marketing Cloud (ExactTarget), and have their own dedicated block from an Irish provider.
We’ve been on the receiving end of spam from Origene since March 2015. At the time, we listed 220.127.116.11, a few domain names, and thought nothing more of it. We had the occasion to look at their spam a little more closely today. It’s all coming from a /15 (that’s 131,072 IP addresses) assigned to a research facility in China. The spamming domain name is smarttargetonline.net, registered to a person without an organization. Worth looking at a little more.
Our first ever /16 listing goes to IMS Health, Inc. of Collegeville, PA.
On July 16, our spamtraps started getting solicitations about iZSearch.com – a new private way to search the Web. We figured this had to have been a crank, but it turns out it wasn’t. The mail is coming from 18.104.22.168 update 9/17: and from 22.214.171.124.