We’ve been on the receiving end of spam from Origene since March 2015. At the time, we listed 220.127.116.11, a few domain names, and thought nothing more of it. We had the occasion to look at their spam a little more closely today. It’s all coming from a /15 (that’s 131,072 IP addresses) assigned to a research facility in China. The spamming domain name is smarttargetonline.net, registered to a person without an organization. Worth looking at a little more.
Our first ever /16 listing goes to IMS Health, Inc. of Collegeville, PA.
On July 16, our spamtraps started getting solicitations about iZSearch.com – a new private way to search the Web. We figured this had to have been a crank, but it turns out it wasn’t. The mail is coming from 18.104.22.168 update 9/17: and from 22.214.171.124.
On or about June 18, somebody had the bright idea of starting to spam addresses found in the PubMed for joining the PhDTree.org website. The spam is coming from the self-service ESP arm of RackSpace, Mailgun.
We’ve been watching Aviva Systems Biology (avivasb.com, avivasysbio.com) spam for longer than the SciSpam DNSBL has even existed. Up until recently, they were doing so exclusively from their own network, but their recent choice to hire what we think ought to be a whitehat ESP to do this for them prompted us to blog about it.
Subject: Your [YEAR] Publication in Journal of [BLAH] / [INSTITUTION]
Docphin is a research platform created by a team of doctors and researchers to help you manage and keep up with medical research.
Just another ResearchGate – including the tendency to spam. SendGrid will throw them out in a second; we expect to see more spam from wherever they end up next, and we will list it all.