SCIRP is listed anew, on 67.210.119.248, after having hit our traps (again).
Received: from SCIRPNEWS.home (unknown [67.210.119.248]) by x (Postfix) with ESMTP id x for <x>; Mon, 22 Sep 2014 hh:mm:ss +0000 (GMT) Received: from WIN-A9S0SUBJN6U ([180.153.104.122]) by home with MailEnable ESMTP; Sun, 21 Sep 2014 hh:mm:ss -0700 Date: Mon, 22 Sep 2014 hh:mm:ss +0800 (CST) From: Pharmacology & Pharmacy <[email protected]> Reply-To: [email protected] To: x Message-ID: <x.x.x.JavaMail.fjj@WIN-A9S0SUBJN6U> Subject: OA Journal "Pharmacology & Pharmacy" – A Platform to Present Your Work to the World!
Domain registrations (anonymized, of course, as any decent spammer would)
[whois.publicinterestregistry.net] Domain Name:SCIRP.ORG Domain ID: D152375048-LROR Creation Date: 2008-04-12T04:32:12Z Updated Date: 2014-05-16T12:24:58Z Registry Expiry Date: 2017-04-12T04:32:12Z Sponsoring Registrar:GoDaddy.com, LLC (R91-LROR) Sponsoring Registrar IANA ID: 146 WHOIS Server: Referral URL: Domain Status: clientDeleteProhibited Domain Status: clientRenewProhibited Domain Status: clientTransferProhibited Domain Status: clientUpdateProhibited Registrant ID:CR146552795 Registrant Name:Registration Private Registrant Organization:Domains By Proxy, LLC ... Name Server:NS3.P13.DYNECT.NET Name Server:NS1.P13.DYNECT.NET Name Server:NS2.P13.DYNECT.NET Name Server:NS4.P13.DYNECT.NET
The other domain is far less anonymized, but none the more convincing.
[whois.publicinterestregistry.net] Domain Name:SCIRPNEWS.ORG Domain ID: D163047896-LROR Creation Date: 2011-08-15T10:20:04Z Updated Date: 2014-05-09T02:40:16Z Registry Expiry Date: 2015-08-15T10:20:04Z Sponsoring Registrar:Hichina Zhicheng Technology Limited (R1373-LROR) Sponsoring Registrar IANA ID: 420 WHOIS Server: Referral URL: Domain Status: ok Registrant ID:hc123489760-cn Registrant Name:hongzheng wu Registrant Organization:wuhan haixunkejihuiwuyouxiangongsi Registrant Street: wuhanshiwuchangquluyinghuadaxia1102shi Registrant City:hubei Registrant State/Province:Beijing Registrant Postal Code:430000 Registrant Country:CN Registrant Phone:+86.15927028079 Registrant Phone Ext: Registrant Fax: +86.15927028079 Registrant Fax Ext: Registrant Email:[email protected] ... Name Server:DNS1.JETSUMINFORMATION.CN Name Server:DNS2.JETSUMINFORMATION.CN
I have a number of samples which came in today from a scattering of IPs, virtually all originating in VPLSNET space (one came from hong kong)
The website is in VPLSNET space known to be a snowshoe hosting zone.