Category Archives: escalation listing

Note to DMS, Inc.

Your use of Barracuda Networks blocked our initial reply to you. Since it contained about 20 domain names of your customers that are spamming our traps, we figured it might be because they, too, know your customers are spamming.

So we sent you a very brief note that only said Barracuda is blocking our reply to you, send another email address.

That, too, was blocked by Barracuda. If we can’t have a conversation with you, it’s OK. Things are going to remain as they were – your networks 8.224.216.0/24 and 8.39.1.0/24 are listed (as of May 2017 and March 2023, respectively) because of the spammers who continue to send to our unmanned spamtraps.

We tried to answer your message and at least let you know why we are listing your networks, but you have decided not to listen. If you later come to the conclusion that you do wish to have this conversation, after all, do please send us another email.

From an email address not “protected” by Barracuda Networks.

Don’t be an idiot, don’t lie to us

Owner of listed network to us: “Remove the listing, the network was only assigned to us many months after the listing was created!”

ScientificSpam: *look at WHOIS*… and find that the network was assigned to the requestor two years before the listing was created. In addition, the network assignment even has a name that indicates it having been assigned to the requestor six years before the listing was created, being CC-XXXXX-YYYYMMDD, where CC is the country code, XXXXX is the operator’s name, and there’s a number sequence that looks too much like an YYYY-MM-DD date stamp not to be one.

If you’re hoping to have networks delisted, better invent better reasons than “it wasn’t us” when the facts are trivial to check. Besides, it’s really great to lose your reputation with us this way. We won’t believe you even if you told us water is wet now 😀

ESCALATION LISTING: Benchmark Email and TargetMol

We’ve reported TargetMol to Benchmark Email several times on Twitter and in email ever since we first listed them two weeks ago. We haven’t received a response.

$ check targetmol.com
targetmol.com A 127.0.1.2 TXT "[TARGETMOL] Do you know TargetMol? -Yes, you are spammers, we know you now. [email protected] 20160420"

Continue reading

ScienceDomain International and/or IK Press

Something calling itself “ScienceDomain International Ltd”, apparently of Third Floor, 207 Regent Street, London, W1B 3HH, continues to turn up in spamtraps. They have existed as an UK company twice, but both registrations have been dissolved (Reg. No 07794635 – Dissolved on 14 January 2014; Reg. No 08988029 – Dissolved on 24 November 2015). Nonetheless, they process personal data without having ever registered with the Information Commissioner’s Office, which in itself is a criminal act in the United Kingdom.

Continue reading

Origene

We’ve been on the receiving end of spam from Origene since March 2015. At the time, we listed 124.127.105.206, a few domain names, and thought nothing more of it. We had the occasion to look at their spam a little more closely today. It’s all coming from a /15 (that’s 131,072 IP addresses) assigned to a research facility in China. The spamming domain name is smarttargetonline.net, registered to a person without an organization. Worth looking at a little more.

Continue reading