The domain name of the Technical University of Sofia, Bulgaria, is now listed. The following spam appeared on July 28, 2017.
From: EECS 2017 <[email protected]> To: x Subject: European Conference on Electrical Engineering and Computer Science Bern, Switzerland, November 17-19, 2017
The spam was sent from an IP address we have listed as a Scientific Spammer more than a year ago.
Received: from astra4050.startdedicated.net (astra4050.startdedicated.net
[62.138.2.54])
So let’s see…
$ host -t txt 54.2.138.62.bl.scientificspam.net 54.2.138.62.bl.scientificspam.net descriptive text "Applied Physics, System Science and Computers. Dubrovnik, Croatia, September 28-30, 2016 [email protected] 20160712"
Also, we had earlier listed the domain names eecs-conf.org and smartupvisuals.com for the same reason. The latter is registered to an individual in the UK with a Lithuanian surname:
Domain Name: SMARTUPVISUALS.COM Registry Domain ID: 1834689895_DOMAIN_COM-VRSN Registrar WHOIS Server: whois.godaddy.com Registrar URL: http://www.godaddy.com Update Date: 2016-10-16T09:34:31Z Creation Date: 2013-11-08T15:13:59Z Registrar Registration Expiration Date: 2017-11-08T15:13:59Z Registrar: GoDaddy.com, LLC Registrar IANA ID: 146 Registrar Abuse Contact Email: [email protected] Registrar Abuse Contact Phone: +1.4806242505 Domain Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited Domain Status: clientUpdateProhibited http://www.icann.org/epp#clientUpdateProhibited Domain Status: clientRenewProhibited http://www.icann.org/epp#clientRenewProhibited Domain Status: clientDeleteProhibited http://www.icann.org/epp#clientDeleteProhibited Registry Registrant ID: Registrant Name: Karina Sinkeviciute Registrant Organization: Registrant Street: 71 Somerford Grove Registrant City: London Registrant State/Province: Registrant Postal Code: N16 7TN Registrant Country: UK Registrant Phone: +44.7402081332 Registrant Phone Ext: Registrant Fax: Registrant Fax Ext: Registrant Email: [email protected]
The latter is registered directly to the University, with what looks like a personal Gmail address as a contact.
[whois.publicinterestregistry.net] Domain Name: EECS-CONF.ORG Registry Domain ID: D402200000000733244-LROR Registrar WHOIS Server: Registrar URL: http://www.wildwestdomains.com Updated Date: 2017-01-26T03:46:12Z Creation Date: 2016-11-26T16:05:46Z Registry Expiry Date: 2017-11-26T16:05:46Z ... Registrant Name: EECS EECS-CONF Registrant Organization: Conference Registrant Street: Technical University of Sofia Registrant City: Sofia Registrant State/Province: Sofia Registrant Postal Code: 1000 Registrant Country: BG Registrant Phone: +359.877475771 Registrant Phone Ext: Registrant Fax: Registrant Fax Ext: Registrant Email: [email protected]
Googling Mastorakis, Sofia, Bulgaria together yields this result at the top of the list. wseas.org has been listed on our list since May 2015.
$ host -t txt wseas.org.rhsbl.scientificspam.net wseas.org.rhsbl.scientificspam.net descriptive text "[WOPU] Dear Professor X, [email protected] 20150503"