I'm the administrator of this site. We're working on the Software Package Data Exchange (SPDX specification).
There have been some reports that the spdx.org domain used to be mentioned in spam in 2009. We acquired the domain in April 2010 and we will definitely not be involved in any spamming activities.