Folks:
I just came across a PayPal phish that has a potentially useful indicator:
the domain referenced in the URI has no MX record defined, so it cannot
accept email.
Would it be worth another DNS query in URIBL to check whether the domain
has an MX record, and add a point if not?
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
[email protected] FALaholic #11174 pgpk -a [email protected]
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Maxim II: A Sergeant in motion outranks a Lieutenant who doesn't
know what's going on.
Maxim III: An ordnance technician at a dead run outranks everybody.
-----------------------------------------------------------------------
741 days since the first successful private support mission to ISS (SpaceX)
