On Wed, 11 Jun 2014, Joe Quinn wrote:
On 6/11/2014 11:44 AM, John Hardin wrote:
Folks:
I just came across a PayPal phish that has a potentially useful indicator:
the domain referenced in the URI has no MX record defined, so it cannot
accept email.
Would it be worth another DNS query in URIBL to check whether the domain
has an MX record, and add a point if not?
That's a pretty funny mistake for a spammer to make.
Actually it was a phishing site hosting a webform/CGI, so there's really
no need for email contact.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
[email protected] FALaholic #11174 pgpk -a [email protected]
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
No representation without taxation!
-----------------------------------------------------------------------
741 days since the first successful private support mission to ISS (SpaceX)
