On Wed, 11 Jun 2014, Kevin Golding wrote:
On Wed, 11 Jun 2014 16:44:28 +0100, John Hardin <[email protected]> wrote:
I just came across a PayPal phish that has a potentially useful indicator:
the domain referenced in the URI has no MX record defined, so it cannot
accept email.
MX records aren't required for mail deliverability. Unusual these days, but
not required.
http://tools.ietf.org/html/rfc5321#section-5.1
Well, yes, but having a "stealth" mail server for your domain is also
kinda suspicious.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
[email protected] FALaholic #11174 pgpk -a [email protected]
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
No representation without taxation!
-----------------------------------------------------------------------
741 days since the first successful private support mission to ISS (SpaceX)
