On 31 August 2017 at 16:20, Benoit Panizzon <[email protected]> wrote: > Hello > > Since a couple of days we get a lot of spam from randomly changing > domains under gtld bid. faith. website. loan. to name a couple. > > Now I found one thing in common to those spam mails. All of them point > to MX Records from: > > eforward1.registrar-servers.com. > to > eforward5.registrar-servers.com.
From my data I'd say that those MX are MX for PARKED domains at namecheap (I logged more than 1000 domains using that MX and randomly checking some of them, they are parked domains). I guess it can be safe to drop incoming email from a parked domain. Stefano -- Stefano Bagnara Apache James/jDKIM/jSPF VOXmail/Mosaico.io/VoidLabs > run by a registrar service. Interestingly not the same used to register > the domains in question. Does anyone know, if those MX are used for non > spam? Or could this be taken as spam criteria? > > -Benoît Panizzon- _______________________________________________ mailop mailing list [email protected] https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
