On 31/08/2017 15:20, Benoit Panizzon wrote:
Now I found one thing in common to those spam mails. All of them point
to MX Records from:
eforward1.registrar-servers.com.
to
eforward5.registrar-servers.com.
run by a registrar service. Interestingly not the same used to register
the domains in question. Does anyone know, if those MX are used for non
spam? Or could this be taken as spam criteria?
I expect that those MX servers are used when the customer has told the
registrar (Namecheap?) to forward mail for the domain on to a different
email address. In which case, they'll be used for a lot of legitimate
domains.
If you google for "eforward1.registrar-servers.com" (including the
quotes) you'll see lots of people have those set as their MX records.
Now, if the domain isn't registered with the same registrar, that might
not be legitimate, but they may be related registrars, who are sharing
services.
_______________________________________________
mailop mailing list
[email protected]
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
