On 2022-04-29 at 21:29 +0800, wilson wrote:
> h-email.net seems like a honeypot service who gets the expired
> domains
> and setup the MX for collecting spam messages.
>
> https://securitytrails.com/list/mx/mail.h-email.net
The nameservers {ns1,ns2}.parkingcrew.net return (5, mail.h-email.net)
to all MX queries:
$ dig @ns1.parkingcrew.net google.com -t mx
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26094
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available
;; QUESTION SECTION:
;google.com. IN MX
;; ANSWER SECTION:
google.com. 3600 IN MX 5 mail.h-email.net.
;; Query time: 58 msec
;; SERVER: 13.248.158.159#53(13.248.158.159)
;; MSG SIZE rcvd: 70
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
