Received multiple emails from [email protected], with an intro
saying
"This email has been sent from '[spam-sender-address]' using the WHOIS
contact form for one of your registered domain names.
If you want to reply to this email, please address your answer directly
to: [spam-sender-address]"
The spam message was following the said intro.
The spammers likely used Joker's system to contact domain holders,
available at https://csl-registrar.com/contact/<domain>/owner, e.g.
https://csl-registrar.com/contact/joker.com/owner
Spams were received from mailout1.joker.csl.de (194.245.148.146), which
is the same host Joker uses for transactional notices. Luckily,
transactional notices seem to use [email protected], rather than
[email protected], which make it tempting to block
[email protected].
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
