Hi Assassins

I noticed a increase of scam mails expecting the victim to reply and
disclose personal data, which originate from daily changing domain
names and sending ip addresses (probably a botnet).

To name those received this week:

gutter-install-info.site
sd-st.com
auto-repairhelp.xyz

common to those domains is the MX used:

mx1.privateemail.com
mx2.privateemail.com

operated by our good spam friend namecheap.

Is there a way or plugin which would allow to score based on the MX of
the sending domain?

I contacted namecheap about their system being abused - but as usual I
got stuck at the 'please log in to your account to open a case - oh, you
are not a customer - sorry then we can't help'.

-- 
Mit freundlichen Grüssen

-Benoît Panizzon- @ HomeOffice und normal erreichbar
-- 
I m p r o W a r e   A G    -    Leiter Commerce Kunden
______________________________________________________

Zurlindenstrasse 29             Tel  +41 61 826 93 00
CH-4133 Pratteln                Fax  +41 61 826 93 01
Schweiz                         Web  http://www.imp.ch
______________________________________________________

Reply via email to