On Fri, 03 Oct 2014 23:16:35 +0200 Axb <axb.li...@gmail.com> wrote: > interesting... > welcome.aexp.com. 14400 IN TXT "v=... etc."
Yes, I know all that... none of these spams is actually getting through. I just thought the many X-* headers might be a new pattern. Also, in this particular case, the Return-Path: <americanexpr...@welcome.aexp.com> header was fake... it was put there by the sender. The actual envelope sender was completely different: It was <41324...@mail.com>. So it occurs to me that if a mail comes in with a Return-Path: header that does not match the envelope sender, that's another very suspicious sign. Regards, David.
