Received multiple emails from nore...@csl-registrar.com, with an intro
saying
"This email has been sent from '[spam-sender-address]' using the WHOIS
contact form for one of your registered domain names.
If you want to reply to this email, please address your answer directly
to: [spam-sender-address]"
The spam message was following the said intro.
The spammers likely used Joker's system to contact domain holders,
available at https://csl-registrar.com/contact/<domain>/owner, e.g.
https://csl-registrar.com/contact/joker.com/owner
Spams were received from mailout1.joker.csl.de (194.245.148.146), which
is the same host Joker uses for transactional notices. Luckily,
transactional notices seem to use nore...@joker.com, rather than
nore...@csl-registrar.com, which make it tempting to block
nore...@csl-registrar.com.
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
