Score based on MX of evelope / from domain?

Benoît Panizzon <[email protected]>
Newsgroups gmane.mail.spam.spamassassin.general
Organization ImproWare AG
Message-ID <[email protected]>
Hi Assassins

I noticed a increase of scam mails expecting the victim to reply and
disclose personal data, which originate from daily changing domain
names and sending ip addresses (probably a botnet).

To name those received this week:

gutter-install-info.site
sd-st.com
auto-repairhelp.xyz

common to those domains is the MX used:

mx1.privateemail.com
mx2.privateemail.com

operated by our good spam friend namecheap.

Is there a way or plugin which would allow to score based on the MX of
the sending domain?

I contacted namecheap about their system being abused - but as usual I
got stuck at the 'please log in to your account to open a case - oh, you
are not a customer - sorry then we can't help'.

-- 
Mit freundlichen Grüssen

-Benoît Panizzon- @ HomeOffice und normal erreichbar
-- 
I m p r o W a r e   A G    -    Leiter Commerce Kunden
______________________________________________________

Zurlindenstrasse 29             Tel  +41 61 826 93 00
CH-4133 Pratteln                Fax  +41 61 826 93 01
Schweiz                         Web  http://www.imp.ch
______________________________________________________
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.