Dead domain (sort of): solarmora.com


What the heck is solarmora.com? Have you seen this domain show up in your email lists or customer database? I recently noticed this domain showing up in the DMARC reporting configuration for more than 300 different domains.

Is it valid for email? Nope.

Was it ever valid for email? I don't think so. It generally only shows up in various Google support documents explaining how to configure different things for your domain, like configuring email accounts in Google Workspace, configuring SPF, DMARC, and so on.

My conclusion: I think this is an example domain owned by Google, used instead of "example.com" in Google's domain-related documentation. I think a bunch of non-technically-savvy folks blindly copied and pasted this domain into their DMARC records, because it shows up in at least one DMARC record configuration example (that I will not link to here). Oops.

And as far as marketing senders are confirmed, because this domain has no MX or A records, it's safe to block any attempts to send email to it.

As I mentioned above, this domain appears in more than 300 different DMARC records for domains, found when scanning the top ten million domains. These DMARC records are malformed; since there is no valid way to send mail to any address at solarmora.com, you can't use solarmora.com in a reporting address (RUA or RUF) in your DMARC record. DMARC record checkers, you might want to watch for and warn users, if you find this domain embedded in any DMARC record checked.

Post a Comment

Comments