Yes, xploit.ml can receive emails.
No, xploit.ml is a throwaway domain and should be blocked.
You can use MailCheck's free API to automatically block throwaway emails. Read our documentation to get started. No registration required.
A record
173.249.14.189
MX records
generator.email
51.38.115.65
xploit.ml
173.249.14.189