I was looking at my graphdefang stats and noticed that most of the spam is going to recipients with no domain name. For instance, "jeff" is my top spam recipient today. Does ratware strip domains when submitting spam? Can this be used as a spam sign and somehow fed to SA? What legitimate MTA's do this?