Is there any way to test for several addresses in the TO: line that are similar?  For 
instance the following addresses were in the TO: line of a message I received 
recently.  None of the addresses exist other than mine.

<[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, 
<[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, 
<[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>  

If there is no way to check for something like this maybe it could be an idea for a 
future test.  You could check for there being more that a certain number of addresses 
in the TO: field that start with the same letter, or something like that.  I don't 
think I have ever received a legitimate message like that.  It may have a few false 
positives from newsletters, but would probably be good in a weighting system. 
 
Daniel

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to