Hi; I agree that Postmaster & abuse are there. Perhaps a test can be done like the HOP that one can specify how many identical e-Mails are allowed. I can totally understand 3 identical .. But in most cases for spam we are talking about in excess of 10 identical names.
The Kami101@... I also have seen and understand the difficulty in finding patterns, but as a first step, the same userid is difficult to justify when there is 10+. Anyhow - just a thought in this ever losing battle against SPAM! Kami -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Monday, July 15, 2002 1:27 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Watching CC's? >At times I notice that I personally receive SPAM where the CC field >contains my userid at every single domain out there in the world. > >For example the one I just received contained Kami@.... With a ton of >other domains. > >So a thought that perhaps could limit such ways of SPAMing could be to >check the CC & TO field and parse the e-Mails (if any) for duplicate >userID's with different domains. Naturally I can't imagine why someone >would send someone an e-mail to 5 different identical userID's at >different domains? > >Is this part of any tests? If not, could it be considered as a valid >test? The problem is that a lot of spammers will do something very similar to this, where the usernames are similar, but not always the same. So it might be "[EMAIL PROTECTED]", "[EMAIL PROTECTED]", ... While it might not be difficult to detect the identical usernames, it would be difficult to detect the similar ones. Also, it's common to receive E-mail sent to multiple postmaster@ or abuse@ accounts. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
