On 08/02/2010 16:56, Joseph Brennan wrote:
Here's some more data for whatever it's worth.
Our spam reports box since Jan 25 shows this style in definite spam:
From: "Get Cialis on www.wa93.com" <heirs...@imagina.es>
From: "Get Tamiflu on www.qa35.com" <inexpedie...@quantumtouch.nl>
From: "Cheap Tamiflu on www.nu36.com" <acetome...@detweedekeer.nl>
This style was in a message in Portuguese (?) that I can't read, but
it was reported as spam:
From: "www.vicentecorretor.com" <vicentecorreto...@bol.com.br>
This style was in a newsletter that appears to be legitimate although
it was reported as spam:
From: "News and alerts from www.MindFreedom.org"
<mindfreedom-n...@intenex.net>
Outlook might send mail where it creates a dummy personal name out of
the address, e.g.
From: 'u...@www.example.com' <u...@www.example.com>
While this is routine in To and Cc fields, I do not have a real
example of it in a From field, so I can't be sure it happens.
Space followed by "www." ?
header WWW_IN_FROM From =~ / www\./
--
Mike Cardwell : UK based IT Consultant, Perl developer, Linux admin
Cardwell IT Ltd. : UK Company - http://cardwellit.com/ #06920226
Technical Blog : Tech Blog - https://secure.grepular.com/
Spamalyser : Spam Tool - http://spamalyser.com/
