On 7/18/24 5:10 AM, Grant Taylor via users wrote:
On 7/17/24 18:04, Matija Nalis wrote:I.e. would you consider it to be significantly less likely to be spam if it contained "Dear Elizabeth," while being addressed to "mark@domain" instead of to "elizabeth@domain" ?I've seen quite a bit of spam that opens message bodies with: <salutation> <local part> Where <salutation> is "Dear" or some other greeting, often language specific and <local part> is the local part of the email address. Something like the following is probably a good indication that it's spam: --8<-- Dear ux37932, I've missed talking to you, what is your opinion of <URL>? Please check it out and let me know what you think. -->8-- If there was any doubt about the paragraph, the "ux37932" makes it quite evident to a human that the name in the salutation is not real. This is ESPECIALLY true when the name in the salutation is identical, byte for byte, including case, as the local part of the email address.
do you intend to have a rule like this one ?
header __TO_NAME To:name =~ /(?<TO_NAME>.*)/
body DEAR_NAME /Dear %{TO_NAME}/
Giovanni
OpenPGP_signature.asc
Description: OpenPGP digital signature
