When one of our customers emails someone, we whitelist the recipient address so that the return email won't be blocked [1].
Some users foolishly whitelist ad...@paypal.com, so that phishing emails go right through. Where can I find a list of "frequently spoofed addresses" (or domains)? We can then add the rule: "never whitelist emails to these addresses/domains" (and take the risk that the recipient's reply will be blocked). [1] We realize this is imperfect: eg, the recipient might reply from a different address. -- We're just a Bunch Of Regular Guys, a collective group that's trying to understand and assimilate technology. We feel that resistance to new ideas and technology is unwise and ultimately futile.