Spamcop should be parsing the return address as well

[kogi]

Increasing new spam.

Sent from hotmail. Reply to yahoo

We should be getting them to close the reply to address as well

Received: from bay0-omc2-s4.bay0.hotmail.com ([65.54.246.140]:63340)

by mail.qent.com.au with [XMail 1.24 ESMTP Server]

id <S64BA> for <email[at]qent.com.au> from <ddaannkong43[at]hotmail.com>;

Sun, 1 Jul 2007 20:22:43 +1000

Received: from BLU110-W1 ([10.6.61.36]) by bay0-omc2-s4.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668);

Sun, 1 Jul 2007 03:10:21 -0700

Message-ID: <BLU110-W19E7E409ECB9FBA060A70C50E0[at]phx.gbl>

Content-Type: multipart/alternative;

boundary="_bf89dfe3-ac44-4610-934d-77c7abf0914f_"

X-Originating-IP: [196.207.254.19]

Reply-To: <ddaannkong[at]yahoo.com>

From: DANIEL MAN <ddaannkong43[at]hotmail.com>

[g4mby]

Increasing new spam.

Sent from hotmail. Reply to yahoo

We should be getting them to close the reply to address as well

Possibly, but that could be fake as well as the 'from' address especially if a spammer is relying on a link to a web-site in the body of the spam to sell whatever is on offer. Might sending abuse reports to the hosts of reply addresses create too many unwanted reports?

I often send an abuse report to the likes of Hotmail and Yahoo asking them to consider closing the account if it is being used as a reply address for spam where there is no web-site quoted in the body just in case it does refer to a real account. You have a point but I'm not sure how useful it would be.