Some jackass is sending spam to several Brazilian TLDs (like gov.br) using a spoofed mikeyp.com reply-to. This seems to happen to me a couple of times a year, and those of you with your own domain names have probably had a similar experience. The result is that I get a pile of bounced emails to addresses that reject the spam. This tends happens in a flurry, with garbage e-mail headers and URL's pointing to 'anonymous' domain registrations. It's all over in a day or two, as I suppose the spammers quickly move on to some other unsuspecting domain holder to avoid being tracked. If I could get a real brick and mortar address, I believe I can legally sue these people.
Each time this happens, the spammers get more clever. This time, they are using dictionary attack scheme to forge a variety of mikeyp.com reply-to addresses. Luckily, this makes the bounces easy to filter, but I wonder how many servers are erroneously blocking mikeyp.com now?
For fuck's sake, when are we going to replace our ancient e-mail protocols with something that prevents this? And why does the IANA make it so easy for spammers to hide behind anonymity?
