Detecting spam from a bulk registered e-mail account

A processor readable storage medium that includes data and instructions, wherein the execution of the instructions on a computing device by enabling actions, comprising:

• receiving a message inbound to a message destination account;
• parsing the inbound message to identify a plurality of message characteristics, including at least a message username and a message account associated with the inbound message;
• analyzing the plurality of message characteristics to determine a plurality of probability values;
• assigning a probability score to the inbound message based in part on the determined probability values and previously determined data and probability scores for a plurality of other message accounts;
• adjusting the probability score for the inbound message based in part on contributing factors indicating whether the message account related to the inbound message was previously used for abusive or fraudulent purposes;
• classifying the inbound message and the related message account as abusive based on the assigned probability score being at or above a determined threshold value;
• and
• if the inbound message is classified as abusive, inhibiting delivery of the inbound message;
• otherwise, enabling the inbound message to be delivered to the message destination account.

A system for enabling a communications over a network, comprising:

• a data storage device having stored thereon, a plurality of abusive message account data from at least a plurality of message account registrations;
• and
• one or more processors configured to employ data from the data storage device to perform actions, including:
• receiving a message inbound to a message destination account;
• parsing the inbound message to identify a plurality of message characteristics, including at least a message account, message username, and message account registration information associated with the inbound message;
• analyzing the plurality of message characteristics to determine a plurality of probability values;
• assigning a probability score to the inbound message based in part on the determined probability values and previously determined data and probability scores for a plurality of other message accounts;
• classifying the inbound message as abusive based on the assigned probability score being at or above a determined threshold value;
• and
• if the inbound message is classified as abusive, inhibiting delivery of the inbound message;
• otherwise, enabling the inbound message to be delivered to the message destination account.