This was also a much used trick: http://news.ycombinator.com@1249739877
Although most browsers have implemented a warning of some sort it can still hoax spam-filters that use a regexp pattern which doesn't account for this type of behaviour.
The part before the @ part is supposed to be the username for HTTP authentication. The complete format is http://username:password@site.com but the password is optional.
