Best way of getting NEW email addresses harvested?

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Not quite a Newb Joined: 11 Aug 2004 Posts: 72

Is there a method recommended for getting email addresses harvested other than by the old guestbook route?

I've tried several guestbooks, but go no results.

Thanks

Posted: Tue Feb 13, 2007 9:48 am

http://forum.419eater.com/forum/viewtopic.php?t=100952

Sign up and drown in scam mails - I have - I believe the first round begins this Friday.

Not quite a Newb Joined: 11 Aug 2004 Posts: 72

Thanks

Posted: Tue Feb 13, 2007 10:22 am

If you can't wait until Friday there is always the Surplus Letters Forum....

http://forum.419eater.com/forum/viewforum.php?f=18

Just take your pick.

Not quite a Newb Joined: 13 Feb 2007 Posts: 24

Why not bait from a new account without being contacted?

Do they keep track of the emails they send?

I'm new here, so if that's been covered before...

I work for an email provider, and we're constantly fighting these people as they sign up for free and paid (using stolen CC information) accounts.

Thanks to some filtering and clever use of SA, we can limit the number of scams that get out, but... that leaves us with a nice archive of their scam emails (as soon as they are detected by the filters, their accounts are closed down so their email is prerserved) and that means we have a long list of scammer email addresses and IP addresses.

I probably have 300 or more just sitting here.

Many times, these people don't realize their email has been filtered (because of the way the filters work) they just get closed down, thinking someone must have turned them in.

So, I'm considering starting a baiting hobby using these people that abuse our service as targets...

/bighouse

Posted: Tue Feb 13, 2007 1:59 pm

Interesting Bighouse ... this is a genuine question and not meant to be anything else.

What do your filters look out for to differentiate spam from scam ...I know that certain Bayesian filters (scoring) are better at spam than scam.

Just interested

Baiting Guru Joined: 04 Jan 2006 Posts: 3193

They don't keep track of the initial mails they send out. Just reply from an anonymous account with a one line response and if you're really keen then make up a quote of his original email.

Not quite a Newb Joined: 13 Feb 2007 Posts: 24

Mod edit: full quote removed - Chester

Sorry this is long, and if it's off topic too much:

No beysian at all, straight rule sets and keyword filters. No auto-learning either, basically everything we don't need is turned off, we're focusing on just outbound email, and only a subset of it, and only applying a few rules to those messages.

I've found that SA is really good at identifying 419er and other scams, work from home "be our agent", things like that. If something slips through. we go back to SA and tweak the rules directly to accomodate the change in flavor. But, since we're talking outbound scam emails, it's pretty easy to see a pattern in their sending habits and tune our approach to blocking it accordingly.

400 emails, all super-high SA score, username of an infamous scam alias, for example. Or from a previously identified scammer IP address.

When SA discovers something and marks it a certain value, (or body filters are triggered) the MTA simply holds the email in the held queue for future dispensation. If you reach a threshold for helds, odds are (100% success rate here) you are a scammer.

Or, if they do really low volume scamming (which doesn't pay), the counter ticks ever upwards until they reach the threshold and are shut off (and since their scams are held, you don't see it in your inbox).

Regular old spammers just don't sign up to use our services, it's way cheaper and easier (less trouble too) for them to use zombie PCs or whatever and since all our customers have to authenticate to send, the window of opportunity for a zombie PC to send email via our service is really tight.

We've had that problem, it's just really tiny and our filters aren't really tuned to catch it.

Which gets me to thinking... they don't know their email isn't flowing until a few days later when they try to log back in and find they are locked out, what's to stop me from feeding the baiter community (or the ISPs) with their new email addresses or their forwarder email addresses they use when they sign up? sometimes they also use the forwarding service we provide (like an always BCC type of thing for incomgin email), I should be alerting those ISPs as well...[/i]

Posted: Tue Feb 13, 2007 8:42 pm

Bighouse, are you telling me that you have a way to make scammers ONLY get baiter emails into their inboxes? If that's possible, I think you have to make it happen.

Scammers are probably WAY more likely to do whatever a baiter tells them if the baiters are the only ones responding to their emails.

Not quite a Newb Joined: 13 Feb 2007 Posts: 24

No need to quote the above post. - drwho

But yes, it's true, I could put filters on their inbound email, filters they don't see or control, sure. Take but a moment and unless they test, they would never know.

I could rig it so that their secondary email address gets posted somewhere, or filter inbound email so only certain addresses come in, or that all email is bcc:ed somewhere else, yup, I guess so, and more importantly, the customer service and operations managers would find it fall down funny.

The catch is that I guess we can't really be the originating address, as most of them use a wasted account for the initial email, and a backup address for the real communications, eh?

But, if some scammer uses our service as that 2ndary email address, then sure, game on. I could post watcher scripts on the web logs to see when they login, you name it.

Posted: Wed Feb 14, 2007 6:47 am

lads-a-plenty

Great resource!

www.urgentmessage.org

Posted: Wed Feb 14, 2007 8:30 am

Cyberspook,
Diversion is always a good avenue. When I tell them that I run a wealthy company in the [fill-in-the-blank] industry, I always make sure to tell them that they don't quite meet up to 'our needs'.

But I always remind them that if they have 'associates' interested in getting wealthy in MY industry [fill-in-the-industry] the fish start biting on the line like Oprah on a Christmas ham. I actually get so many unsolicited replies that I have to pick and choose, but I've already got one foot in the door because they 'heard' about my industry offer to make millions. This is perfect, allows me to take the basic theme of dead-father/trunks of cash into my own personal bait/their personal trip thru hell-- and them to forget about what the original scam issue was/is. Works like a charm!

cheerz, jervis tetch--mad hatter--The Hat is always thinking

Posted: Wed Feb 14, 2007 12:19 pm

Look five threads up from this one, I posted a link,
cvs format, all you want

cheers

edit, wrong,
look for create a list of emails thread

Best way of getting NEW email addresses harvested?	View next topic View previous topic