E-mail / HTTP proxy server for premium members

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Thu Apr 01, 2010 9:31 am

With some joy and rather limited pride (as it's not exactly rocket science) I announce the availability of a proxy server for the totally freaking parano... more security-aware users.

Anonymizing HTTP proxy
Use the proxy to hide your IP address with Yahoo accounts and other web services.

Website content and e-mail account at dw-global.net
dw-global.net is a faceless company that does everything. If it helps further your bait I can publish your content on their website and give you an e-mail address @dw-global.net.

Premium members may PM me any time with the username/password combo of their choice. Please indicate whether you need proxy access, an e-mail account, or both.

(It goes without saying that legally or morally questionable use of the server will be reported to the authorities.
Not that I'd expect anybody here to do anything nasty.)

Would there be any interest in a service that lets you send e-mails where the text is an embedded image, so that the recipient will have to download the image (and let us log their IP) in order to see the e-mail's content?

Posted: Thu Apr 01, 2010 9:35 am

Thanks for offering this service!

There might very well be interest in a service that lets us send email as images for IP-logging purposes.

Posted: Thu Apr 01, 2010 11:08 am

Bankster wrote:

Quote:

Would there be any interest in a service that lets you send e-mails where the text is an embedded image, so that the recipient will have to download the image (and let us log their IP) in order to see the e-mail's content?

Given the number of lads who use Gmail yes please, just tell us how to avoid the same trap opurselves! Rolling Eyes

Posted: Sat Apr 03, 2010 7:39 am

^^Ahah, well, it's relatively easy. You simply refrain from clicking on the Download images link in the webmail interface. The only downside would be that you can't see the image that contains the message then.

If enough people express interest in such a tool, I shall start building one on Monday.

(Also, thanks a bunch to MoutonBlanc for patiently beta-testing the e-mail thinggie and reporting an important bug! Very Happy

)

Baiting Guru Joined: 19 Apr 2007 Posts: 3123

Ah, nice work Bankster! Thanks for offering. Smile

This should convince a few more people to donate to a good cause. Very Happy

Posted: Sat Apr 03, 2010 10:04 am

^^^ Is rocket science too! Bankster you know my talents do not lie in IT! Shocked

Posted: Sat Apr 03, 2010 10:22 am

I can now bait from the comfort of my e-mail software *and* feel warm, safe and cosy.

Why would I do that ?

https://addons.mozilla.org/fr/thunderbird/addon/640 is one of the reasons.

Posted: Sat Apr 03, 2010 10:26 am

Quote:

This should convince a few more people to donate to a good cause.

Here's to hoping it does, though I'd be slightly surprised. Smile

Now, if those mail/proxy accounts came with nude pics of some of the Eater girls...

Quote:

Bankster you know my talents do not lie in IT!

...But you're certainly gifted in other areas, my dear!

Posted: Sat Apr 03, 2010 10:40 am

^^ Yes I'll be round for a massage later. Laughing

Posted: Sat Apr 03, 2010 1:27 pm

In the meantime...

http://www.myiptest.com/staticpages/index.php/how-about-you

This is a pretty handy casual IP grabber if you have to send your lad a link - for instance
http://www.myiptest.com/img.php?id=69aeil461p&rdr=members.419eater.com/~manbiteslion/Hundredtrilliondollars001.jpg
is an image hosted here at eater, but the id=xxxxxxx bit means your IP is now logged over at
http://www.myiptest.com/staticpages/index.php/how-about-you?id=69aeil461p&show_ip=1

Great idea for a service Bankster, perhaps for your linked email image you could dress it up as a security facility (for sending MTCN's) so the lad can have a couple of 'unsecure' emails to bait the hook before the secure one?

Posted: Sat Apr 03, 2010 2:17 pm

^^do you mean you can use that site to grab the IP of a Gmail using lad?

Where is his IP sent to?

I clicked on your link. So does that mean you have my IP? Starts with 207.

Posted: Sat Apr 03, 2010 2:37 pm

207.195.244.71

OrgName: Global Tac, LLC
OrgID: GTL-30
Address: 7454 Lancaster Pike #500
City: Hockessin
StateProv: DE
PostalCode: 19707
Country: US

Is that the one?

You can use that tool to send any link to anyone and see their IP here including your 207.x.x.x

Of course in normal use, you don't tell anyone the link to see the resultant IP's Wink

Posted: Sat Apr 03, 2010 3:15 pm

manbiteslion very impressive clapping

can you make it idiot proof/ like what link you send to lad, that looks irresistable

and then one logs onto

http://www.myiptest.com/staticpages/index.php/how-about-you?id=69aeil461p&show_ip=1

to get the location?

There seem to be more gmail lads thesesa days and yes they often give away theri location in the first email or the email text but it would be good to know how to lay them bare to baiters. Wink

Posted: Sat Apr 03, 2010 4:37 pm

Didn't invent it myself, but here's a step-by-step...

0) If you're running Firefox with NoScript, add an exception for...
1) Click http://www.myiptest.com/staticpages/index.php/how-about-you
2) In the middle box, paste the link to the page you want - this can be an image or a webpage. ***NOTE - remove the 'http://'***
3) The top box now contains the link to send to your scammer. Copy it to clipboard.
4) TEST IT - paste it in a new browser window address bar - if it doesn't work, check you removed the http:// in step 2. If it still won't work, check you haven't disabled javascript. If it still won't work, try a different browser.
4a) *Optional Step* - click the 'Click here to create tinyurl link' and TEST IT
5) If it works, send the link to your lad
6) Use the address in the third box to see which IP addresses have followed your link. You will need to copy it and paste it somewhere safe if you want to revisit it in a few days, or you lose the link!

Using this, you can send a link to a webpage or an image to anyone using GMail or any other method (also works in yahoo instant messenger, SMS, etc), and it will report the IP address and timestamp of every time it is opened/followed directly.

Posted: Sat Apr 03, 2010 5:42 pm

^^^

Quote:

2) In the middle box, paste the link to the page you want - this can be an image or a webpage. ***NOTE - remove the 'http://'***

that is the bit I don't understand Embarassed

Posted: Sat Apr 03, 2010 6:08 pm

http://scamwarners.com/main//guestupload/46777myiptest.jpg

See the box with the pink arrow? That's the one you paste the link to the image or webpage into. For instance if you wanted the link to go to 419eater.com, you'd type 419eater.com into this box. If you wanted the Eater //LOGO// to be the link, you'd type forum.419eater.com/forum/images/header/419logo.gif into the pink arrow box...

Posted: Sat Apr 03, 2010 6:56 pm

Sorry to be sooooo long but had to print and scan and my HP printer has issues with Windows 7.

Is this right? send lad link for person
then open
Link for you with redirect as written?

banghead

Posted: Sat Apr 03, 2010 7:30 pm

Right - my hunch is your browser is fighting you. What browser are you using?

Posted: Sat Apr 03, 2010 7:40 pm

Firefox but no noscript? should I do something? Could it be Norton?

Posted: Sat Apr 03, 2010 7:51 pm

^^ Got same result in IE8

Posted: Sat Apr 03, 2010 9:15 pm

How bizarre. The scripting and layout of the site is certainly a bit flakey, but all I can suggest is making sure javascript is on, and try another browser. I used Firefox 3.6 with NoScript disabled, and it works ok, not brilliantly, but ok at least.

It's a good idea for a facility though, perhaps Bankster would fancy making a robust, easy-to-use version, maybe with automagic country identification too? In the meantime I am happy to help out where I can with inputting links for you DW et al.

Posted: Sat Apr 03, 2010 10:46 pm

Yes, that was the IP I was using last night. Where is it sent to?

Never mind I figured it out. Pretty cool.

Posted: Sat Apr 03, 2010 11:31 pm

Science bit (real science, not that shampoo bollocks) -

It's all pretty simple stuff, and the target URL is in cleartext in the lad URL. That makes this extremely lightweight on the server, although accepting a bit more of a server load could make it a load slicker. For instance, a tinyurl-type service would seem innocuous yet could be the gateway for IP tracking. And a sensible user-interface junking all the dodgy javascript and just having a simple "enter URL here and click" which gave a pre-rolled "send this to your lad" and "check his IP here" would do the trick.

I'm so rusty now it's laughable, but technically this is extremely easy to do. Extremely.

Posted: Sun Apr 04, 2010 8:53 am

A preview version is ready here. Please let me know what you think. This is an example of what the image may look like:

Image wrote:

After you've created an image, the script will give you two links:
The link to the image is what your lad needs.
Make sure to save either the other link or the 'baiter key'. These lead to the access stats of your image. Currently the exact time, IP address and browser/OS version of each request are logged.

Planned extras:
Make individual images available/unavailable at will
Edit the text at any time for extra lad confusion

The tricky bit is to embed the image within the e-mail. AFAIK GMail doesn't allow this (though I'll be happy to be proven wrong).
I could have the script mail you the complete message so you could forward it to your lad, but most e-mail clients will then download the image & attach it to the new message, which kind of defeats the purpose.
The approach that should always work is to send the lad a link to the image.

I think I'll add a button to send the message with the embedded image directly to the lad on your behalf. Any other suggestions? General feedback?

Posted: Sun Apr 04, 2010 8:57 am

The ever so lovely DW wrote:

Yes I'll be round for a massage later.

The really-full-body massage as always, dear? Mighty fine, I'll go pre-heat the stones & oil.

E-mail / HTTP proxy server for premium members	View next topic View previous topic