Hotmail gives true sender IP address. FAQ says use Hotmail !

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Sun Apr 07, 2013 10:04 am

I started my first scam bait a few years ago, when I think I wasted around $250 of my lads money on phone & FAX callls, as he tried to rip off a radio ham. He told me one FAX cost him about $50 !!! (It was 14 pages sent to an expensive 070 number in the UK. It was good fun, but I've not done any serious scam baiting since then. I used Hotmail at the time, having verified Hotmail did not send my IP address.

Something sparked my interest to have another go at scam baiting, so once again deceided to be a radio ham looking to buy kit. I used my old hotmail address, but then I noticed Hotmail was sending my real IP address. At that point I decided to use a proxy server to continute the scam bait. But once this one is over, I will change to another email service. I'll check out gmail or blumail or any other that withholds my IP.

It seems a bad idea for hte FAQ to suggest using Hotmail, when Hotmail sends the true IP address. It's probably not such an issue for someone with a dynamic IP, but for anyone with a static IP like myself, it is not a good idea.

wasname

Baiting Guru Joined: 27 Mar 2011 Posts: 21158

Welcome back wasname! I think I recall reading your Ham baits a while back. Hotmail has changed some things and do not seem very baiter friendly any longer.

Gmail works fine and is very easy to sign up for. Occasionally you will get the sign in that wants a phone or something to verify you with. Just close it out and try again anther day. It is just a random thing that happens.

Posted: Sun Apr 07, 2013 12:24 pm

next victim wrote:

Welcome back wasname! I think I recall reading your Ham baits a while back.

Yes, I had some good fun. I generated a nice long form for him to FAX, which he FAXed two or three times as I pointed out there were errors. I should write it all up in the appropiate forum. He finally called it a day after the MTCN fault. He rang Western Union who did not know anything about it. I pointed out the radio club had set it up, but I could not get him to go any further. He never sussed for 100% I was winding him up, although he suspected it.

Quote:

Hotmail has changed some things and do not seem very baiter friendly any longer.

No, they do not.

I think the FAQ needs changing in this case. Do you know the best person to contact to get the FAQ changed?

I suspect 99.99% of scammers are unlikely to be tracing IP addresses, but it was not a chance I was keen to take having a fixed one. I'm using a proxy server in the USA now. But I was given the account on a Linux server for another purpose, so it's not a great idea for me to use it as a Proxy on a long-term basis.

Quote:

Gmail works fine and is very easy to sign up for.

I do have a gmail account, but it is not for scam baiting. I will set up another one, and check it does not give the IP address.

wasname

Baiting Guru Joined: 27 Mar 2011 Posts: 21158

Gmail headers look like this

Received: by 10.58.18.235 with SMTP id z11csp621737ved;
Thu, 1 Nov 2012 08:18:42 -0700 (PDT)
Received: by 10.60.171.164 with SMTP id av4mr34520628oec.59.1351783122169;
Thu, 01 Nov 2012 08:18:42 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-oa0-f67.google.com (mail-oa0-f67.google.com [209.85.219.67])
by mx.google.com with ESMTPS id g3si6563628obb.66.2012.11.01.08.18.42
(version=TLSv1/SSLv3 cipher=OTHER);
Thu, 01 Nov 2012 08:18:42 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 209.85.219.67 as permitted sender) client-ip=209.85.219.67;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 209.85.219.67 as permitted sender) [email protected]; dkim=pass [email protected]
Received: by mail-oa0-f67.google.com with SMTP id n12so405570oag.6
for < >; Thu, 01 Nov 2012 08:18:42 -0700 (PDT)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.182.45.8 as permitted sender) client-ip=10.182.45.8
Received: from mr.google.com ([10.182.45.8])
by 10.182.45.8 with SMTP id i8mr34354556obm.64.1351783121710 (num_hops = 1);
Thu, 01 Nov 2012 08:18:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:in-reply-to:references:date:message-id:subject:from:to
:content-type;
bh=1Zy31g5SD66PhGc3D2jETKAD8CxxFjXJ837eHygJWts=;
b= ==
MIME-Version: 1.0
Received: by 10.182.45.8 with SMTP id i8mr34354556obm.64.1351783121705; Thu,
01 Nov 2012 08:18:41 -0700 (PDT)
Received: by 10.182.19.197 with HTTP; Thu, 1 Nov 2012 08:18:41 -0700 (PDT)
In-Reply-To: <CAKt-Ye=42EcTnHwUK4LyvLGKYdGE6UwNNtkuGUCw2E4mjn2QDw@mail.gmail.com>
References: <CAKt-Ye=4 @mail.gmail.com>
Date: Thu, 1 Nov 2012 15:18:41 +0000
Message-ID: <CAGr937L7-RaQ7zwckeujx2oFDONRZNgZx+0mD5asZxUkJ9_Btg@mail.gmail.com>
Subject: Re:
From: linda wood <[email protected]>

Posted: Sun Apr 07, 2013 1:00 pm

Hotmail recently started encrypting the IP address. We don't know how they encrypt it; if they tell anyone, it's just big ISPs. Of course, you can hide your IP address with Tor. I use Tor for most of my web browsing, including baiting.

There's more to being baiter friendly than hiding your IP address. More important is that the mail hoster doesn't delete baiter accounts when scammers complain. It's good practice to put a message in drafts explaining that this is a baiter account. Include a link to one of your published baits if you have some.

Posted: Tue Apr 09, 2013 7:20 am

Click on the link at the top of the page under Partner Websites that says "Track IP Address." Input your IP address. See what it tells you.

Unless you live in a tiny town and have a static IP address, it tells you a whole heck of a lot of nothing, at least nothing that would pose any danger to you if a scammer wasn't too lazy to type it in to find out.

Posted: Tue Apr 09, 2013 5:41 pm

bearkat419 wrote:

Click on the link at the top of the page under Partner Websites that says "Track IP Address." Input your IP address. See what it tells you.

Unless you live in a tiny town and have a static IP address

I do have a static IP, which is probably why it concerns me more than most. But why the hell reccomend something when there are safer alternatives?

wasname

Posted: Tue Apr 09, 2013 6:27 pm

With all respect, I think that you may be getting confused. Although here it states:

Quote:

Well, there are plenty of web based free email services you can use. Of course the first one the comes to mind is Hotmail

You can also read here:

Quote:

We recommend "baiting safely" which means, ideally, an email account that strips out your originating IP address.

However, I also have a static IP address, and it points to the small town where I live. But I will still sometimes use webmail accounts which reveal my IP address. One lad and I even had a little chat about it (my character was supposed to be living in another country, so I told him it was a satellite IP address). I'm not worried. I'm nothing like my characters, so even if a lad came hunting for a teenage au pair or a retired ex-businessman, he certainly isn't going to think that I am either of those people.