forum.419eater.com :: View topic

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Thu Jun 22, 2017 10:31 am

AF

Posted: Thu Jun 22, 2017 10:55 am

Welcome, John, and I hope you've read all the stickies!

Posted: Thu Jun 22, 2017 11:17 am

Hi Yastreb,

many thanks for your reply however I feel a bit confused with this website with so many information everywhere and using a mobile phone it's a bit difficult to navigate.
If you could pls be more specific I'll appreciate.
Cheers.
John

Posted: Thu Jun 22, 2017 12:23 pm

Welcome John!
There are two quick places to start. First, the forum rules can be found here or from the Guidelines menu at the top of the page.

We have also collected a number of different "help" topics in this index post in the "Scambaiting Helps, Hints and Tips" forum:
https://forum.419eater.com/forum/viewtopic.php?t=237673

Posted: Thu Jun 22, 2017 12:54 pm

And loose the yahoo email – too much info in the headers

The name is traceable to 8 different individuals – so loose that too (collateral damage)

Choose another name and then google it – if nothing comes up, open a gmail account

Posted: Thu Jun 22, 2017 1:03 pm

Purple wrote:

And loose the yahoo email – too much info in the headers

Oh? What information is in yahoo email headers that is different?

Posted: Thu Jun 22, 2017 3:52 pm

When I started baiting back in ’05, it was widely accepted that Gmail was (at the time) the only way to keep the senders IP address out of the email header. While things have changed in recent years, Yahoo is the exception ……..

“In our quick and dirty testing I found that Gmail, FastMail and Outlook will all keep your IP address secret but Yahoo, the perennial late comers to the security and privacy party, won’t.”
Source - https://nakedsecurity.sophos.com/2014/02/27/how-emails-can-be-used-to-track-your-location-and-how-to-stop-it/

And although the following link is from 2009, it shows the vulnerabilities of Yahoo - https://forum.whatismyip.com/f4/trace-an-e-mail-from-yahoo-t260/

Gmail, since its inception, has remained water tight, and “gives away” nothing, unless you directly tell it to (such as proactively enabling images in text).

Although my personal IP points to city 200 miles away from my actual location, it does indicate the correct country, and therein lies the problem. If you’re using Yahoo, you risk giving away your location by country – and if I say that I am from the States, but my IP shows as UK, in Yahoo it can be rumbled.

I also prefer to bait lads who use Yahoo accounts for this same reason, especially if sending them on safari – how do I prove the safari ? – by supporting pictures (which could have been taken at any time) – but also by the (Yahoo) IP email with a time stamp.

Of all the email providers out there, Yahoo remains the most vulnerable. I’ll be the first to admit that most of the lads wouldn’t have a clue on how to trace this stuff – but supposing your bait changes ?

You say you are now in Accra (for instance) to meet your lad – and he’s handed the matter over to a maga – who sends you an innocent looking email, which completely blows your whole story.

With the recent proliferation of email providers, it’s often hard to keep track of which ones are secure. But the only two I have experience of is Gmail (which is) – and Yahoo (which ‘aint) …….

Posted: Thu Jun 22, 2017 4:16 pm

Purple wrote:

Source - https://nakedsecurity.sophos.com/2014/02/27/how-emails-can-be-used-to-track-your-location-and-how-to-stop-it/

Three years is a lifetime in IT - Yahoo started stripping IPs and caching images a few months after Gmail and Outlook did. Now, all 3 of them strip them.

Posted: Thu Jun 22, 2017 5:09 pm

Once upon a time, Gmail was invite only, too, and lads were convinced only "jokers" used it. Now, almost every lad has an account there. As long as you log in through a web browser, Yahoo, Gmail, and the Microsoft domains hide IP. It's why I have Yahoo accounts designating .co.uk and .co.sg and the lads don't question my being in London or Saigon.

Use an email client (or your phone) and you could be passing IP info along. However, I worry little about this as I've found baiting to be about passing off the improbable to lads, anyway, so it's easily explained away should they ask (they never have).

Posted: Fri Jun 23, 2017 10:18 am

Thanks everybody for info and input...let's have fun...

Baiting Guru Joined: 10 Oct 2010 Posts: 3876

Quote:

Gmail, since its inception, has remained water tight, and “gives away” nothing, unless you directly tell it to (such as proactively enabling images in text).

sadly, gmail leaks a lot in a certain situation:

set up a gmail-account and various other accounts whereever you want (as long as they support pop3/smtp).

set the gmail-account to access the other accounts.

and then, send an email from gmail via one of those accounts to another gmail-account. gmail will happily disclose the gmail-account you are using.

Posted: Sun Jun 25, 2017 3:58 pm

That's interesting, Robert. I have numerous linked gmail accounts. I also POP some gmail through to Microsoft Office Outlook. I was unaware of a potential security issue. Thanks.

Hello I'm New here! Joined: 29 Jun 2017 Posts: 1

Hello!

I am just a newbie here, I am currently using a free email provider similar to Yahoo/Gmail, which is located in my country, and it is not in English, so I thought it would not be suspicious to scammers. I did not set up any pop3/smtp, I am using their web interface when reading and writing mail. Could you guys point me to some tutorials/resources on how can I check what IP address my emails contain?

Just on a side note/second question: What is you opinion about protonmail? I have tried using an that as a baiting address, but I guess their spam filter is too good, or it is too obvious that it is a privacy concerned email provider, so whenever I wrote to scammers, most of the time I did not get an answer Sad

Thank you very much for your answers!

Posted: Sun Jul 02, 2017 11:48 am

To see if your own IP address is leaked, you would want to send an email from your address to another of your anonymous accounts. Then, in that second account, open your email and click on an option like "view headers" or "view source".
Your email provider might say whether or not they hide IP. You could try googling something like "Does --the name of your email provider-- mask IP"?

I like protonmail, and my guess is the lads wouldn't say anything about it. If they do, you can just tell them that you are very security conscientious or that your company requires it's users to use it, or any other number of excuses.

ETA -- If you're not getting any answers from any scammers from protonmail, it could be their scam filters. In that case, you might be better off with another email service. Or only provide your protonmail to scammers you already have on the hook (not ones who will just be sending you the initial scam format that would be caught in a spam filter).

Posted: Sun Jul 02, 2017 8:08 pm

I don't like emailing lads with protonmail, because why educate them by introducing it?