Re: Yahoo (How beaconing works)-how spammers get addresses

by David Jones <dvjones(at)ksbe.edu>

 Date:  Thu, 30 Jan 2003 10:08:16 -1000
 To:  hwg-techniques(at)mail.hwg.org
 In-Reply-To:  microsoft
  todo: View Thread, Original
Hmm, we need to keep in mind how SMTP and POP 
actually works. An outgoing email is wrapped in what is 
called an SMTP envelope. That envelope contains the 
actual address that the message is addressed to. 
When the message is received and delivered into the 
recipient's POP3 mail box, the SMTP envelope is 
stripped and discarded. The TO information in the 
message (as you see it when you get your mail) 
doesn't have to have *any* connection with the address 
it was actually sent to.

David
dvjones(at)ksbe.edu

On 30 Jan 2003, at 8:40, Octavian Rasnita wrote:

> I don't think that's a valid explanation.
> 
> Just think how many combinations of email addresses could
> be on just a single domain and you will see that they will
> need to send a lot of messages and this will take years.
> The result could be that that server is configured to
> receive all the non existent email messages in a separate
> inbox.
> 
> The spammers use a spider like that for indexing web pages
> for a search engine to get the email addresses from all
> the web pages. They use to use a query to Google or other
> search engine for specific topics, and this will get web
> pages with a certain content....
> 
> Teddy,
> Teddy's Center: http://teddy.fcc.ro/
> Email: orasnita(at)home.ro
> 
> ----- Original Message -----
> From: "Alex Storey" <alexstorey(at)yahoo.com>
> To: <hwg-techniques(at)mail.hwg.org>
> Sent: Wednesday, January 29, 2003 8:12 PM
> Subject: RE: Yahoo (How beaconing works)-how spammers get
> addresses
> 
> 
> I was doing some reading on how spammers work and came
> across an explanation. It's more of a shotgun approach
> rather than harvesting by bots. Basically what they do is
> extrapolate account names and send out literally thousands
> of e-mails. The ones that don't bounce back are valid.
> (Though in the case of Yahoo, a bot could easily cruise
> their member directory, scoop up the handles and tack on
> (at)yahoo.com.)
> 
> -Alex
> your friendly local luker :)
> 
> --- hwg-techniques-digest
> <owner-hwg-techniques-digest(at)mail.hwg.org> wrote:
> I have also seen spam mail that came to me with all
> the addresses being to my ISP, as though a script was
> making random addresses by scrambling letters. For
> example, taking my name as an example, and yahoo for the
> ISP (just an example), there was mail for lob(at)yahoo.com,
> lon(at)yahoo.com, lonn(at)yahoo.com, loan(at)yahoo.com,
> lona(at)yahoo.com, lonna(at)yahoo.com, etc.
> 
> These are only examples.  Someone using various letter
> combinations to find addresses at a particular ISP. Some
> will probably bounce back, but some might hit the mark.
> Does anyone know about this kind of email address
> harvesting?
> 
> Lonna
 

HWG hwg-techniques mailing list archives, maintained by Webmasters @ IWA

This page is part of a preserved archive of archives.hwg.org. The site is no longer active and its content is not maintained. For enquiries about this archive, write to archive(at)iwanet.org.