Turning the Tables: How to Make Spammers Reveal Their Own IP Address
Turning the Tables: How to Make Spammers Reveal Their Own IP Address
Take a short moment to check your spam folder - I guess there are hundreds of spam mails, in case your mail provider doesn’t clean them up regularly.
You're viewing a single thread.
The
myaddress+shop@gmail.comshould be trivial to defeat by a spammer. Its a very simple string remove/replace to get back to a stock email address, or change it to impersonate another service, eg.myaddress+netflix@gmail.com.It's only useful for the actual service, after that, you can't rely on it.
Correct. Everyone knows this trick so everyone filters out the everything from the + to the @.
Even when email lists are “legitimately” sold it’s removed.
This guy’s using 1990s techniques in 2025.
“We can prosecute using IP address!”
The use of a "+" convention is just a convention popularized by Gmail and the other major providers. If you have your own domain, you should be able to do this with any arbitrary text schema, and encode some information in the address itself, especially if you don't care about sending email from those aliases: set up your email service to have a catchall inbox that can further be filtered/forwarded based on other rules.
It can be cumbersome but I could see it working at getting the information you're looking for.
Yeah, I love my catch-all email domain. If I start getting spam addressed to “Target@{my domain}” then I know Target sold my data; I can burn the account by auto-spamming everything addressed to it, and move on.