I keep a leaked email open for research. Does anyone else do something similar?

Posted by TxTechnician@reddit | sysadmin | View on Reddit | 15 comments

I have an active email account which got leaked years ago. I've kept it open because it's good research. Some of the phishing emails I've gotten are very convincing. I use it to show people phishing tricks scammers use. Does anyone else do something similar?

Reply to Post

15 Comments

[-]

OsmiumBalloon@reddit

I use a separate email address for every business, website, or other thing I sign-up for. It's illuminating to see who is selling/leaking my addresses, and who's buying them.

[-]

TxTechnician@reddit (OP)

I use one email and email plussing for any account. E. G. Txtechnician+whatever@example.com

[-]

TK-CL1PPY@reddit

I read about this once upon a time, but the article said it only worked on gmail. Is that still true?

[-]

nate-isu@reddit

Gmail will allow you to place periods anywhere in the prefix of your address to easily create aliases. For example: firstName@gmail.com Is the same as— first.Name@gmail.com firstN.ame@gmail.com Etc.

[-]

TxTechnician@reddit (OP)

M365 supports it. So do other email providers.

[-]

TK-CL1PPY@reddit

Solid. I use Proton, I'll have to check there.

[-]

OsmiumBalloon@reddit

The plus thing is well known. Some websites block it, and companies that sell or buy email addresses can strip it or fake it. Since I run my own mail server and domain anyway, it's trivial for me to add more "real" addresses. YMMV, etc.

[-]

wizardglick412@reddit

I once had a friend who told me that she had 3 email accounts. One for business, one for pleasure, and a third for naughty stuff. This was some years ago, but still seems like a solid plan.

[-]

goizn_mi@reddit

FirstName.LastName@company.com is the normal. The second you put your information onto LinkedIn, you get phising attacks.

[-]

Sintarsintar@reddit

I have dozens of Honeypot emails that I will occasionally drop on new forums so they get scraped also sign up for accounts and then change them to Honey pots super useful

[-]

TxTechnician@reddit (OP)

I used to keep an excel spreadsheet called passwords with a bunch of honeypot accounts. If anyone ever logged in I would get a "suspicious login detected" email from Gmail or whatever.

[-]

I keep a leaked email open for research. Does anyone else do something similar?

Reply to Post

15 Comments

OsmiumBalloon@reddit

TxTechnician@reddit (OP)

TK-CL1PPY@reddit

nate-isu@reddit

TxTechnician@reddit (OP)

TK-CL1PPY@reddit

OsmiumBalloon@reddit

wizardglick412@reddit

goizn_mi@reddit

Sintarsintar@reddit

TxTechnician@reddit (OP)

Sintarsintar@reddit

tech2but1@reddit

techw1z@reddit

redeuxx@reddit