Scraping BHW E-Mails? Possible Scam?

MidKnight

Junior Member
Joined
Jun 22, 2011
Messages
170
Reaction score
49
Believe it or not, first thread I've ever created here. But moving on...

About an hour ago, I got an e-mail titled "Ultimate Scrapebox Linklist - 12th April", from a gmail acct. It's addressed to one of my main e-mail accts, particularly the one associated with my BHW acct. Now, this e-mail acct is only associated with BHW in terms of IMing. Besides my friends who are not into IM or don't even know I do it, and a writing site, no one else has this acct. I am on other IM and hacking forums, but they are under different emails. In fact, the link this e-mail referenced to (which is another forum) isn't even a site I'm associated with on any acct. The link though redirects to an e-junkie.com checkout page for $37.00, though they advertise the list as $35.00 on the e-mail.

So my question is, has anyone else gotten this? Is this a scam so I can report it, or is it legit? I replied back to the sender, will see if someone answers or not as it hasn't bounced back to me yet. Sorry, I know it's not a lot of info I provided, but I don't have the time to post a screenshot at the moment. When I comeback online later on, I will post screenshots of the e-mail, and the full details from it. Personally, I have no intention of purchasing this even if it is legit. I just want to know if it's real, or to warn others in case it is a scam.

Thanks for any help you guys can provide.

Mods, please move this if posted in the wrong section.

~MidKnight

P.S. To add, no members I currently speak to here have my email acct info, so it's not someone I know from BHW, hence the thread title.

Edit: Screenshots and E-mail Details

em1.jpgem2.jpg

HTML:
Delivered-To: 
Received: by 10.58.66.162 with SMTP id g2csp134939vet;
        Sat, 13 Apr 2013 0035 -0700 (PDT)
X-Received: by 10.50.17.71 with SMTP id m7mr1075035igd.14.1365838354795;
        Sat, 13 Apr 2013 0034 -0700 (PDT)
Return-Path: <[email protected]>
Received: from host.affexpert.com (host.affexpert.COM. [8.29.130.39])
        by mx.google.com with ESMTPS id b7si1833306igk.25.2013.04.13.00.32.34
        (version=TLSv1 cipher=RC4-SHA bits=128/128);
        Sat, 13 Apr 2013 0034 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of [email protected] designates 8.29.130.39 as permitted sender) client-ip=8.29.130.39;
Authentication-Results: mx.google.com;
       spf=pass (google.com: best guess record for domain of [email protected] designates 8.29.130.39 as permitted sender) [email protected]
Received: from jordanr by host.affexpert.com with local (Exim 4.80)
    (envelope-from <[email protected]>)
    id 1UQuws-0007CP-4e
    for ; Sat, 13 Apr 2013 0334 -0400
To: 
Subject: Ultimate Scrapebox Linklist - 12th April
From:  <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Sat, 13 Apr 2013 0334 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - host.affexpert.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [502 501] / [47 12]
X-AntiAbuse: Sender Address Domain - host.affexpert.com
X-Get-Message-Sender-Via: host.affexpert.com: authenticated_id: jordanr/only user confirmed/virtual account not confirmed


<html>
    <head>
        <title></title>
    </head>
    <body>
        <p style="text-align: center;">
            <span style="font-size: 26px;"><strong>Ultimate Scrapebox Lists Blast</strong></span></p>
 

Attachments

  • em1.jpg
    em1.jpg
    36.5 KB · Views: 14
Last edited:
If you are asking if it's possible to harvest email from BHW then it was possible at a certain moment not sure if it's still working.

If the list is legit.. the answer is no since the list is not build from subscription but from harvesting so none of the users agree to get any kind of advertise via email...
 
there was a thread on here once which showed how to get emails from forum members with scrapebox. When I found the thread it was already some months old and when I tried it on bhw and other forums it did not work anymore.

I also received emails from "BHW" which were discussed on here. and it turned out the email was NOT from bhw. It was about some new forum diamonddamien setup which was fake.

I think real bhw emails redirect to blackhatworld.com urls not directly to e-junkie offer. I wouldn't trust it.
 
It was possible a few months back but I did not have email as you OP.
 
Thanks for the reply guys. Oh my phone now, so screenshots will come when I get home. That, and proper thanks will be given, lol.

~MidKnight


Sent from my iPhone using Tapatalk
 
Okay, edited my first post with the screenshots and the e-mail details. Thanks again for your help guys.

~MidKnight
 
So do you think I should report this to the Mods?

~MidKnight

If you are asking if it's possible to harvest email from BHW then it was possible at a certain moment not sure if it's still working.

If the list is legit.. the answer is no since the list is not build from subscription but from harvesting so none of the users agree to get any kind of advertise via email...
 
You can scrape email using social email extractor.

But can it extract e-mail addresses from BHW? This e-mail was about IM, yet BHW is the only place I used this acct on that has to do with IM. Even my Skye acct has a different e-mail address with it. The only possible place they could have gotten my info is from BHW, and I want to know if that is the case. Only close friends have this e-mail address info as that was the reason it was originally created. Until last night, the only IM related e-mails I ever received on this acct were from BHW. This is why I find this suspicious.

~MidKnight
 
I also received this email at an address which I only use for BHW...

The Scrapebox pack looks fake to me though as I can't find it advertised anywhere else on the web.
 
The BHW db has been compromised numerous times in the past. Where the list of email addresses ended up is anyone's guess.

If you are suspicious about an email originating from BHW, hop on IRC with the headers and we will cross-reference them to see if the IP originates from a known member. Always exercise due diligence when dealing with emails.
 
Back
Top