Forum

Gmail Phishing/Beacons - PayPal Link
 

Morning All,

This has been brought up a couple of times but hoping to clear it up.

Summary:

1. I've had several past PayPal accounts (pre-stealth) that have been limited (good year+ ago). Obviously each of these PayPal accounts have an associated email address with them (these are gmail accounts).

2. Discovered stealth and now I have two up and running PP's and all going well.

3. Now I'd like to get all the email addresses of my customers which I had during my pre-stealth times (across about 3 gmail accounts). Just so i can now send them all a group email/updates - basically building a database of all my customers.

4. Problem is. In my pre-stealth days I enabled all images in all of my old email accounts, allowing for any embedded beacons/flash cookies to run rife.

5. Now, using gmails "add new account feature", I have the email account of my stealth PayPal loaded, and also the other old emails. I currently make sure i never open an old pre stealth PayPal email as i'm concious that the email could contain PP beacons associated with my old PP account.

Question:

1. Is this an accurate assumption - Ch 1 Basic Stealth would assume yes, obviously. But, critically DO PP KNOW WHEN I AM VIEWING ONE OF THEIR EMAILS IN A GMAIL ACCOUNT IF I HAVE IMAGES ALLOWED?

2. And leading on from this, If so, CAN THEY THEREFORE LINK TWO PP ACCOUNTS JUST FROM PEOPLE VIEWING PP EMAILS IN TWO GMAIL ACCOUNTS FROM THE SAME IP ADDRESS...without even logging into the actual PP site i will add.

Hoping some of the more technical/Mods can shed light on this subtlety re cookies/beacons/flash LSOs/phishing tech.

Thanks for any comments,

Gmail is known to be good for protection in stealth. If you are not 100%, disable images too. If you want to be EVEN more safe, open your gmail in some random user account that is NOT related to your stealth - copy paste into word document - e-mail that to yourself. Its not hard - bit longer.

I'm not sure this answers your questions but would seem to solve the issue. Create new Windows user, change IP, extract all the email address only, wash rinse and repeat.

PS. I'm using the Tor network to view these aswell to avoid detection - thanks rsot and jj.

Check out Tor by the way...although be careful with rogue ip locations (as i said above). Sorry slightly unrelated to my original post.

i may be wrong but im pretty sure you can still access transaction reports from a limited PP

get the emails from there if your worried

I googled Tor, browsed the site and my head is spinning. Way too technical for me. :smash:

haha - yeah. Not necessary by any means