emailhash doesn't work

PavelValach · 2023-11-07 3:16 pm

Hi, url

https://api.stopforumspam.org/api?email=rovmq25@rmwad.jenniferlawrence.uk

returns

<response success="true">
<type>email</type>
<appears>yes</appears>
<lastseen>2023-11-07 13:12:51</lastseen>
<frequency>255</frequency>
</response>

but url

http://api.stopforumspam.org/api?emailhash=62c5837e48e3b00dc0e427c537a7a8fe

(md5 from md5(strtolower('rovmq25@rmwad.jenniferlawrence.uk'));)

returns

<response success="true">
<type>emailhash</type>
<appears>no</appears>
<frequency>0</frequency>
</response>

Where am I making mistake?

Alex Kemp · 2023-11-07 6:57 pm

Hello PavelValach, welcome to SFS.

I do not know of a binary app called "md5", but I do know of a Linux utility called "md5sum", and it gives exactly the result that you showed:

$ echo -n "rovmq25@rmwad.jenniferlawrence.uk" | md5sum
62c5837e48e3b00dc0e427c537a7a8fe  -

(same result with/without the quotes)
I also checked:

All gave the same result that you show.

I have no idea why. We will both have to wait for pedigree (our admin) to pop his head in & see his latest headache.

PavelValach · 2023-11-22 3:13 pm

Since my question is unanswered, I would like to look into the source codes and find the answer.
Where can I find the source codes?

pedigree · 2023-11-22 5:33 pm

the email hash doesnt work for domains that rotate their subdomains in an effort to avoid exact string detection, which is what the hash is.

domains in your example will generate emails with thousands of different subdomains, almost all that we will be aware of.

sorry but email hashing will never work with those.

it will never work with asdf@blacklisteddomain.com asdg@blacklisteddomain.com etc.

it only works with email addresses that are listed. all processing blacklists, normalisation etc, they dont work with email hash checks

#1 2023-11-07 3:16 pm