News for hackers. Stuff that matters.

A comment on Stubhub buying their own tickets under fake names?.

Re:Stubhub buying their own tickets under fake names? by wussboy on Wednesday July 12, 2023 @12:38PM (#36697313)
color-geographicfeature-orgdesignation is their name generator, at least.
[ Parent | on HN ]
Re:Stubhub buying their own tickets under fake names? by kreeWall on Wednesday July 12, 2023 @12:54PM (#36697626)
This ^^
[ Parent | on HN ]
Re:Stubhub buying their own tickets under fake names? by user070223 on Wednesday July 12, 2023 @01:15PM (#36698025)
https://namegrep.com/#%28%3Acolors%3A%7Ccrimson%7Camber%7Cem...

None of the the domains listed in this thread appear to be taken (the site uses godaddy to verify, and is updated every 24h), but there are others in this scheme that may be related.

[ Parent | on HN ]
Re:Stubhub buying their own tickets under fake names? by Throwawayh89 on Wednesday July 12, 2023 @01:28PM (#36698291)
How'd you determine that?
[ Parent | on HN ]
Re:Stubhub buying their own tickets under fake names? by zerocrates on Wednesday July 12, 2023 @01:44PM (#36698604)
The poster and some comments give examples of the domains: crimsonhillpartners, ambercovecapital, emeraldsummitadvisors.
[ Parent | on HN ]
Re:Stubhub buying their own tickets under fake names? by avree on Wednesday July 12, 2023 @03:12PM (#36700155)
Other examples of Stubhub e-mails include "fieldmilestone" and "rolodexinfo". I believe that Stubhub is using old domains, probably from some list that their registrar is providing them. Sometimes, there are blocks of patterns, such as the color/etc. one - but they're probably doing this to avoid getting spam-filtered by people's mail clients, not to try to hide from Ticketmaster or anything else, and I doubt the naming is something they are defining.
[ Parent | on HN ]
Re:Stubhub buying their own tickets under fake names? by zerocrates on Wednesday July 12, 2023 @03:33PM (#36700422)
All the ones I've seen are quite recent, 2023 creation dates. Your "fieldmilestone" is one such.

Obviously they're not literally all the color+feature+company pattern but I don't think they're just reusing old "real" domains either.

As for not getting spam filtered, using a big pile of new domains with no web presence probably has the reverse effect so I don't think that's the intention here. Also I think as it's described, these emails aren't really sending messages to people, they're there to receive emails from Ticketmaster or similar entities when you go to transfer though them.

[ Parent | on HN ]