In the past two days, one of my spamtrap addresses—one that only exists on one page, albeit a highly-trafficked one—has received 51 offers of cheap Rolex knock-offs. Somehow, that seems a bit excessive. If you called the same person with the same offer 25 times a day, I think they’d file harassment charges against you instead of buying your product.
And yet, Project Honeypot hasn’t picked up a single spam sent to addresses on the page I set up with them.
I’m beginning to suspect a lot of the harvesting is being done not by bots, but by using virus techniques and grabbing addresses from the infected system’s web cache.