[How bout using your brain]

This method works fine as long as you don't bruteforce one account. I use it to check email/password combos.

But I have just run a quick test and you usually get disconnected after like 8-10 failed login attempts:


This is with IMAP, but same thign happened on POP protocol.

Although you can just directly reconnect and try again. I haven't been able to get myself IP blocked like this xD
However when you do find the right login, it will tell you to login through the webbrowser. But at that point you know you got the right logins at least, even though you can not dump the emails over POP then 😝

[Storm-]

Been done before.
Not the best idea.

[How bout using your brain]

Yeah I don't know about HTTP requests as I have not tried. But from what I saw it will at least give you a captcha after trying a few times. On POP/IMAP you will get that captcha as well, but only if you actually put the right login details:

Spoiler (Click to View)

However, this captcha might also be asked because I was using Tor. But it still only gets asked when login is correct.

So when you do get that message, you know you got the right login.

You should do some more testing to actually find out. But yeah I believe it is easier than sending HTTP requests.