Email address found but don't know how
I have a personal domain for my boss.
While he's out of the country he wants to see the orders from our commercial web site, so i configured a forward rule.
Any email which sent to "email@work.com[/EMAIL]" forward to weborders@hisdomain.com[/EMAIL].
Hisdomain.com has 2 email addresses.
His personal one and weborders.
weborders@hisdomain isn't advertised anywhere, its purely a repository.
And hisdomain.com is only about 6 weeks old.
Running a mail delivery report on 'hisdomain.com' shows emails going to weborders, some of which are spam.
No other email addresses have been spoofed.
So how did they find weborders@hisdomain.com[/EMAIL]
I don't buy that they could have guessed it, otherwise, i'd be seeing failed emails going to sales@, admin@ or info@.
Running a delivery report on one of the spam senders, shows that it sent to other email addresses, but none of which should have resulted in a forward.
Again, i'm convinced that there is some sort of email harvesting hack.
Both domains are on the same server by the way.
-
I don't buy that they could have guessed it, otherwise, i'd be seeing failed emails going to sales@, admin@ or info@.
Hello :) You may want to consult with a qualified system administrator to have the server reviewed to determine if it's been hacked if that's what you suspect is happening. Thank you.0
Please sign in to leave a comment.
Comments
1 comment