Security

Ask something
Discussion Locked

Spam mail and Address Spoofing

0 helpful
5 replies

by majorhelpdesk

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Is is possible for anyone to sniff your e-mail address from a secure web site, say during a registration process on that site, and then spam you with a spooffed address making it look like it came from the site you were visiting? Or is it more probable that the site you enterned your e-mail address on has sold your address? Any insight into the minds of these Spamming #%$@'s would be greatly appreciated.

5 replies

by meganetcomputers

Pretty much anyone can change there display e-mail address to make it look like another company or person sent you this e-mail. You will also want to make sure that you work with only reputable companies that state they do not sell your e-mail addresses otherwise you never know they could be selling your e-mail address. If my company can be of any further assistance please contact us at support@meganetcomputers.com

by alveden

Yes, data can be sniffed for a secure web site. The attacking host have to be situated between your pc and the server in question. This method is know as man-in-the-middle attack. Easily detectable though, as your browser will prompt you, informing you that there is a change of cert and whether you want to accept the new cert or not.

As Meganetcomputers said earlier, the email address of the origanal site can be easily spoof. However you can detect it by checking the mail header to check if the email have originated for the origin server. You will be able to confirm whether the origin server is the valid smtp server for the side in question .... unless the valid server is an open relay ... then it makes the task almost impossible.

This discussion is closed to new replies.