Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

On a new website, I publicly display an email address, contact@domain.com. Then I set up an email forwarder in my hostmonster cPanel, so that if the public email address ever became spam ridden then we can chop off the forwarding.

However, the client received a spam message that looked like the following.

To: client's personal email address (not the public address)
Subject: domain.com opportunities
Body: marketing junk

The problem is that the "to" should have said contact@domain.com. I am now worried that the real email address was retrieved on the backend of hostmonster.

share|improve this question
add comment

2 Answers

You can check the logs of access to the backend of the cpanel and see if access entries but in all honesty its very unlikely.

Since its a personal account he/she has most likely used it on a site somewhere which has been compromised and ended up in some kind of database. If this email address has never been used then yes I'd lean towards the site being attacked but since your client is using the email address then this is more likely.

Edit: Cpanel doesn't provide a very good spam protection, if you want better filtering then signup to Gmail Apps which your client can use his domain name on the gmail service which has good filtering of spam. It's also free, up to 10 accounts.

share|improve this answer
add comment

I wouldn't worry to much. My own research shows that spammers tend to pick up on new domain registrations and send their junk to whatever email address is in the whois. I simply added firstname.lastname-remove-lastname-from-email@domain.com and no more spam for me on new domain registrations.

share|improve this answer
ach! i realized it's from this whois lookup. i'm sort of kicking myself now. i feel like the original email account is ruined. thank you. –  mrtunes Mar 11 '13 at 14:48
Even if you take extra steps such as advised DKoated suggested in Alias guessing there's still a chance that later on it'll receive spam if emails are leaked. Take Sony as a big example, they had 15million email addresses stolen as well as other information. Best of getting a good spam filter and ignore the rest ;) –  bybe Mar 11 '13 at 14:57
Just added a possible solution for your client to prevent spam in future, or least minimize it. –  bybe Mar 11 '13 at 15:00
is having the person access their email through gmail the best system these days? –  mrtunes Mar 12 '13 at 14:22
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.