on a new website, i publicly display an email address, firstname.lastname@example.org. then i set up an email forwarder in my hostmonster cpanel, so that if the public email address ever became spam ridden then we can chop off the forwarding.
however, the client received a spam message that looked like the following.
to: client's personal email address (not the public address)
subject: domain.com opportunities
body: marketing junk
the problem is that the "to" should have said email@example.com. i am now worried that the real email address was retrieved on the backend of hostmonster.