Just make things a little more interesting, click this link in your browser:
http://ww3.phorm.com/
Hmmmm
Alexander Hanff
---------- Post added at 20:44 ---------- Previous post was at 20:33 ----------
Quote:
Originally Posted by R Jones
Good. I was hoping for a smoking gun.
I've emailed him directly to ask for an explanation and said that I submitted the form after his reassurance that this was an internal site and that if my details have been compromised then I hold BT responsible on the basis of his official advice.
This is now the second bit of documented evidence we have of communications through that site ending up in Phorm's hands.
What next? - I'm all fired up and ready to go!
|
The only explanation I can think of is this:
1. You fill in the contact form on
www.webwise.bt.com (a server hosted in the US off the BT core network on an IP address recently associated with Phorm).
2. The script behind that form seems to be sending the form data to ww3.phorm.com.
3. ww3.phorm.com appears to be then sending that data to BT via email, which explains the reference header.
If anyone has anything to add, please feel free.
Alexander Hanff