Quote:
Originally Posted by AlexanderHanff
A lookup on what the "References" header is reveals this:
This pretty much paints the whole scene. The email you got from BT is a reply to an email sent by a web site owned by Phorm (ww3.phorm.com) which confirms that the form you submitted was done on a Phorm server.
Alexander Hanff
|
Just trying to anticipate the wriggles. This means that it was sent from the server? Does it mean it was copied to a phorm e-mail address?
If not, what would be left on the server in the way of logs etc?
I'm just trying establish if BT/Phorm can argue that no data was collected/kept by phorm. They can probably argue it's not phishing because BT themselves must have pointed the URL towards that site.
Having said that, BT could have pointed it towards the information page, Phorm could have added the 'contact us' bit by themselves. That would be phishing.
Perhaps BT need to confirm that they authorised Phorm to collect the 'contact us' information?