Call us today, toll free:
888-7649350

Strange email message claims to come from my EIRCA site, but I didn't send it

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length

 
Advanced search

4338 Posts in 706 Topics- by 1724 Members - Latest Member: opipsyTiffess

January 07, 2009, 09:42:19 AM
Live! ForumTechnical supportGeneral supportStrange email message claims to come from my EIRCA site, but I didn't send it
Pages: [1] |   Go Down
Print
Author Topic: Strange email message claims to come from my EIRCA site, but I didn't send it  (Read 626 times)
ernietamminga
Jr. Member
**

Karma: +0/-0
Posts: 8


« on: July 02, 2008, 12:21:12 PM »

Someone or something apparently sent an email message that spoofed my EIRCA Reseller hosting account as the sender. I only know about it because the message bounced back to me (quoted in full, below).
The "plan" mentioned in the message -- AxisMain -- is one I use only for MY OWN domains, and there's no billing associated with it. Does this message mean that someone is trying to create a parasite website using my Free plan?

Should I be alarmed by this...Huh
   -Ernie
=========================================
----- Original Message -----
From: <MAILER-DAEMON@mail-g3.xinnetdns.com>
To: <ernietamminga@yahoo.com>
Sent: Tuesday, July 01, 2008 10:15 PM
Subject: failure notice


> Hi. This is the qmail-send program at mail-g3.xinnetdns.com.
> I'm afraid I wasn't able to deliver your message to the following addresses.
> This is a permanent error; I've given up. Sorry it didn't work out.
>
> <ceshi@ceshi.com>:
> maildir is ceshi@ceshi.com
> domain is over quota
>
> --- Below this line is a copy of the message.
>
> Return-Path: <ernietamminga@yahoo.com>
> Received: (qmail 912 invoked by uid 88); 2 Jul 2008 05:15:38 -0000
> Received: from unknown (HELO mail.server01.*anonymoushsphereserver*.net) (202.10.76.3)
>  by 0 with SMTP; 2 Jul 2008 05:15:38 -0000
> Received: (qmail 22069 invoked by uid 399); 2 Jul 2008 00:15:34 -0500
> Received: from 75.126.201.117-static.reverse.softlayer.com (HELO cp.server01.*anonymoushsphereserver*.net) (75.126.201.117)
>  by 75.126.201.117-static.reverse.softlayer.com with ESMTPM; 2 Jul 2008 00:15:34 -0500
> X-Originating-IP: 75.126.201.117
> Message-ID: <10223970.1214975734872.JavaMail.cpanel@cp.server01.*anonymoushsphereserver*.net>
> Date: Wed, 2 Jul 2008 00:15:30 -0500 (CDT)
> From: ernietamminga@yahoo.com
> To: ceshi@ceshi.com
> Subject: New Account: AxisMain
> Mime-Version: 1.0
> Content-Type: text/plain; charset=UTF-8
> Content-Transfer-Encoding: 7bit
> X-Mailer:
> Content-Language: UTF-8
>
> Dear ceshi ceshi,
>
> Thank you for signing up with Axis Terrae Communications. We will be able to complete your account set-up as soon as we have received your payment.
>
> You have chosen the following plan: AxisMain
>
>
>                                 BILLING STATEMENT
>
>
> TOTAL:     $0.00
>
>
> To replenish your balance, follow this link:
>
> We will notify you as soon as your payment has been received and processed. At that point, you will be able to access your control panel.
>
> If you have any problems or questions, contact our tech support at:
>
>
Logged
Dean
Administrator
Hero Member
*****

Karma: +3/-0
Posts: 113


WWW
« Reply #1 on: July 03, 2008, 09:49:34 AM »

That message is a welcome email; check your signup -> moderate section, you should see an account awaiting moderation, it can be deleted.

If you leave a plan open for signup, it is available publicly for ordering. You can switch signups off for any plan under the Plans -> Manage section of your account.
Logged

Dean Cahl
EIRCA Signature Support
EIRCA Shared, Reseller and Managed dedicated hosting: www.EIRCA.net
Give us your feedback: http://feedback.eirca.net/survey.php?surveyid=2
ernietamminga
Jr. Member
**

Karma: +0/-0
Posts: 8


« Reply #2 on: July 03, 2008, 10:38:00 AM »

Thank you!

I have turned off Signup Access for that plan. I notice that in the Signup Access column, it still says (FULL) next to the padlock icon. Do I need to go into that area and make everything inaccessible, too... or does just turning off Signup Access prevent people from trying to sign up for the plan?

(I'm still migrating to  :)this H-Sphere world from the CPanel/WHM world, and still poking my way around...)

   Ernie
Logged
Dean
Administrator
Hero Member
*****

Karma: +3/-0
Posts: 113


WWW
« Reply #3 on: July 04, 2008, 11:31:55 AM »

Thank you!

I have turned off Signup Access for that plan. I notice that in the Signup Access column, it still says (FULL) next to the padlock icon. Do I need to go into that area and make everything inaccessible, too... or does just turning off Signup Access prevent people from trying to sign up for the plan?

(I'm still migrating to  :)this H-Sphere world from the CPanel/WHM world, and still poking my way around...)

   Ernie
Turning signup access off will do the trick. signup access limits ("FULL") mean it's available from the public view aswell as from the admin panel. Click the lock icon to change those settings.
Logged

Dean Cahl
EIRCA Signature Support
EIRCA Shared, Reseller and Managed dedicated hosting: www.EIRCA.net
Give us your feedback: http://feedback.eirca.net/survey.php?surveyid=2
Pages: [1] |   Go Up
Print
Jump to:  

Recent forum discussions