Phishing.

[cygus]

Hi,

I have problem on my cpanel server. A lot of domains of my customers have subdomains with phishing sites.
For example:

Customer's domain: domain.com
Customer's subdomains (phishing): paypal.com.domain.com

Do you know this kind of issue?

Second problem is that my server send a lot of spam from my customer's account.
For example:

Customer's email account: info@domain.com
Spam sender address: info@domain.com

This problem exists on several accounts.

Who can help me?

[cPanelTristan]

There is not a current way to prevent subdomain creation of that type, since any subdomain name can be used so long as it conforms to internet standards. Adding something.com.domain.com would work since domain.com is already on the account, so the WHM > Tweak Setting > Allow Remote Domains setting being off will not restrict subdomain creation (only parked and addon domain creation).

As for the second question, I'm not entirely certain what your example means. The email account is actually being used to send or the email account is being spoofed?