Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Email address found but don't know how

Discussion in 'E-mail Discussion' started by keat63, Dec 23, 2015.

  1. keat63

    keat63 Well-Known Member

    Joined:
    Nov 20, 2014
    Messages:
    995
    Likes Received:
    41
    Trophy Points:
    28
    cPanel Access Level:
    Root Administrator
    I have a personal domain for my boss.
    While he's out of the country he wants to see the orders from our commercial web site, so i configured a forward rule.

    Any email which sent to "email@work.com" forward to weborders@hisdomain.com.

    Hisdomain.com has 2 email addresses.
    His personal one and weborders.
    weborders@hisdomain isn't advertised anywhere, its purely a repository.
    And hisdomain.com is only about 6 weeks old.

    Running a mail delivery report on 'hisdomain.com' shows emails going to weborders, some of which are spam.

    No other email addresses have been spoofed.
    So how did they find weborders@hisdomain.com
    I don't buy that they could have guessed it, otherwise, i'd be seeing failed emails going to sales@, admin@ or info@.

    Running a delivery report on one of the spam senders, shows that it sent to other email addresses, but none of which should have resulted in a forward.

    Again, i'm convinced that there is some sort of email harvesting hack.

    Both domains are on the same server by the way.
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,344
    Likes Received:
    1,854
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello :)

    You may want to consult with a qualified system administrator to have the server reviewed to determine if it's been hacked if that's what you suspect is happening.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice