on random and not-rare-enough occasion, i will get bursts of like 20-30 "mail delivery error" emails. its horrible, but i get spam everywhere, so i think nothing of it.
however, recently, my host temporarily suspended my account because of reports that i had a script phishing emails. i went through my folders and couldn't see anything blatant, but they persist.
the best we can do to locate the problem is in my boards. i could just delete and clean install, but its a heavily modded beast, and i'd hate to lose all the pretty colors.
any advice or suggestions on how to slay the phish monster?
if it helps, here are some headers of an email supposedly sent from me:
--------------------------
Your account has been suspended for sending out phishing mail and blacklisting
the server.
The following is a sample of such mail.
X-HmXmrOriginalRecipient:
[email protected]X-Message-Status: n:0
X-SID-PRA:
[email protected]X-Message-Info:
txF49lGdW42nHkihnciyRA8dt81i40jVQoEjQRmnHBETj6spJfUCESeFy9SXv0na
Received: from cerebus.lunarpages.com ([209.200.254.239]) by
bay0-mc7-f21.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668);
Mon, 7 May 2007 09:47:29 -0700
Received: from robkam2 by cerebus.lunarpages.com with local (Exim 4.63)
(envelope-from
)
id 1Hl6Mz-0002se-7m
for [email protected]; Mon, 07 May 2007 09:47:29 -0700
To: [email protected]
Subject: Your payment has been sent
From: [email protected]
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
Message-Id:
Date: Mon, 07 May 2007 09:47:29 -0700
X-AntiAbuse: This header was added to track abuse, please include it with any
abuse report
X-AntiAbuse: Primary Hostname - cerebus.lunarpages.com
X-AntiAbuse: Original Domain - hotmail.com
X-AntiAbuse: Originator/Caller UID/GID - [32539 32003] / [47 12]
X-AntiAbuse: Sender Address Domain - cerebus.lunarpages.com
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php
X-Source-Dir: robkamphausen.com:/public_html/ubbthreads
Return-Path: [email protected]
X-OriginalArrivalTime: 07 May 2007 16:47:29.0277 (UTC)
FILETIME=[66502AD0:01C790C7]
--------------------------
