wolstech

If you want to reset the Tommy account, just confirm that it's the Tommy account mortaine that you want reset and that you understand your data will be deleted, and we'll reset it.

(If you mean to buy a VPS with a different username, you can just buy it through our website. We don't need to do anything on our side if you're OK with a different username).

I agree it does look like it was hacked based on the mess they left in the account. 

Your account has been reset without a backup, and you'll receive an email shortly with instructions to start over.

There is a backup dated September 2, 2024 in our system that looks to still be clean if you need a good copy of your data to restore. You can download that here: https://heliohost.org/backup/

You would need to just buy the Mars VPS, install whatever server software you need, and move your files if you want to keep them. You can have both a Tommy account and a VPS too.

There is no direct migration path from a Plesk plan to any VPS plan, because the VPS comes as an empty Linux box with SSH access.

If you no longer need the Tommy account, you can delete it from the dashboard.

It’s banned for phishing because we received the following abuse report regarding the account. I took a look and it appears something on your account was compromised.
 

Because of the presence of stolen data, your account will need to be reset without a backup in order to be unsuspended, which will result in the loss of all of your data. Do you want me to reset your account?

Quote

 

Hello,

We have received notice of phishing content on the 65.19.154.90 IP address.

Please remove/disable the phishing content immediately and investigate
this issue.

If this is a compromised machine or account, please take care of the
underlying security vulnerabilities which were exploited.

If this is a user that opened an account for fraudulent purposes, please
permanently ban the user in question.

Once you have identified and resolved the issue, please reply to this
email with full details of resolution including specific steps taken to
prevent recurrence.

Please also CC abuse@thomsentrampedach.legal on your reply to this email.

If the phishing content is not removed promptly, we may
null route the 65.19.154.90 IP address.

Complaint:

Date: Thu, 12 Jun 2025 07:23:58 +0000
From: "abuse@thomsentrampedach.legal" <abuse@thomsentrampedach.legal>
Reply-To: abuse@thomsentrampedach.legal
To: support@he.net

---- Original message ----

 

 

Dear Team,

 

 

 

We were asked by the company DHL International GmbH to assist

with respect to trademark matters in domain or other online

issues. DHL International GmbH recently became aware that a

website hosted by your company is being used to impersonate the

official DHL International GmbH website.

 

The DHL website can be accessed here hxxps://www.dhl.com.

 

The URL

hxxps://cyclos.za.org/sys/app/index.php?userid=fdfc0a931fcba2de05775433ef9970e8&ue=5b0d2fc7049727e5e5aeebd1de37059f

is pointing to the 65.19.154.90 displaying a phishing

website impersonating the official web presence of DHL.

 

We have a good-faith belief that the use of the protected

material described above is not authorized by the right owner or

its agent, nor is such use otherwise permissible under law. The

information in this notification is accurate and we state, under

penalty of perjury, that we are authorized to act on behalf of

the right owner of an exclusive right that is allegedly

infringed.

 

Accordingly, given that the infringement is

unequivocally unlawful, we request your written assurances within

1 business day that you will suspend or terminate the hosting for

hxxps://cyclos.za.org/sys/app/index.php?userid=fdfc0a931fcba2de05775433ef9970e8&ue=5b0d2fc7049727e5e5aeebd1de37059f

immediately.

 

Please contact us with any questions or concerns that you may

have.

 

Respectfully,

 

Thomsen Trampedach

 

abuse@thomsentrampedach.legal

 

__________________________________________________________________________________________

 

THOMSEN TRAMPEDACH｜BIRKENSTRASSE 47. 6343 ROTKREUZ. SWITZERLAND

 

Please notice: This email (including any attachments) may contain

information that is private, confidential or otherwise legally

exempt from disclosure. This communication is intended only for

the use of the individual or entity named as a recipient above.

If you have received the communication in error, please delete

the communication without copying it or distributing it further.

Please notify the sender by reply email. Thank you in advance.

On my side, the system is showing that we did send you an invite for a Tommy account. I went ahead and resent it for you. If you don't see the email, please check your spam folder.

If you want everything deleted anyway, just resetting the account is a better choice.

Your account is looks like a legacy transfer account, so starting over would actually fix a bunch of bugs too.

That said, if you don’t want to reset your account, you want me to delete everything in the web root, correct?

Do you want us to remove files and free up space, or do you want the account completely reset (which deletes everything and gives you a new account)?

If you would prefer us to just delete something for you, let us know what you want removed and we can delete it and unsuspend you.

This account's balance is also negative. Notice sent by email, also posting it here:

Quote

Chekavo,

We just wanted to advise you that your Morty account balance has been used up. 

Your account is currently at -$0.1473. You will need to add additional funds to your account if you wish to remain on Morty. To do that, please send us a minimum of $5 via any of our donation methods ( https://heliohost.org/donate/ ) and let us know the transaction number so we can credit the account. 

You can review your account's billing history here: https://heliohost.org/dashboard/billing/

If we don't receive a response within 24 hours, your account will move to Tommy, which will make it subject to load and inactivity suspensions. 

Note that since you are using Cloudflare, your website will also go offline as a result of the move because the IP address of your account will change.

The backup we have on our side would restore the settings yes.

The backups you can make in Plesk is actually identical to the ones we make on our side, but since you don’t have a way to actually restore the settings piece of it, only the files and databases in it are actually useful (by extracting and uploading/importing them).

Yes I ran a new backup yesterday when you asked. Feel free to download it.
 

Backups/archives are typically made whenever we remove domains, reset accounts, move the account to another server, archive the account, upon user request, or if we troubleshoot an account in a way that risks breaking it or losing data. They otherwise aren’t made routinely.

This behavior is expected. Domains no longer include webmail by default.

If you want to use it, you have to explicitly turn it on in the mail settings for the domain, and then wait an additional two hours.

While we have the ability to restore them, backup and restore is not a service we officially offer. I've done it before for users, and we routinely make them for people, but we do not guarantee they'll actually work when you need it. We legally have to say this, otherwise someone could sue for data loss.

For example: If we reset your account it'll be overwritten with the state of the account immediately before the reset, if our server's hard disks go bad or we get ransomware (again) we may lose it, etc. We can't guarantee that they will actually be there when you need them, so even though we have a backup, you are expected to also have your own and be able to extract the files and upload them to fix your account if needed.

The easiest way to do this is to simply download the file from https://heliohost.org/backup/ and store it somewhere safe. We can always walk you through extracting it and manually setting up your account if it became necessary,

Most programming languages allow you to specify a time zone in your code. For example, PHP has date_default_timezone_set() that can be used to make your code work with another time zone.

Changing the actual server time or the Plesk timezone is not supported.

Looks like June 5. https://www.omm.com/insights/alerts-publications/economic-sanctions-relief-for-syria-provides-opportunities-and-risks-for-us-companies/

it does say that the lifting of sanctions is subject to change or be revoked, but that trade with Syria is currently authorized except for trade with people/companies on a specific list attached to the general license. Keep in mind that even if we do allow Syrian users, we would be required to ban them again in the event that the sanctions are reimposed. I'm also not sure whether our service would be prohibited due to export controls or not, which they said do still apply.

Escalating to Krydos to see what he says.

Created.

Please keep in mind however that, per our terms of service, HelioHost does not guarantee the availability of the service (including the ability to restore backups) and is not responsible for data loss of any kind. As such, we do not guarantee the availability, validity, accuracy, or completeness of any backup we may have. It is the users responsibility to maintain local backups and be capable of manually restoring their account, if needed.

Related email support case:

Morty accounts are exempt from the multiple account policy, so no exception is needed for that. 

Notes have been added to the account indicating that he gave approval for you to maintain it.

You're suspended for multiple accounts. Users are only allowed to have one account. The other account in this pair has already been kept per the request in this topic: https://helionet.org/index/topic/64718-solved-request-for-account-unsuspension/ 

Can you explain why you were seen logging into 2 accounts?

Yeah that can happen at times. If the server is experiencing high load, account creations (and maintenance tasks like inactivity notices/suspensions) are delayed until the load goes back down.

Domain changed. It may take up to two hours to function.

Your account has been reset. You'll receive an email to create a new account once the reset is complete.

If you need the data from your old account, it will be available for download at https://heliohost.org/backup/ shortly.

Do you want this domain to replace your main domain or do you want it added as a second domain?

Yes, you just have to enable remote access in Plesk. To do that, you edit the database user. The options for remote access are at the bottom of the permissions page.

Once it's enabled, you simply connect to tommy.heliohost.org:3306 with a client app.

We don't allow SSH on Plesk plans for security reasons. If you need that, you would have to switch to a VPS where you have an entire server to yourself.

Note that if you want to switch, a VPS comes as an empty Linux box, you would have to install all of the Web server software as well as your project. There's no control panel, or anything, though many people choose to install a free one like Hestia.

Account xdwolf has been merged into roxanne. It can take up to 2 hours for the domains associated with xdwolf to work correctly.

Please let us know if you need anything else.

Domains added. Please be sure to configure DNS for gbinoticias.com (either NS records pointed to ns1.heliohost.org and ns2.heliohost.org, or A and AAAA pointed to the IPs shown in Plesk).

The domains will take up to 2 hours to function.

Sure. You can download that backup through our website here: https://heliohost.org/backup/