[Solved] Problem Logging In And Renewing Password

[andydunn]

Hello,

 

it said my login was invalid and so I renewed password. The code I was emailed doesn't work, just keeps reloading the confirm code page! My username is andydunn.

 

Thanks,

 

Andy

[wolstech]

Stevie is bouncing up and down (probably a DDoS based on the appearance on the monitor). I'll reset your password and email it to you when he comes back online.

[andydunn]

Great, I'll let you know when that comes through, Thanks.

[wolstech]

OK...I don't see you listed in the firewall list, but it won't reset in the admin tools either.

 

Escalating.

[andydunn]

Interesting, right thanks for this.

[Byron]

If this is your account: thephysicszone.com You were suspended for spam.

[Krydos]

@wolstech, this account was suspended for spam while Cody was down so the ACP status didn't get set to suspended.

 

@andydunn, here are the reports we received regarding your account.

We have received a complaint about your account. Please investigate and fix within 24 hours.

Hurricane Electric Abuse Department
support@he.net

From scomp@aol.net  Thu Apr  7 05:00:32 2016
Return-Path: <scomp@aol.net>
X-Original-To: report@abuse.he.net
Delivered-To: report@abuse.he.net
Received: from smr-m04e.mx.aol.com (smr-m04e.mx.aol.com [204.29.186.193])
by abuse.he.net (Postfix) with ESMTPS id C43395403D5
for <report@abuse.he.net>; Thu,  7 Apr 2016 05:00:31 -0700 (PDT)
Received: from scmp-m010.mail.aol.com (scmp-m010.mail.aol.com [172.26.180.18])
by smr-m04e.mx.aol.com (AOL Mail Bouncer) with ESMTP id D134E380006F
for <report@abuse.he.net>; Thu,  7 Apr 2016 08:00:30 -0400 (EDT)
Received: from scomp@aol.net by scmp-m010.mail.aol.com; Thu, 07 Apr 2016 08:00:27 EDT
To: report@abuse.he.net
From: scomp@aol.net
Date: Thu, 07 Apr 2016 08:00:27 EDT
Subject: Email Feedback Report for IP 65.19.143.2
MIME-Version: 1.0
Content-Type: multipart/report; report-type=feedback-report; boundary="boundary-1138-29572-2659438-12230"
X-AOL-INRLY: stevie.heliohost.org [65.19.143.2] scmp-m010
X-Loop: scomp

--boundary-1138-29572-2659438-12230
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit

This is an email abuse report for an email message with the message-id of 5d1c2f7ec081368ca3d96bdc8ff4e503@thephysicszone.co.uk received from IP address 65.19.143.2 on Thu,  7 Apr 2016 07:10:46 -0400 (EDT)

For information, please review the top portion of the following page:
http://postmaster.aol.com/Postmaster.FeedbackLoop.php

For information about AOL E-mail guidelines, please see
http://postmaster.aol.com/Postmaster.Guidelines.php

If you would like to cancel or change the configuration for your FBL please use the tool located at: 
http://postmaster.aol.com/SupportRequest.FBL.php


--boundary-1138-29572-2659438-12230
Content-Disposition: inline
Content-Type: message/feedback-report

Feedback-Type: abuse
User-Agent: AOL SComp
Version: 0.1
Received-Date: Thu,  7 Apr 2016 07:10:46 -0400 (EDT)
Source-IP: 65.19.143.2
Reported-Domain: stevie.heliohost.org
Redacted-Address: redacted
Redacted-Address: redacted@


--boundary-1138-29572-2659438-12230
Content-Type: message/rfc822
Content-Disposition: inline

Return-Path: <catherine_stevens@thephysicszone.co.uk>
Received: from stevie.heliohost.org (stevie.heliohost.org [65.19.143.2])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mtaig-aae03.mx.aol.com (Internet Inbound) with ESMTPS id 6749C70000099
for <redacted>; Thu,  7 Apr 2016 07:10:46 -0400 (EDT)
Received: from andydunn by stevie.heliohost.org with local (Exim 4.82)
(envelope-from <catherine_stevens@thephysicszone.co.uk>)
id 1ao7q8-0003ct-C4
for redacted; Thu, 07 Apr 2016 04:10:42 -0700
To: redacted@aol.com
Subject: Wild 0rgy Invitation
Date: Thu, 7 Apr 2016 05:11:08 -0600
From: Catherine Stevens <catherine_stevens@thephysicszone.co.uk>
Message-ID: <5d1c2f7ec081368ca3d96bdc8ff4e503@thephysicszone.co.uk>
X-Priority: 3
X-Mailer: PHPMailer 5.2.9 (https://github.com/PHPMailer/PHPMailer/)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_5d1c2f7ec081368ca3d96bdc8ff4e503"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - stevie.heliohost.org
X-AntiAbuse: Original Domain - aol.com
X-AntiAbuse: Originator/Caller UID/GID - [35292 32003] / [47 12]
X-AntiAbuse: Sender Address Domain - thephysicszone.co.uk
X-Get-Message-Sender-Via: stevie.heliohost.org: authenticated_id: andydunn/from_h
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/andydunn/public_html/blog/wp-includes/js/gallery63.php 
X-Source-Dir: thephysicszone.com:/public_html/blog/wp-includes/js
x-aol-global-disposition: G
Authentication-Results: mx.aol.com;
spf=none (aol.com: the domain thephysicszone.co.uk appears to have no SPF Record.) smtp.mailfrom=thephysicszone.co.uk;
x-aol-sid: 3039ac1b0157570640361a01
X-AOL-IP: 65.19.143.2
X-AOL-SPF: domain : thephysicszone.co.uk SPF : none

--b1_5d1c2f7ec081368ca3d96bdc8ff4e503
Content-Type: text/plain; charset=us-ascii

I'd be delighted to share this night with you..

My body will be all yours!

I'm not kidding!

[ http://simpletermquote.com/session.php?b=62&2KLavBo=xJNFfPtcs6ZQih6wi&5uA=EhR&4J=i6rL ] Are you alone? Check this out, when you are..

Now you know how to find me!


--b1_5d1c2f7ec081368ca3d96bdc8ff4e503
Content-Type: text/html; charset=us-ascii

<html>
<body>
<br><br>
I'd be delighted to share this night with you..

My body will be all yours!

I'm not kidding!

<a href="http://simpletermquote.com/session.php?b=62&2KLavBo=xJNFfPtcs6ZQih6wi&5uA=EhR&4J=i6rL">Are you alone? Check this out, when you are..</a>
<br>
Now you know how to find me!
</body>
</html>



--b1_5d1c2f7ec081368ca3d96bdc8ff4e503--

--boundary-1138-29572-2659438-12230--

 

We have received a complaint about your account. Please investigate and fix within 24 hours.

Hurricane Electric Abuse Department
support@he.net

From scomp@aol.net  Thu Apr  7 08:17:46 2016
Return-Path: <scomp@aol.net>
X-Original-To: report@abuse.he.net
Delivered-To: report@abuse.he.net
Received: from smr-m04e.mx.aol.com (smr-m04e.mx.aol.com [204.29.186.193])
by abuse.he.net (Postfix) with ESMTPS id 2B987540218
for <report@abuse.he.net>; Thu,  7 Apr 2016 08:17:46 -0700 (PDT)
Received: from scmp-m007.mail.aol.com (scmp-m007.mail.aol.com [172.26.254.232])
by smr-m04e.mx.aol.com (AOL Mail Bouncer) with ESMTP id 805AD380015F
for <report@abuse.he.net>; Thu,  7 Apr 2016 11:17:45 -0400 (EDT)
Received: from scomp@aol.net by scmp-m007.mail.aol.com; Thu, 07 Apr 2016 11:17:44 EDT
To: report@abuse.he.net
From: scomp@aol.net
Date: Thu, 07 Apr 2016 11:17:44 EDT
Subject: Email Feedback Report for IP 65.19.143.2
MIME-Version: 1.0
Content-Type: multipart/report; report-type=feedback-report; boundary="boundary-1138-29572-2659438-23282"
X-AOL-INRLY: stevie.heliohost.org [65.19.143.2] scmp-m007
X-Loop: scomp

--boundary-1138-29572-2659438-23282
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit

This is an email abuse report for an email message with the message-id of 2c9d96e04238c6898c79bbdb257c8b6d@thephysicszone.co.uk received from IP address 65.19.143.2 on Thu,  7 Apr 2016 07:10:53 -0400 (EDT)

For information, please review the top portion of the following page:
http://postmaster.aol.com/Postmaster.FeedbackLoop.php

For information about AOL E-mail guidelines, please see
http://postmaster.aol.com/Postmaster.Guidelines.php

If you would like to cancel or change the configuration for your FBL please use the tool located at: 
http://postmaster.aol.com/SupportRequest.FBL.php


--boundary-1138-29572-2659438-23282
Content-Disposition: inline
Content-Type: message/feedback-report

Feedback-Type: abuse
User-Agent: AOL SComp
Version: 0.1
Received-Date: Thu,  7 Apr 2016 07:10:53 -0400 (EDT)
Source-IP: 65.19.143.2
Reported-Domain: stevie.heliohost.org
Redacted-Address: redacted
Redacted-Address: redacted@


--boundary-1138-29572-2659438-23282
Content-Type: message/rfc822
Content-Disposition: inline

Return-Path: <catherine_stevens@thephysicszone.co.uk>
Received: from stevie.heliohost.org (stevie.heliohost.org [65.19.143.2])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mtaig-aao01.mx.aol.com (Internet Inbound) with ESMTPS id 8D0E470000090
for <redacted>; Thu,  7 Apr 2016 07:10:53 -0400 (EDT)
Received: from andydunn by stevie.heliohost.org with local (Exim 4.82)
(envelope-from <catherine_stevens@thephysicszone.co.uk>)
id 1ao7qD-0003hG-3Y
for redacted; Thu, 07 Apr 2016 04:10:47 -0700
To: redacted@aol.com
Subject: Wild 0rgy Invitation
Date: Thu, 7 Apr 2016 05:11:13 -0600
From: Catherine Stevens <catherine_stevens@thephysicszone.co.uk>
Message-ID: <2c9d96e04238c6898c79bbdb257c8b6d@thephysicszone.co.uk>
X-Priority: 3
X-Mailer: PHPMailer 5.2.9 (https://github.com/PHPMailer/PHPMailer/)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_2c9d96e04238c6898c79bbdb257c8b6d"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - stevie.heliohost.org
X-AntiAbuse: Original Domain - aol.com
X-AntiAbuse: Originator/Caller UID/GID - [35292 32003] / [47 12]
X-AntiAbuse: Sender Address Domain - thephysicszone.co.uk
X-Get-Message-Sender-Via: stevie.heliohost.org: authenticated_id: andydunn/from_h
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/andydunn/public_html/blog/wp-includes/js/gallery63.php 
X-Source-Dir: thephysicszone.com:/public_html/blog/wp-includes/js
x-aol-global-disposition: G
Authentication-Results: mx.aol.com;
spf=none (aol.com: the domain thephysicszone.co.uk appears to have no SPF Record.) smtp.mailfrom=thephysicszone.co.uk;
x-aol-sid: 3039ac1b15015706403d1b56
X-AOL-IP: 65.19.143.2
X-AOL-SPF: domain : thephysicszone.co.uk SPF : none

--b1_2c9d96e04238c6898c79bbdb257c8b6d
Content-Type: text/plain; charset=us-ascii

I'd be delighted to share this night with you..

My body will be all yours!

I'm not kidding!

[ http://simpletermquote.com/session.php?j=62&c4=PZJBrMpLggQrR&5uA=KnR&4=Ji6rL ] Are you alone? Check this out, when you are..

Now you know how to find me!


--b1_2c9d96e04238c6898c79bbdb257c8b6d
Content-Type: text/html; charset=us-ascii

<html>
<body>

I'd be delighted to share this night with you..

My body will be all yours!
<br><br>
I'm not kidding!

<a href="http://simpletermquote.com/session.php?j=62&c4=PZJBrMpLggQrR&5uA=KnR&4=Ji6rL">Are you alone? Check this out, when you are..</a>
<br><br>
Now you know how to find me!
</body>
</html>



--b1_2c9d96e04238c6898c79bbdb257c8b6d--

--boundary-1138-29572-2659438-23282--

 

We have received a complaint about your account. Please investigate and fix within 24 hours.

Hurricane Electric Abuse Department
support@he.net

From scomp@aol.net  Thu Apr  7 11:50:06 2016
Return-Path: <scomp@aol.net>
X-Original-To: report@abuse.he.net
Delivered-To: report@abuse.he.net
Received: from smr-m03e.mx.aol.com (smr-m03e.mx.aol.com [204.29.186.195])
by abuse.he.net (Postfix) with ESMTPS id 57AEB540218
for <report@abuse.he.net>; Thu,  7 Apr 2016 11:50:06 -0700 (PDT)
Received: from scmp-m011.mail.aol.com (scmp-m011.mail.aol.com [172.26.180.19])
by smr-m03e.mx.aol.com (AOL Mail Bouncer) with ESMTP id 9FC9438000E1
for <report@abuse.he.net>; Thu,  7 Apr 2016 14:50:05 -0400 (EDT)
Received: from scomp@aol.net by scmp-m011.mail.aol.com; Thu, 07 Apr 2016 14:50:03 EDT
To: report@abuse.he.net
From: scomp@aol.net
Date: Thu, 07 Apr 2016 14:50:03 EDT
Subject: Email Feedback Report for IP 65.19.143.2
MIME-Version: 1.0
Content-Type: multipart/report; report-type=feedback-report; boundary="boundary-1138-29572-2659438-17691"
X-AOL-INRLY: stevie.heliohost.org [65.19.143.2] scmp-m011
X-Loop: scomp

--boundary-1138-29572-2659438-17691
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit

This is an email abuse report for an email message with the message-id of fc10061803a51ada7be08f63013718e7@thephysicszone.co.uk received from IP address 65.19.143.2 on Thu,  7 Apr 2016 09:02:24 -0400 (EDT)

For information, please review the top portion of the following page:
http://postmaster.aol.com/Postmaster.FeedbackLoop.php

For information about AOL E-mail guidelines, please see
http://postmaster.aol.com/Postmaster.Guidelines.php

If you would like to cancel or change the configuration for your FBL please use the tool located at: 
http://postmaster.aol.com/SupportRequest.FBL.php


--boundary-1138-29572-2659438-17691
Content-Disposition: inline
Content-Type: message/feedback-report

Feedback-Type: abuse
User-Agent: AOL SComp
Version: 0.1
Received-Date: Thu,  7 Apr 2016 09:02:24 -0400 (EDT)
Source-IP: 65.19.143.2
Reported-Domain: stevie.heliohost.org
Redacted-Address: redacted
Redacted-Address: redacted@


--boundary-1138-29572-2659438-17691
Content-Type: message/rfc822
Content-Disposition: inline

Return-Path: <anne_collins@thephysicszone.co.uk>
Received: from stevie.heliohost.org (stevie.heliohost.org [65.19.143.2])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mtaig-mab01.mx.aol.com (Internet Inbound) with ESMTPS id 9B4D47000008A
for <redacted>; Thu,  7 Apr 2016 09:02:24 -0400 (EDT)
Received: from andydunn by stevie.heliohost.org with local (Exim 4.82)
(envelope-from <anne_collins@thephysicszone.co.uk>)
id 1ao9aA-00075x-0b
for redacted; Thu, 07 Apr 2016 06:02:20 -0700
To: redacted@aol.com
Subject: Don't deny my sxxy call
Date: Thu, 7 Apr 2016 06:02:45 -0700
From: Anne Collins <anne_collins@thephysicszone.co.uk>
Message-ID: <fc10061803a51ada7be08f63013718e7@thephysicszone.co.uk>
X-Priority: 3
X-Mailer: PHPMailer 5.2.9 (https://github.com/PHPMailer/PHPMailer/)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_fc10061803a51ada7be08f63013718e7"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - stevie.heliohost.org
X-AntiAbuse: Original Domain - aol.com
X-AntiAbuse: Originator/Caller UID/GID - [35292 32003] / [47 12]
X-AntiAbuse: Sender Address Domain - thephysicszone.co.uk
X-Get-Message-Sender-Via: stevie.heliohost.org: authenticated_id: andydunn/from_h
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/andydunn/public_html/blog/wp-includes/js/gallery63.php 
X-Source-Dir: thephysicszone.com:/public_html/blog/wp-includes/js
x-aol-global-disposition: G
Authentication-Results: mx.aol.com;
spf=none (aol.com: the domain thephysicszone.co.uk appears to have no SPF Record.) smtp.mailfrom=thephysicszone.co.uk;
x-aol-sid: 3039ac1af94257065a60186c
X-AOL-IP: 65.19.143.2
X-AOL-SPF: domain : thephysicszone.co.uk SPF : none

--b1_fc10061803a51ada7be08f63013718e7
Content-Type: text/plain; charset=us-ascii

[ http://palanduzdermokozmetik.com/press.php?k=62&J=J8EQjWrHUn3EXDGdqKHVf&7xL=G8K&4Ji=6rL&photo" style="text-decoration: none; border: 0; ] 







[ http://palanduzdermokozmetik.com/press.php?k=62&J=J8EQjWrHUn3EXDGdqKHVf&7xL=G8K&4Ji=6rL&nickname" style="font-weight: bold; color: #1155cc; ] venice8
Your photos turn me on.. I am going to be alone these days.. Make me swoon asap! Be my l0ver, don't r...




[ http://palanduzdermokozmetik.com/press.php?k=62&J=J8EQjWrHUn3EXDGdqKHVf&7xL=G8K&4Ji=6rL&message" style="color:#FFFFFF;font-size:16px;line-height:16px;text-decoration:none;padding: 10px 15px;display:block;font-weight: bold; ] 
View Message



































Can't click? Move message to Inbox.

If you don't want to receive these emails in the future, please 
[ http://palanduzdermokozmetik.com/press.php?k=71&J=J8EQjWrHUn3EXDGdqKHVf&7xL=G8K&4Ji=6rL&unsubscribe" style="color: #6D7C85; ] unsubscribe.


--b1_fc10061803a51ada7be08f63013718e7
Content-Type: text/html; charset=us-ascii

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<html><head><title></title>
</head>
<body topmargin='0' bottommargin='0' align='center' leftmargin='0' rightmargin='0' style='-webkit-font-smoothing: antialiased;width:100% !important;background:#f3f3f3;-webkit-text-size-adjust:none;color: #333333;font-size:16px;font-family:Helvetica Nueue, Helvetica, Arial, sans-serif;'>
<span style="display:none!important;mso-hide: all;">
</span>
<table class="table" align="center" width="640" cellpadding="0" cellspacing="0" style="background: #FFFFFF;">
<tr>
<td height="5" style="background: #f4751e; width:100%;"></td>
</tr>
<tr>
<td height="20"></td>
</tr>
<tr>
<td valign="top" style="padding: 0 20px;">
<table width="100%" cellpadding="0" cellspacing="0">
<tr>

<td style="width: 100px;">
<a href="http://palanduzdermokozmetik.com/press.php?k=62&J=J8EQjWrHUn3EXDGdqKHVf&7xL=G8K&4Ji=6rL&photo" style="text-decoration: none; border: 0;">
<img src="data:text/plain;base64,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
zmq11dLFPGjfc6t/SrSlWQPGwI7EUNNI1ptNsil/jAAqheMyqSp+bip55sFuaoySCQYByc1cI9RVZK1ifTJnM5L8gL6Vr42D1HUGsrSxteU/7NaZOIz6AcUp/EYw2I16U7NMzxQDSAdmim5op2EaTEDAZgueAM9aJnEEeB99untWbPdvIAcBcdCOv50QSPKpZ2LEHHJqeXqatWQ4nuTSo+5AexqObLERj+L730qYLgYpmdyjdWguJSyvtfHfoarixvIc+U3B67WxWjICvzjt1pyvkVXO0i4wjLXqYb29w0m1wSx9TUotvITLNuY+nSr8/3gfekRRITkZA4qudtCcFG5Fpy583HU9KvucQn6AfrUUSCN8qAOc1LcEbOOhYVm9WStERE4qrNO5l8uM4wOT3+lWWqhKIzdOj/ACllBD/pz7VcUZyuKZsk/KfxY0VBNbXMblREXHZkzg0VrZEWkXpOoFT2f3X+tFFZPY6pEluNzMx6k4q2sSsOpoorOW5EdhksahSOapRHiiihbGkdxk/SpoFAiB9eaKKroKZJimT9E/3v6UUUluQ9hjdKzriV0mlVTjKAZ7iiitYbmUizbx+bCrs75IHAbjpRRRUtu5S2P//Z" alt=" " style="height: 100px; width: 100px;" valign="middle" border="0" />
</a>
</td>
<td width="20"></td>
<td valign="top">

<p style="font-size: 18px;margin: 0; padding-bottom: 20px; color: #333333;">
<a href="http://palanduzdermokozmetik.com/press.php?k=62&J=J8EQjWrHUn3EXDGdqKHVf&7xL=G8K&4Ji=6rL&nickname" style="font-weight: bold; color: #1155cc;">venice8</a>
Your photos turn me on.. I am going to be alone these days.. Make me swoon asap! Be my l0ver, don't r...
</p>
<table cellspacing="0" cellpadding="0">
<tr>
<td bgcolor="#178ef5" valign="middle" style="background:#56c218; border-bottom:3px solid #dddddd;border-radius:5px;-moz-border-radius:5px;-webkit-border-radius:5px;">
<a href="http://palanduzdermokozmetik.com/press.php?k=62&J=J8EQjWrHUn3EXDGdqKHVf&7xL=G8K&4Ji=6rL&message" style="color:#FFFFFF;font-size:16px;line-height:16px;text-decoration:none;padding: 10px 15px;display:block;font-weight: bold;">
View Message
</a>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td height="20"></td>
</tr>
<tr>
<td height="1">
<table width="100%" cellpadding="0" cellspacing="0" height="1">
<tr>
<td width="20"></td>
<td width="540" height="1" style="background: #e6e6e6;"></td>
<td width="20"></td>
</tr>
</table>
</td>
</tr>
<tr>
<td height="20"></td>
</tr>
<tr>
<td height="5" style="background: #777777; width:100%;"></td>
</tr>
<tr>
<td height="10"></td>
</tr>
<tr>
<td style="font-size: 11px;color:#777777;padding:0 20px;" width="100%">
<center>
<strong>Can't click? Move message to Inbox.</strong>
<br>
If you don't want to receive these emails in the future, please 
<a href="http://palanduzdermokozmetik.com/press.php?k=71&J=J8EQjWrHUn3EXDGdqKHVf&7xL=G8K&4Ji=6rL&unsubscribe" style="color: #6D7C85;">unsubscribe.</a>
</center>
</td>
</tr>
<tr>
<td height="20" style="background-color: #f3f3f3;"></td>
</tr>
</table>
</body></html>



--b1_fc10061803a51ada7be08f63013718e7--

--boundary-1138-29572-2659438-17691--

 

We have received a complaint about your account. Please investigate and fix within 24 hours.

Hurricane Electric Abuse Department
support@he.net

From scomp@aol.net  Thu Apr  7 17:21:06 2016
Return-Path: <scomp@aol.net>
X-Original-To: report@abuse.he.net
Delivered-To: report@abuse.he.net
Received: from smr-m03e.mx.aol.com (smr-m03e.mx.aol.com [204.29.186.195])
by abuse.he.net (Postfix) with ESMTPS id 27395540218
for <report@abuse.he.net>; Thu,  7 Apr 2016 17:21:06 -0700 (PDT)
Received: from scmp-d009.mail.aol.com (scmp-d009.mail.aol.com [172.29.189.78])
by smr-m03e.mx.aol.com (AOL Mail Bouncer) with ESMTP id 74CB33800097
for <report@abuse.he.net>; Thu,  7 Apr 2016 20:21:05 -0400 (EDT)
Received: from scomp@aol.net by scmp-d009.mail.aol.com; Thu, 07 Apr 2016 20:21:01 EDT
To: report@abuse.he.net
From: scomp@aol.net
Date: Thu, 07 Apr 2016 20:21:01 EDT
Subject: Email Feedback Report for IP 65.19.143.2
MIME-Version: 1.0
Content-Type: multipart/report; report-type=feedback-report; boundary="boundary-1138-29572-2659438-21274"
X-AOL-INRLY: stevie.heliohost.org [65.19.143.2] scmp-d009
X-Loop: scomp

--boundary-1138-29572-2659438-21274
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit

This is an email abuse report for an email message with the message-id of 26b1b2ae8d5253a30e23d3dbaed9a65e@thephysicszone.co.uk received from IP address 65.19.143.2 on Thu,  7 Apr 2016 08:00:22 -0400 (EDT)

For information, please review the top portion of the following page:
http://postmaster.aol.com/Postmaster.FeedbackLoop.php

For information about AOL E-mail guidelines, please see
http://postmaster.aol.com/Postmaster.Guidelines.php

If you would like to cancel or change the configuration for your FBL please use the tool located at: 
http://postmaster.aol.com/SupportRequest.FBL.php


--boundary-1138-29572-2659438-21274
Content-Disposition: inline
Content-Type: message/feedback-report

Feedback-Type: abuse
User-Agent: AOL SComp
Version: 0.1
Received-Date: Thu,  7 Apr 2016 08:00:22 -0400 (EDT)
Source-IP: 65.19.143.2
Reported-Domain: stevie.heliohost.org
Redacted-Address: redacted
Redacted-Address: redacted@


--boundary-1138-29572-2659438-21274
Content-Type: message/rfc822
Content-Disposition: inline

Return-Path: <mable_bates@thephysicszone.co.uk>
Received: from stevie.heliohost.org (stevie.heliohost.org [65.19.143.2])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mtaig-mbc02.mx.aol.com (Internet Inbound) with ESMTPS id D0F4470000099
for <redacted>; Thu,  7 Apr 2016 08:00:22 -0400 (EDT)
Received: from andydunn by stevie.heliohost.org with local (Exim 4.82)
(envelope-from <mable_bates@thephysicszone.co.uk>)
id 1ao8c4-0005uG-0j
for redacted; Thu, 07 Apr 2016 05:00:14 -0700
To: redacted@aol.com
Subject: Dp @nal T0night
Date: Thu, 7 Apr 2016 05:00:39 -0700
From: Mable Bates <mable_bates@thephysicszone.co.uk>
Message-ID: <26b1b2ae8d5253a30e23d3dbaed9a65e@thephysicszone.co.uk>
X-Priority: 3
X-Mailer: PHPMailer 5.2.9 (https://github.com/PHPMailer/PHPMailer/)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_26b1b2ae8d5253a30e23d3dbaed9a65e"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - stevie.heliohost.org
X-AntiAbuse: Original Domain - aol.com
X-AntiAbuse: Originator/Caller UID/GID - [35292 32003] / [47 12]
X-AntiAbuse: Sender Address Domain - thephysicszone.co.uk
X-Get-Message-Sender-Via: stevie.heliohost.org: authenticated_id: andydunn/from_h
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/andydunn/public_html/blog/wp-includes/js/gallery63.php 
X-Source-Dir: thephysicszone.com:/public_html/blog/wp-includes/js
x-aol-global-disposition: G
Authentication-Results: mx.aol.com;
spf=none (aol.com: the domain thephysicszone.co.uk appears to have no SPF Record.) smtp.mailfrom=thephysicszone.co.uk;
x-aol-sid: 3039ac1add8257064bd64154
X-AOL-IP: 65.19.143.2
X-AOL-SPF: domain : thephysicszone.co.uk SPF : none

--b1_26b1b2ae8d5253a30e23d3dbaed9a65e
Content-Type: text/plain; charset=us-ascii

My body is a heaven for any man.

Let's spend some time in my bathtub.

Aren't you going to ignore me?

[ http://begonyaespejo.es/ajax.php?k=62&7KgJ6qZVnAxW89b3BrWUf4=Ghd&5uA=JaK&4Ji=6rL ] Join this chatroom to discuss it

Wanna kiss you right now


--b1_26b1b2ae8d5253a30e23d3dbaed9a65e
Content-Type: text/html; charset=us-ascii

<html>
<body>

My body is a heaven for any man.
<br>
Let's spend some time in my bathtub.
<br><br>
Aren't you going to ignore me?

<a href="http://begonyaespejo.es/ajax.php?k=62&7KgJ6qZVnAxW89b3BrWUf4=Ghd&5uA=JaK&4Ji=6rL">Join this chatroom to discuss it</a>
<br>
Wanna kiss you right now
</body>
</html>



--b1_26b1b2ae8d5253a30e23d3dbaed9a65e--

--boundary-1138-29572-2659438-21274--

[andydunn]

I haven't set up any email accounts under @thephysicszone.com. It would appear somebody has managed to hack in and create email accounts to spam people. Are you able to delete these email accounts please? Also, how come I didn't receive an email to my main emailing address informing of this issue? Thanks for the continued help,

 

Andy

[wolstech]

/usr/bin/php /home/andydunn/public_html/blog/wp-includes/js/gallery63.php

It looks like WordPress got hacked. These messages were sent by PHP.

 

Hacked WordPress is probably the #1 cause of a spam suspension here at Heliohost. WP is infamous for it's security issues and the number of "free" themes/extensions that come with backdoors). I would recommend that you delete your entire WordPress site and replace it with another CMS. If you insist on keeping WordPress, avoid themes and extensions from dubious websites (they're "free" because they're supported by the malware/backdoor included them), and keep everything up to date.

[andydunn]

I put wordpress on ages ago just to try out and see if it was any good. Don't even use it, so can easily delete it. Cheers for finding the issues. If you can get me back onto cPanel then I can delete my wordpress folder. CHeers,

 

Andy

[wolstech]

Your account has been unsuspended. Please clean up the issue within 24 hours.

 

I'd also recommend you change your cPanel password and the passwords for any other software you have installed on your website.

[andydunn]

I believe I have deleted all the wordpress stuff. Is there a way for you to tell if I have deleted everything needed? Cheers,

 

Andy

 

...and the email user accounts they created, have they gone now? Thanks,

 

Andy

[wolstech]

They likely didn't create any email accounts (most of these spammers use PHP's mail() to send the spam), but to be sure, check in your cPanel mail accounts settings.

 

As for WP, the files are kept in three folders: wp-content, wp-includes, and wp-admin. Remove all 3 folders and their contents to get rid of it. Only other thing to do would be to drop the database.

 

Also, since I missed it earlier: We don't send emails for suspended accounts, only for ones that have gone inactive (and even then, many people have said it these often get sent to spam). Real people who actively use their accounts will see the notice and ask about their suspensions anyway.

[andydunn]

I forgot about the database! Ok, think all wordpress stuff is off now. It looks like there have been no email addresses been created. Thanks for your help. Hopefully the issue is now resolved for good. Sorry for the hassle, Andy