Hello . . . I routinely get a small amount or spam to my domain's e-mail addresses. However, sometimes, when I look at the headers (which I realize can be spoofed), the originating domain appears to be a GoDaddy server. My concern is that it might be originating from my own account (even though there's nothing in the Sent folder). I'm pasting the beginning (and I hope relevant) headers from a recent one below as an example (I put "xxxxx" in place of my domain):
From - Sat Dec 17 02:26:45 2016 X-Account-Key: account1 X-UIDL: 1481956961.176129.p3plgemini12-09.prod.phx.3084343040 X-Mozilla-Status: 0000 X-Mozilla-Status2: 00000000 X-Mozilla-Keys: Received: (qmail 28464 invoked by uid 30297); 17 Dec 2016 06:42:41 -0000 Received: from unknown (HELO p3plibsmtp01-04.prod.phx3.secureserver.net) ([220.127.116.11]) (envelope-sender <email@example.com>) by p3plsmtp12-06.prod.phx3.secureserver.net (qmail-1.03) with SMTP for <contact@[xxxxxxxxx].com>; 17 Dec 2016 06:42:41 -0000 Received: from reaccount.us ([18.104.22.168]) by p3plibsmtp01-04.prod.phx3.secureserver.net with bizsmtp id Luig1u07S0Jbp0T01uihT5; Fri, 16 Dec 2016 23:42:41 -0700 Received: from [10.100.30.41] ([10.100.30.41:12205 ] helo=app1) by ymmta0 (envelope-from <SEA8XOOC.8YTY@response.wordfly.com>) (ecelerity 22.214.171.124097 r(Platform:126.96.36.199)) with ESMTP id 85/A1-58123-VNDTUDXO; Fri, 16 Dec 2016 23:40:15 -0700 X-Binding-ID: SEARCH Message-ID: <12.Q5.60651.Z5766P41@wfmta3> MIME-Version: 1.0 From: "=?utf-8?B?zpfQvm3QtSBX0LByctCwbnTRgyBTcNC10YHRltCwbA==?=" <firstname.lastname@example.org> TO:
My questions: (1) could this be from my account? (2) if so, what are the steps I can take to better secure my account?
My apologies if this is the wrong forum for such a question. Thanks for any information.
This is a public forum.
In order to establish if those emails originated from your server you will have to contact a GoDaddy customer service representative who can access and investigate your hosting account.
I hope this will help you.
Recently I have been getting spam emails and did not seem to be able to block them. I contacted Godaddy technical service and they said there is no way to block the IP address. The email is originated from the same place with the first part of the IP address is the same and then 5 different numbers after the first 7.The first part of the IP address on these is 10.100.30.41:?????. Each email has a different email address that is not a legitimate domain so there seems no way to block them.
After discussing this with your technical department, I was managing my Premium Plus Email accounts and a hacker has been in my account and found all the addresses at my domain and is sending these emails to them also.
Is there any way to block these?