Fraudulent Emails Sent -=your Hosting Is Suspended=- "this Is Spam" And Not From Admins At Trap. - Be aware that fake suspension emails are sent.

EricDrinkard

Mar 21 2005, 04:55 AM

Some one or some thing is sending out emails to the cpanel users of trap17.com stating that their account is suspended. The email looks legit, however your hosting credits and site are all ok. If you are having this problem please reply and state the situation.

(please do not reply if your hosting credits are not positive)

Thanks
Eric Drinkard

Amezis

Mar 25 2005, 02:54 PM

A quote from the email i received some hours ago:

QUOTE

Hello Amezis,

We are sorry to inform you that, your web hosting account at has been suspended due to your prolonged inactivity or Lack of Hosting credits. We had dispatched a warning email to all the members so that they could check their hosting credits.
[...]
If you want to un-suspend your hosting account, you will have to make posts at our forums and collect the required number of hosting credits. Once you have sufficient amount of credits, your account will be un-suspended automatically.
[...]

Then, I firstly checked my site. It was working well... Then I checked my hosting credits: 15.12 days...

So... What's happening?

If I'm breaking the TOS or something like that, please say it to me... But I don't think I'm doing that

NilsC

Mar 25 2005, 04:00 PM

It's a spam email that seem to come from a comptetitor. I have asked every member that receive one this emails to extract the header files so I can report them. If you still have the email and know how to extract it. please do so and PM or email the data to me.

Nils

Florisjuh

Mar 25 2005, 04:01 PM

Dont worry, its another spam email. Your hosting accaunt is safe and not suspended

talbotda13

Mar 25 2005, 06:35 PM

I have gotten several of those emails and i only kept one. i looked at my hosting credits here. ive been to mywebsite and everything so i just figured it was a non-sense spam email

guangdian

Mar 26 2005, 02:14 AM

CODE

It's a spam email that seem to come from a comptetitor.

The comptetior plays a role of hacker over & over again.I hope you should keep the server must safer! coz their highest achiver is to hack into your server & delete all they saw....

Amezis

Mar 26 2005, 03:11 PM

Ok, ok, thanks for the info. But the e-mail is hidden. <administrator@> is everything I get in "from:"....

Becca

Mar 26 2005, 03:15 PM

MAn that is soo cruel. Who would do such... the internet world is so dangerous and e e e e VIL.
Did it say it was from trap17.com ??

Galahad

Mar 26 2005, 03:21 PM

Well, I received a certain e-mail from "Management <administrator>", and I forwarded it to Trap 17 abuse email.

Here are full headers from that e-mail...

CODE

X-Apparently-To: =my_email=@yahoo.com via 216.155.196.65; Thu, 17 Mar 2005 00:05:54 -0800
Authentication-Results: mta140.mail.dcn.yahoo.com
from=; domainkeys=neutral (no sig)
X-Originating-IP: [69.50.187.114]
Return-Path: <trap17@dasher.psychz.net>
Received: from 69.50.187.114 (EHLO dasher.psychz.net) (69.50.187.114)
by mta140.mail.dcn.yahoo.com with SMTP; Thu, 17 Mar 2005 00:05:38 -0800
Received: from trap17 by dasher.psychz.net with local (Exim 4.44)
id 1DBpvF-0001LX-DW; Thu, 17 Mar 2005 00:00:01 -0800
To: =my_email=@yahoo.com
Subject: : HOSTING ACCOUNT SUSPENDED.
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
To:=my_email=@yahoo.com
From: Management <administrator@>
Date: Thu, 17 Mar 2005 00:00:01 -0800
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - dasher.psychz.net
X-AntiAbuse: Original Domain - yahoo.com
X-AntiAbuse: Originator/Caller UID/GID - [32257 32258] / [47 12]
X-AntiAbuse: Sender Address Domain - dasher.psychz.net
X-Source:
X-Source-Args:
X-Source-Dir:
Content-Length: 849

Now, I dont think that Trap 17 admins have administrator@ email... Nor that they would send account suspension notices from administrators e-mail... I could be wrong though...

However, trap17@dasher.psychz.net is definitely a suspicious e-mail address, for someone like Trap 17 to use

I mean, they provide web hosting, paid AND free, would they use some weird mail server, or just use something@trap17.com? Hope they catch this lamer

mahesh2k

Mar 26 2005, 04:35 PM

oh my god that is spam but who the hell can do this do you able to trace the domain name of email sender?

Latest Entries

BuffaloHELP

Sep 13 2005, 04:16 PM

QUOTE(BuffaloHELP @ Sep 12 2005, 08:33 PM)

When 69.50.188.18 fails, it will switch over to 69.50.188.19 and that is when psychz.net will be notified and send back the appropriate message.

...because 69.50.188.19 belongs to ns2.psychz.net. The email is originated from that site and since many of you have "catch all" as your setting in cPanel's email setting, you are receiving a message directed towards, i.e. anyone@yoursite.com. Since you do not host with psychz.net, they are sending you their version of error message. Using the correct nameserver for TRAP17 will correct this matter.

I'm not sure if you read my post but read it again. And I don't believe it's a marketing tactic from one of the competitors but a simply an error on some of our member's DNS setting. Or it could be that the IP used for ns1.trap17.com is a shared nameserver that hosts other nameservers. Nevertheless, it seems like this issue has been resolved.

----- Until another message like this is received, this topic is closed -----

nelimitat

Sep 13 2005, 03:51 PM

This is very rude to many people, because many could take this message as a true one and leave your services.

Have you found out the hosting company (competitor) that made this spam?

TripleH13

Sep 13 2005, 03:24 AM

well thanks for the info on this i hope this doesnt start happening again. But by seeing the topic is old and what you just said it seems done with

BuffaloHELP

Sep 13 2005, 12:33 AM

This topic was brought to my attention for being an old one. But I think I might know why emails were originated from psychz.net and to most TRAP17 users.

I was replying to one of our nameserver IP topic and noticed that some (few or less) members might be using IP address to enter as the namesever under their DNS control. And mistakenly ns1.trap17.com and ns2.trap17.com IP's are circulating as 69.50.188.18 and 69.50.188.19. This is incorrect check here to verify. The IP address of 69.50.188.19 belongs to ns2.psychz.net. If you have entered IP address as TRAP17 nameserver please do not use the second IP address. TRAP17's nameservers are:
ns1.trap17.com
ns2.trap17.com

And if you HAVE to use IP addresses, the correct IPs are:
64.5.44.113
209.152.167.59

Some have made a comment that using 69.50.188.18 and 69.50.188.19 works just fine. It's because the first nameserver (69.50.188.18) is resolving to your hosing account. When 69.50.188.18 fails, it will switch over to 69.50.188.19 and that is when psychz.net will be notified and send back the appropriate message.

crapoartworks

Sep 12 2005, 11:01 PM

Well, how you can spam people? well, there are services out there on the net that allow you to send joke emails using fake email addresses and people abuse that and spam.

ADD REPLY / Got an Opinion!	Remove these ADs!	RAPID SEARCH!	Free Web Hosting	[X]
Express your Opinions, Thoughts or Contribute more info. to help others. Ask your Doubts & Queries to get answers, So that "Together We can help others!"	Register FREE for AD-FREE forum, Create your own topics, Ask Questions, track topics, setup subscriptions & notifications and Get a Free Website w/ Email and FTP.		500MB Space No Ads, CPanel, FTP, PHP, MySQL, EMails - 100% FREE