Return to Help Center

Welcome to the Bravenet Help Forums. Here you can chat and meet other Bravenet Members. Please do not post advertisements.

Forum: Mailing List Discussions
Start a New Topic 
  
Author
Comment
emails

I am receiving many emails daily which claim that "someone has signed your guestbook", but no-one has, it is protected behind an htaccess/htpasswd sign in

Here are the properties of one of them:

Return-path:
Envelope-to: david@poldurn.co.uk
Delivery-date: Sun, 06 Oct 2013 07:19:26 +0100
Received: from [212.159.9.108] (helo=avasin08.plus.net)
by inmx06.plus.net with esmtp (PlusNet MXCore v2.00) id 1VShgc-0007N4-4h
for david@poldurn.co.uk; Sun, 06 Oct 2013 07:19:26 +0100
Received: from hostmail7.bravehost.com ([65.39.211.89])
by avasin08.plus.net with Plusnet Cloudmark Gateway
id ZiKP1m0071wGtzV01iKRpx; Sun, 06 Oct 2013 07:19:26 +0100
X-CM-Score: 0.00
X-CNFS-Analysis: v=2.1 cv=WaA1NSRX c=1 sm=1 tr=0
a=aaqQi3NPCb74BHIhFUbDSg==:117 a=aaqQi3NPCb74BHIhFUbDSg==:17 a=mrZlZ2aCAAAA:8
a=0Bzu9jTXAAAA:8 a=nDghuxUhq_wA:10 a=cjLTm1V96rQA:10 a=pGLkceISAAAA:8
a=lbd0VSVhAAAA:8 a=sCcVmepOAAAA:8 a=FP_uPKZmFGMA:10 a=h1dzDq_sY2McdYHX-aoA:9
a=U1sdydmgUWsA:10 a=kdP5n8RjhIkA:10
X-Virus-Scanned: amavisd-new at bravehost.com
Received from generalmail@dsoba.co.uk)
by medusa25.vc.bravenet.com (mini_sendmail/1.3.9 03june2010);
Sat, 05 Oct 2013 23:19:21 PDT
(sender php@medusa25.vc.bravenet.com)
To: david@poldurn.co.uk
X-PHP-Script: www.dsoba.co.uk/poldurn/index.php for 120.198.230.9, 120.198.230.9
X-PHP-Originating-Script: 25279:index.php
From: gordon_barrington@gmail.com
Message-Id: <20131006061921.5A150158048@medusa25.vc.bravenet.com>
Date: Sat, 5 Oct 2013 23:19:21 -0700 (PDT)
X-PN-Virus-Filtered: by PlusNet MXCore (v5.00)
X-PN-Spam-Filtered: by PlusNet MXCore (v5.00)
Subject: Someone signed your guestbook
X-Antivirus: AVG for E-mail 2013.0.3408 [3222/6726]
X-AVG-ID: ID6F457EAD-114D641B

How do I stop these?

David Durnford
david@poldurn.co.uk

Re: emails

Per the open support ticket, this problem is with a 3rd party PHP script at the address indicated in the provided internet headers.

This is not related to our BraveMailer service, or any other Bravenet tool.