Important: when posting, please provide your Club Number at a minimum, and as many details as possible.
For further info, please read This page before posting.

FTH responded to a change in Gmail behavior

Some club's will find some of their member email addresses were replaced by the 'noemail' placeholder. This was caused by a change at Gmail and FTH has made the necessary adjustments to restore function. Affected clubs will need to restore their member's email address. If there is a bounce count error with the address please let us know on the forums.

Possible site hack

  • area12carole@gmail.com
  • area12carole@gmail.com's Avatar Topic Author
  • Offline
  • New Member
  • New Member
  • Posts: 7
  • Thanks: 0

Possible site hack

1 year 3 months ago
#94412
I have been getting weird emails that make it seem like our site has been hacked. See attached for images of the last two. Any assistance would be appreciated. Thank you.
 
The topic has been locked.
  • Brian
  • Brian's Avatar
  • Offline
  • Administrator
  • Administrator
  • Posts: 11460
  • Thanks: 3744

Re: Possible site hack

1 year 3 months ago - 1 year 3 months ago
#94413
Without your club number we can do nothing for you.
Thank you,

Brian McDonald DTM
Silver and Wiser Online Toastmasters Club #777940

Technical Support Consultant for FreeToastHost
Last edit: 1 year 3 months ago by Brian.
The topic has been locked.
  • area12carole@gmail.com
  • area12carole@gmail.com's Avatar Topic Author
  • Offline
  • New Member
  • New Member
  • Posts: 7
  • Thanks: 0

Re: Possible site hack

1 year 3 months ago
#94414
Club # is 4413485. Thanks
The topic has been locked.
  • Brian
  • Brian's Avatar
  • Offline
  • Administrator
  • Administrator
  • Posts: 11460
  • Thanks: 3744

Re: Possible site hack

1 year 3 months ago
#94415
1) Those are spam emails impersonating your domain. The from IP is not the IP of the FTH server.

2) Emails from the FTH server come from agenda@toastmastersclubs.org or server@toastmastersclubs.org

3) The admin e-mail address is the e-mail of the current registered club website administrator for this club. Anyone can send messages to this address.
Thank you,

Brian McDonald DTM
Silver and Wiser Online Toastmasters Club #777940

Technical Support Consultant for FreeToastHost
The topic has been locked.
  • area12carole@gmail.com
  • area12carole@gmail.com's Avatar Topic Author
  • Offline
  • New Member
  • New Member
  • Posts: 7
  • Thanks: 0

Re: Possible site hack

1 year 3 months ago
#94416
I am a bit confused. Both of these emails came from server@toastmastersclubs.org
In the past, I have flagged certain email addresses as spam when I don't recognize the sender. But both of these appeared to be from a legitimate source.
Is there some action you would suggest I take? Thanks again.
The topic has been locked.
  • Brian
  • Brian's Avatar
  • Offline
  • Administrator
  • Administrator
  • Posts: 11460
  • Thanks: 3744

Re: Possible site hack

1 year 3 months ago
#94417
You can see where the email originated in the header
Code:
Return-Path: Received: fromwaimeatoastmasters.org (2736.ip-ptr.tech [5.181.3.107]

5.181.3.107 is not the IP of FTH

I have blocked that IP for now.


 
Thank you,

Brian McDonald DTM
Silver and Wiser Online Toastmasters Club #777940

Technical Support Consultant for FreeToastHost
The following user(s) said Thank You: NSB, area12carole@gmail.com
The topic has been locked.
Moderators: Brian, Heni, Pam, rhtaylor3, marc33, NotLiable, NSB, jgavin, Lcala305, peterb323, DebbieT
Time to create page: 0.143 seconds

Latest Forum Posts

Copyright © 2025 FreeToastHost 3 Support. All Rights Reserved.