Free credit slot Philippines.Makakuha ng libreng 700pho sa bawat deposito

Password recovery email with different website URL

WordPMTL — Thu, 23 Nov 2017 14:11:12 +0000

I received a password-recovery email this morning for a client website. The email came from my server, and the subject and first line looked normal:

Subject: [My Client Website] Password Reset
Body: Someone has requested a password reset for the following account: https://www.myclientwebsite.com

However, the email address the email came from used a different and unknown URL:

[email protected]

And the password reset URL was for the same unknown URL:

T`o reset your password, visit the following address:
<https://example.net/wp-login.php?action=rp&key=xsdasdasdasdas&login=admin>`

I have never seen this URL example.net, and I searched that client website database for the string and it didn’t appear.

Any help would be appreciated.

Reply To: Password recovery email with different website URL

Jan Dembowski — Thu, 23 Nov 2017 14:16:06 +0000

Can the client access the site? If yes, then you can just disregard the email.

Reply To: Password recovery email with different website URL

WordPMTL — Thu, 23 Nov 2017 17:55:55 +0000

Hi Jan. Yes, the client and I can both access the site. But I find it strange that a website I host would send an email from my server with an altered domain name in the “from” address and the recovery URL. How can these things be manipulated when submitting a password recovery form?

Reply To: Password recovery email with different website URL

WordPMTL — Tue, 28 Nov 2017 22:44:53 +0000

Hi Jan, did you have a chance to see my reply? Thanks.