Finding an email from old deleted account

Avatar
  • Answered
Reports of emails from an old deleted account landing in an existing staff email account caused me to search for aliases in the cpanel email section via trace an email. Email trace results in:

[email protected]
virtual_aliases via virtual router forced address failure

How can one pin this down further and or delete the alias? I can only clearly see how to delete forwards through the web gui.

Thank you
Avatar
johnpaulb-imhs1
Hello, Thank you for contacting us about receiving an email from a deleted account. Any email transmitted from your server will leave a log. I recommend reviewing your email logs via ssh. This will provide specific evidence into the origin of the email. If there is not record on the server, it could be possible spoofing. SPF records and Domain Keys can verify emails are delivered unmodified from the correct server. I would also check the client of the person who received the email as well. For example, it could be an issue with Outlook, MacMail, Thunderbird, etc. If you have any further questions, feel free to post them below. Thank you, John-Paul B