Spam hitting many customers
Question asked by Montague WebWorks - 12/8/2023 at 8:27 AM
Hey all, I am beginning to receive emails to some accounts on my server purporting to be me and supposedly confirming the person does want to delete their email account. In the past a couple of my customers had fallen for the "your annual domain listing fee" not realizing it's a scam, so I'm concerned that some may fall for this thing, too.

Is there any way to search all accounts for specific text, so I can see how widespread this is, and potentially block those emails? Text is below. The IP number is located in Hungary. Hah!



Dear Montague Webworks ,

Thank you for being a valuable customer for Montaguewebworks.Com.

Referring to your e-mail service deletion request, a ticket has been created and will take up to 72 Business Hours to complete this request.

Request was made on FrIday Dec 8, 2023 using “Dell Inspiron” IP (

Based on the new IP location, we found this as a matter of concern for the safety of you and your e-mail account, if you find this an error or an issue with your account.

To report this issue with your account and to stop service deletion, call support helpline at 1-682-626-8746

Simply ignore this e-mail if you want your account to be deleted and request will be executed within a span of time.

Please take necessary backups of all your Contacts, e-mails, and documents as no data can be recovered once account is deleted.

Assuring you of our best service at all times.

Account Support Team
Mik MullerMontague WebWorks

5 Replies

Reply to Thread
Ron Raley Replied
Mik, if you aren't able to figure out how to search for the text server-wide, try your SMTP / Delivery logs. If the messages share similar properties, you should be able to grasp the frequency of such emails. 
kevind Replied
Montague, vote for this thread if you haven't already:

Find and Delete Malicious Emails

EDIT: Just saw you had several posts on that thread, so guessing you already voted for it. :)
Montague WebWorks Replied
Ron, the two I received were from different email addresses and IP numbers. That's about all we can search on in the logs, I believe?
Mik MullerMontague WebWorks
Tony Scholz Replied
Employee Post

A good way to see how wide spread this is is to search the Message Archive if it is enabled on the server, This will give you a good idea of who got the message 

Thank you
Tony Scholz
System/Network Administrator
SmarterTools Inc.
(877) 357-6278
Montague WebWorks Replied
Right! Yes, I have two. I'll go check.
Mik MullerMontague WebWorks

Reply to Thread