If I'm sure the domain is not registered any more (since almost a year) I've deleted the FTP account to the folder of that "Addon Domain", deleted the folder, changed root cPanel's user password and assured the domain is not registered, but only left it's registry as Addon Domain...

  1. Could someone find a way through to re-create the folder and it's "injections" and "hacked" files without being me or the Hosting company itself?
  2. How could an intruder (person, malware or automated virus) find out the existence of this supposed domain when even the folder isn't existent in the file system?
  3. Why would someone want to inject malware to the folder of a domain that doesn't exists for a year already (other than doing a malware scam)?

If you could also answer how should someone register/capture digital scam proof to be legally sustainable and enough for building a case with a Consumer Protection Agency or even to take it to the court I would appreciate it lots.

Thanks in advance.

  • 2
    Just move your application elsewhere. Period. Preferably on your own self-managed server without cpanel.
    – EEAA
    Mar 7, 2017 at 2:09
  • 2
    Aside from that, getting legal advice here is very much off-topic. Enlist a lawyer if you need. Or at the very least, hire an expert systems/security person to help you out.
    – EEAA
    Mar 7, 2017 at 2:10
  • 3
    Also, you seem pretty sure that this is a scam. How sure are you that one or more of your applications aren't hacked and horribly vulnerable? Because that can cause the exact same symptoms.
    – EEAA
    Mar 7, 2017 at 2:13
  • 2
    You clearly do not trust this company, so why continue giving them business?
    – EEAA
    Mar 7, 2017 at 2:35
  • 1
    Oh yes, and our canonical compromised server QA, which @ceejayoz linked to.
    – EEAA
    Mar 7, 2017 at 2:42


Browse other questions tagged or ask your own question.