Spam send to wordpress@domain.tld

Hi all,

We are receiving many SPAM on info@domain.tld, send from wordpress@domain.tld. The header is:

Return-Path: <villarocca@domain.tld>
Delivered-To: info@domain.tld
Received: from server01.visuveel.nl
     by server01.visuveel.nl with LMTP
     id I2DLCsMRvl29JQAA72PkMA
     (envelope-from <villarocca@domain.tld>)
     for <info@domain.tld>; Sun, 03 Nov 2019 00:31:15 +0100
Return-path: <villarocca@domain.tld>
Envelope-to: info@domain.tld
Delivery-date: Sun, 03 Nov 2019 00:31:15 +0100
Received: from villarocca by server01.visuveel.nl with local (Exim 4.92)
     (envelope-from <villarocca@domain.tld>)
     id 1iR2rT-0001MK-2n
     for info@domain.tld; Sun, 03 Nov 2019 00:31:15 +0100
To: info@domain.tld
Subject: WordPress Site Name "Are You looking for discount cigarettes online?"
X-PHP-Originating-Script: 551:class-phpmailer.php
Date: Sat, 2 Nov 2019 23:31:15 +0000
From: Carlosignic <wordpress@domain.tld>
Reply-To: gagosmith62@gmail.com
Message-ID: <8f777d754c4d13bfcda8c6216b9468c5@www.domain.tld>
X-Mailer: PHPMailer 5.2.22 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8

As can be seen it’s send with PHP Mailer, but I don’t know if this means it’s not done by WordPress? Or are there WordPress parts that send by PHP Mailer?

And somebody has an idea about what to do now? Because of that I’ve been Googling and can’t find this issue anywhere.

De pagina waar ik hulp bij nodig heb: [log in om de link te zien]