Originally Posted by Haugland

What scripts are you running on your site? Have you checked various folders for any unrecognized files or even folders you don't remember putting there?

I'm pretty sure e-mail from Surpass would be going through the main Surpass Hosting server. Also, note the e-mail adresses in the "From:" part. They're "service" and "admin" at your domain. I think that gives a pretty good clue someone else is sending these e-mails.

Also remember that it could potentially be another account on your server sending the e-mails.