Hey there,

I am really sorry for the delay of this reply as it is a weekend for us here.

Perhaps you can try consult with them and see is there a way to trace which kind of email (email content) it trying to process the email when someone visit on the site? I mean is it possible to check the previous history from the mail server log.

By the way, I did checked on your site, so far I only see you have enable the 'send email on page load' on Easyblog extension, and I already help you temporary disable this, can you ask your hosting monitor and see whether still hitting the same?

If yes, I think that will be the Payplans extension, because if you enable 'Enable Automated Cron' (http://take.ms/RrOhq), it will automatically process the cron URL when someone visit on the page, you can disable this setting and ask your hosting to monitor again.

If everything is fine, then you have to ensure that you have disabled those setting and setup Easyblog and Payplans cronjob on your server, so it will not process anything cronjob when someone visit on the site, it will only process the cronjob according what you configure the cron time interval on the server.

Easyblog Cronjob command
[gist type="php"]
/usr/bin/wget -O /dev/null "http://yoursite.com/index.php?option=com_easyblog&cron=1";
[/gist]

Payplans Cronjob command
[gist type="php"]
/usr/bin/wget -O /dev/null "http://yoursite.com/index.php?option=com_payplans&view=cron&task=trigger";
[/gist]

Note : if you already setup this for Easydiscuss or Easysocial, perhaps you can compare how you setup those wget/curl path for Easysocial/Easydiscuss, so you can using the same path setup for Easyblog and Payplans, but the site URL have to use it as what I shown you at above.