Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




4470 posts

Uber Geek


# 243533 16-Dec-2018 21:33
Send private message

I am getting a lot of these failed delivery emails to my xtra account ....

 

 

 

Hello, this is the mail server on bisko.win.

 

I am sending you this message to inform you on the delivery status of a

 

message you previously sent.  Immediately below you will find a list of

 

the affected recipients;  also attached is a Delivery Status Notification

 

(DSN) report in standard format, as well as the headers of the original

 

message.

 

In the attachment...

 

Reporting-MTA: dns;bisko.win
X-PowerMTA-VirtualMTA: mta-144.217.22.102
Received-From-MTA: dns;bwada3.xyz (144.217.22.102)
Arrival-Date: Fri, 7 Dec 2018 00:42:47 +0000

 

Final-Recipient: rfc822;zzzzzzzzzzzzzz@xtra.co.nz
Action: failed
Status: 5.7.1 (delivery not authorized)
Remote-MTA: dns;mx.xtra.co.nz (210.55.143.33)
Diagnostic-Code: smtp;554 5.7.1 Message rejected due to possible spam content
X-PowerMTA-BounceCategory: spam-related

 

 

 

Does this mean someone has my xtra email account settings like password? 

 

Or , is it just spam to confuse me? 

 

 

 

 


Filter this topic showing only the reply marked as answer Create new topic
6068 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

  # 2146290 16-Dec-2018 21:41
Send private message

Doesn't look legit



4470 posts

Uber Geek


  # 2146292 16-Dec-2018 21:47
Send private message

gehenna: Doesn't look legit

 

You mean these are not real failed delivery reports? 

 

I don't get why people would send these, what is the point? There is only the txt attachment which cannot store malware, no malicious links , maybe just to annoy for the fun of it?


 
 
 
 


3509 posts

Uber Geek


  # 2146297 16-Dec-2018 21:54
Send private message

It will be using your xtra account (nabbed in previous breaches) as the 'from' address.

 

While sending to another person with the recipient xtra address.

 

And for once, someones mail server is onto it. All those .win domains are commonly what sends the junk survey emails to/from xtra.

 

When its stopped, you get the notification being the apparent sender. My gmail is full of them ironically from the xtra servers attempting detecting spam as it tries to send my xtra aliases to gmail. But not as it arrived.

 

 

This message was created automatically by the mail system (ecelerity). A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed:

 

xxx (reading confirmation): 554 5.7.1 Message rejected due to possible spam content

 

Reporting-MTA: dns; xtra.co.nz Arrival-Date: Fri, 30 Nov 2018 22:28:53 +0000 Last-Attempt-Date: Fri, 30 Nov 2018 22:28:53 +0000 Remote-MTA: dns; 10.23.30.55 Diagnostic-Code: smtp; 554 5.7.1 Message rejected due to possible spam content Status: 5.7.1 Final-Recipient: rfc822; mygmailacct Action: failed


'That VDSL Cat'
11544 posts

Uber Geek

Trusted
Spark
Subscriber

  # 2146311 16-Dec-2018 21:58
Send private message

surfisup1000:

 

Reporting-MTA: dns;bisko.win

 

 

known for being hosted on a OVH server, reports for phishing and email scams.

 

 

 

That's also not how xtra bounces mails.





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.


3509 posts

Uber Geek


  # 2146313 16-Dec-2018 22:04
Send private message

hio77:

 

known for being hosted on a OVH server, reports for phishing and email scams.

 

 

 

That's also not how xtra bounces mails.

 

 

If theres binning globally from other hosts to Xtra because of this finally.. YUS!!!!

 

The number of flag-as-spam reports of the originating host being VPS/OVH hosted from the get go of that outburst that peeved everyone off should have instigated something quicker than it did


BDFL - Memuneh
65328 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  # 2146316 16-Dec-2018 22:17
One person supports this post
Send private message

Anyone can use any email on From: and Reply To: fields. Someone is sending using your email address so you receive the DND notifications. If in doubt, change your password, but likely unrelated.







4470 posts

Uber Geek


  # 2146317 16-Dec-2018 22:18
Send private message

OK, so there is nothing I can do about it. 

 

I think someone may have actually emailed me once, asking me to stop sending them spam.

 

But I can't do anything about it as it doesn't actually come from me. 

 

 


 
 
 
 


3509 posts

Uber Geek


  # 2146319 16-Dec-2018 22:20
One person supports this post
Send private message

surfisup1000:

 

OK, so there is nothing I can do about it. 

 

I think someone may have actually emailed me once, asking me to stop sending them spam.

 

But I can't do anything about it as it doesn't actually come from me. 

 

 

Not really. As an analogy.. 

 

You can slap on a stamp and post a letter of hatemail to someone you don't like. And put your bad santa uncles name and address on the back as a return to sender address.

 

It doesn't mean too much to prove if it was the actual sender..


3509 posts

Uber Geek


  # 2146660 17-Dec-2018 20:01
Send private message

And if you needed more assurance..

 

One I got today

 

from:Xmas Specials <service @ bisko.win>

 

 

 

Of course it was dropped on the outgoing attempt not the inbound.


22896 posts

Uber Geek

Trusted
Subscriber

  # 2146663 17-Dec-2018 20:07
One person supports this post
Send private message

surfisup1000:

 

gehenna: Doesn't look legit

 

You mean these are not real failed delivery reports? 

 

I don't get why people would send these, what is the point? There is only the txt attachment which cannot store malware, no malicious links , maybe just to annoy for the fun of it?

 

 

Get you to click links in the fake bounce to give you malware. Nosy people want to see what they allegedly sent and its from what I was told a very effective way to get clicks.





Richard rich.ms

Filter this topic showing only the reply marked as answer Create new topic



Switch your broadband provider now - compare prices


Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Ring launches indoor-only security camera
Posted 23-Jan-2020 17:26


New report findings will help schools implement the digital technologies curriculum content
Posted 23-Jan-2020 17:25


N4L to upgrade & support wireless internet inside schools
Posted 23-Jan-2020 17:22


Netflix releases 21 Studio Ghibli works
Posted 22-Jan-2020 11:42


Vodafone integrates eSIM into device and wearable roadmap
Posted 17-Jan-2020 09:45


Do you need this camera app? Group investigates privacy implications
Posted 16-Jan-2020 03:30


JBL launches headphones range designed for gaming
Posted 13-Jan-2020 09:59


Withings introduces ScanWatch wearable combining ECG and sleep apnea detection
Posted 9-Jan-2020 18:34


NZ Police releases public app
Posted 8-Jan-2020 11:43


Suunto 7 combine sports and smart features on new smartwatch generation
Posted 7-Jan-2020 16:06


Intel brings innovation with technology spanning the cloud, network, edge and PC
Posted 7-Jan-2020 15:54


AMD announces high performance desktop and ultrathin laptop processors
Posted 7-Jan-2020 15:42


AMD unveils four new desktop and mobile GPUs including AMD Radeon RX 5600
Posted 7-Jan-2020 15:32


Consolidation in video streaming market with Spark selling Lightbox to Sky
Posted 19-Dec-2019 09:09


Intel introduces cryogenic control chip to enable quantum computers
Posted 10-Dec-2019 21:32



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.