Strange Return Emails...
Results 1 to 7 of 7

Thread: Strange Return Emails...

  1. #1

    Question Strange Return Emails...

    Hey all - for the past few weeks I've been getting these strange return emails in one of my web-based email accounts. They sometimes come from different sources, but the text is always the same:
    I'm afraid I wasn't able to deliver your message to the following addresses:

    Undeliverable to cwozntxuac@netmail.net
    The email address contained in the message body is sometimes different.

    Does anyone know what's going on here? I have no virii on my PC, and I just got done last week doing the usual 6-month format-the-hard-drive-and-reinstall-everything exercise. I get these messages at a rate of about two per week.

    Any insight would be helpful.

    Thx,

    l00p

  2. #2
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,324
    Are you sure it's not a friend with say the goldfish virus (which mimics an undeliverable email message)? Check the source IP of the email and see if that matches the IP of someone you know.
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage

  3. #3
    Banned
    Join Date
    Apr 2003
    Posts
    1,147
    Also, it is very likely that a Klez or other MM worm spoofed your address and you are getting the undeliverable message from the target system.

    Not much you can go about them. MSMitten's suggestion of looking at the internet headers of the email is a good idea. That will give you a trace of where the message came from and what route it took to get to you.

    You can take the IP information you get from the header and to go to:

    http://www.samspade.org/ssw/

    to check out the real origins.

  4. #4
    Thanks guys - I'll check into it.
    The web-based email I use is very security orientated (www.safe-mail.net), and provide detailed header information, as well tell me whom it actually came from, instead of the return addresses.

    The address this last one came from is not a familiar one. Should I contact this person..?

  5. #5
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,324
    Not necessarily. If it's a repeat, perhaps but it could be a sneaky way to collect email addresses for spam lists..
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage

  6. #6
    Banned
    Join Date
    Apr 2003
    Posts
    1,147
    Good call MSMittens.

    It is always the best to just delete these things. Ignore them. There are hundreds of ways and means to collect working email addresses, IPs and such. This is, probably, just another such item.

    Unless you have a compelling reason to want to contact the indiviual on the other end of this email, just hit delete.
    ;-)

  7. #7
    Looks like that'll be what I do. I'll just set up *another* spam filter..

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •