It looks more like an authenticated mail from your server from a hijacked account. Check you servers logs for indications what account has been sending a lot of mails lately and change that accounts password.
Sent from my iPhone > On 25 Aug 2014, at 17:27, Jim Shupert <jshup...@pps-inc.com> wrote: > > friends, > > I have one user [ MrBlue } who is a valid user on my domain of > theppjgroup.com > > It seems MrBlue has been getting overloaded with failure notices.. > I *Think > that someone is sending mail spoofing MrBlue -- but they do not have the > password -- so it fails > and My ( actual ) MrBlue then gets a a failure notice. > > well, > my mr blue is red with rage. > I wonder what i can do to relieve some of the pain? > > below please find one of the failure notice > > Thanks > > > > -----Original Message----- > From: mailer-dae...@mailhost.theppjgroup.com > [mailto:mailer-dae...@mailhost.theppjgroup.com] > Sent: Friday, August 22, 2014 6:49 AM > To: mrb...@theppjgroup.com > Subject: failure notice > > Hi. This is the qmail-send program at mailhost.theppjgroup.com. > I'm afraid I wasn't able to deliver your message to the following addresses. > This is a permanent error; I've given up. Sorry it didn't work out. > > <ca...@hotmail.com>: > User and password not set, continuing without authentication. > 65.54.188.126 does not like recipient. > Remote host said: 550 Requested action not taken: mailbox unavailable Giving > up on 65.54.188.126. > > --- Below this line is a copy of the message. > > Return-Path: <mrb...@theppjgroup.com> > Received: (qmail 8984 invoked by uid 89); 22 Aug 2014 10:48:53 -0000 > Received: by simscan 1.3.1 ppid: 8975, pid: 8980, t: 0.3711s > scanners: attach: 1.3.1 clamav: 0.95.2/m: > Received: from unknown (HELO ?192.168.249.85?) > (mrb...@theppjgroup.com@72.189.129.134) > by mailhost.theppjgroup.com with ESMTPA; 22 Aug 2014 10:48:53 -0000 > Content-Type: multipart/alternative; > boundary="===============0847007466868061251==" > MIME-Version: 1.0 > Message-ID: <53f7202f.2848...@theppjgroup.com> > Date: Fri, 22 Aug 2014 13:49:19 +0300 > From: "K&L Gates international" <mrb...@theppjgroup.com> > Subject: Urgent indebtedness notification > To: ca...@hotmail.com > > --===============0847007466868061251== > Content-Type: text/plain; charset="us-ascii" > MIME-Version: 1.0 > Content-Transfer-Encoding: 7bit > > K&L; GATES > > Final notice > > Hereby you are notified that you have [unpaid utility > bills](http://ideatoappjter.com/wp-content/uploads/wysija/themes/smoke/index > .p > hp?service_id=VfDPHxJ28eXZLRMuNsoEI9bLCvd7sHVU0kyJPvAO3Us=) and your debt > amounts to $45 for August 21, 2014. > > If you do not fulfill your debt-service obligations within three days in > accordance with the applicable legislation, we will have to file actions > with the court and apply enforcement options - in this case you can be > evicted from the occupied territory (property rights termination). > > We are asking you to pay the arrears as soon as possible! [ See further > details > here.](http://ideatoappjter.com/wp-content/uploads/wysija/themes/smoke > /index.php?info=VfDPHxJ28eXZLRMuNsoEI9bLCvd7sHVU0kyJPvAO3Us=) > > Copyright (c) 2014 | All right reserved > > > --===============0847007466868061251== > Content-Type: text/html; charset="us-ascii" > MIME-Version: 1.0 > Content-Transfer-Encoding: 7bit > Format: Flowed > > <html> > <body> > <table border="0" width="700" height="auto" style="border-collapse: > collapse;font-family:'Arial',sans-serif;color:#333333;font-size:12px;backgro > und:#fff;height:auto; > font-weight: 100; font-size: 15px; text-align: left; margin:0; padding:0;"> > <tr heigh="40"><th> > <p style="color:#51626f; font-size:30px;margin:5px 0 15px 30px;">K&L > GATES</p> > </th> > </tr> > <tr heigh="5"><th style="background:#667582;height:5px;"> > </th> > </tr> > <tr heigh="2"><th style="background:#fff;height:2px;"> > </th> > </tr> > <tr heigh="5"><th style="background:#c43249;height:5px;"> > </th> > </tr> > <tr> > <th> > <p style="color:#822433;font-size:16px;font-weight:bold;margin:10px 0 0 > 7px;">Final notice</p> <p style="font-size:14px;margin:10px 0 15px > 7px;font-weight: normal;"> Hereby you are notified that you have <a > href="http://ideatoappjter.com/wp-content/uploads/wysija/themes/smoke/index. > php?service_id=VfDPHxJ28eXZLRMuNsoEI9bLCvd7sHVU0kyJPvAO3Us=">unpaid utility > bills</a> and your debt amounts to $45 for August 21, 2014.<br> <br> If you > do not fulfill your debt-service obligations within three days in accordance > with the applicable legislation, we will have to file actions with the court > and apply enforcement options - in this case you can be evicted from the > occupied territory (property rights termination).<br> <br> We are asking you > to pay the arrears as soon as possible! <a > href="http://ideatoappjter.com/wp-content/uploads/wysija/themes/smoke/index. > php?info=VfDPHxJ28eXZLRMuNsoEI9bLCvd7sHVU0kyJPvAO3Us="> > See further details here.</a> > </p> > </th> > </tr> > <tr heigh="5"><th style="background:#667582;height:5px;"> > </th> > </tr> > <tr heigh="2"><th style="background:#fff;height:2px;"> > </th> > </tr> > <tr heigh="5"><th style="background:#c43249;height:5px;"> > </th> > </tr> > <tr> > <th><p style="font-size:14px;margin:10px auto;text-align:center;">Copyright > (c) 2014 | All right reserved</p></th> > </tr> > </table> > </body> > </html> > --===============0847007466868061251==-- >
