Dear all,
Some users occasionally receive an e-mail notification from postmaster@mydomain.com e-mail address even though we don’t have such. Could you clarify what does this e-mail stand for? is it a system e-mail address using by Exchange mail filters?
Example of an e-mail:
This message was created automatically by mail delivery software. Your email message was not delivered to the intended recipients because malware was detected.
--- Additional Information ---
Subject: SPAM: [SUSPECTED SPAM] ...... An Important Concern about your Membership ....
Sender: customerservice.A.M.E.X.express.update.us1@irtc.net
Time received: 12/18/2016 2:08:51 PM
Message ID: <14820674458af61a23ddb77b0c2d4820d64f4af093_@irtc.net>
Detections found:
Upgrade MemberPage.htm JS/Phish.U
The header of the e-mail below:
Received: from Exchange01.mydomain.com (10.110.110.4) by
Exchange01.mydomain.com (10.110.110.4) with Microsoft SMTP Server
(TLS) id 15.0.1104.5 via Mailbox Transport; Sun, 18 Dec 2016 19:08:51 +0500
Received: from SmtpServer.Submit by EXCHANGE01 with Microsoft SMTP Server id
15.0.1104.5; Sun, 18 Dec 2016 14:08:51 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
From: Postmaster <postmaster@mydomain.com>
To: <user@mydomain.com>
Subject: Undeliverable message
Content-Transfer-Encoding: quoted-printable
Message-ID: <5370a8cc-018a-438e-a286-f6616df39568@EXCHANGE01.mydomain.com>
Return-Path: postmaster@mydomain.com
Date: Sun, 18 Dec 2016 19:08:51 +0500
X-MS-Exchange-Organization-AuthSource: EXCHANGE01.mydomain.com
X-MS-Exchange-Organization-AuthAs: Internal
X-MS-Exchange-Organization-AuthMechanism: 05
X-MS-Exchange-Organization-Network-Message-Id: bb762d52-3494-4225-861d-08d4274f64e4
X-MS-Exchange-Parent-Message-Id: <14820674458af61a23ddb77b0c2d4820d64f4af093_@irtc.net>
Auto-Submitted: auto-generated
X-MS-Exchange-Generated-Message-Source: Malware Agent
X-MS-Exchange-Organization-AVStamp-Enterprise: 1.0
Thank you in advance.
