how to track UUID found in outbound email queue?

[humptydumpty]

In my CR dashboard > Email > Queue > there was an email that failed 11 times and clicking on it shows the following details. I'm trying to see where it came from, but there's no FROM address, so my next option is to locate the app that sent it via the UUID shown.

Am I on the right track? If so, is there a way to easily see the UUID (+ some other identifier like the app type/name) of all installed apps easily?

{
  "file": "1688497136465_1688628809604_11_61_juFC0j_24_e1aa766f4f3f",
  "uuid": "8C2F1469-B622-4AEE-B959-70C2B983443D.1",
  "queueTime": 1688497136465,
  "domain": "intuits.net",
  "mailFrom": "<>",
  "rcptTo": [
    "<quickbooks_payroll_service@intuits.net>"
  ],
  "arrivalTime": 1688497136465,
  "nextAttemptTime": 1688628809604,
  "attempts": 11,
  "queueType": "tempfail"
}

Edit: The UUID in the email log doesn't match any of my app UUID's. Just went through each app and checked in the dashboard > app > storage > shows app UUID on the right.

[girish]

@humptydumpty The uuid is generated by haraka for each SMTP connection. It's not related to the app id.

When mailFrom is <> , it means that it is a bounce email. Cloudron is trying to send a bounce email to intuits.net but is unable to (and this is because that domain has no MX record).

That file is probably there in the mail queue - https://docs.cloudron.io/email/#mail-queue . Have you checked that UI already?

[humptydumpty]

Ah, I see. The code I pasted above is from the QUEUE UI after I clicked on the only entry that was there. I know it's a spam message, but I'd like to figure out which one of my apps is sending this email. I didn't see any "files" in the queue entry though, so I'm unsure what the file is/contains. Is this normal not to have a FROM address? If it shows up in the QUEUE, does that mean a spammer is trying to spoof my addresses or is one of my apps actually sending that mail?

[girish]

Can you check the file in the mail-queue ? For this, see the contents of /home/yellowtent/boxdata/mail/haraka-queue directory. Are there any files there? You can inspect the mail there.

[humptydumpty]

No, nothing there. It might have gotten deleted when I cleared the message from the email queue days ago. I don't care about the file as much as knowing from which app did that message originate from. It's probably from the WP app, but I'd like a sure way to tell. I'm guessing there are no tools to trace it back to the app. Oh well.