Send me the full headers of a sample Junk’d email, and you won’t have to guess. Sorry, was a bit under the weather over the weekend.
Aloha, Michael. -- Michael J Wise Microsoft Corporation| Spam Analysis "Your Spam Specimen Has Been Processed." Got the Junk Mail Reporting Tool<http://www.microsoft.com/en-us/download/details.aspx?id=18275> ? From: mailop <mailop-boun...@mailop.org> On Behalf Of Nick Stallman Sent: Monday, March 11, 2019 11:04 AM To: Laura Atkins <la...@wordtothewise.com> Cc: mailop@mailop.org Subject: Re: [mailop] Certain addresses from G Suite going straight to O365 spam Nope this is 100% manual email sent to people who have specifically asked to be contacted (either via website form, phone or email). No templates, cold emails or other nonsense like that at all. The three main people affected was a sales person, someone who does a little bit of sales but not the majority (these two both had Hubspot) and a project manager who's never used any kind of tracking at any point. I'm with you, it would make perfect sense for Office 365 to block automated or semi-automated email like that. That's why it's so puzzling that regular human B2B email would be blocked like this. On 11/3/19 8:18 pm, Laura Atkins wrote: What type of mail are they sending? These wouldn’t happen to be part of your sales team who are sending cold emails to addresses they’ve … acquired through different pathways, would it? Given they’re inserting tracking links from Hubspot, it seems there is some level of outbound cold email going out. And, frankly, good on Office365 for blocking it. I have yet to find a business person who enjoys getting dozens of “hey, we think our product is Just Right For YOU! Schedule a call today! Here’s the link.” If that’s what they’re sending, be happy that Office365 is carefully blocking just their mail, rather than all the mail from your domain. laura On 11 Mar 2019, at 04:35, Nick Stallman <n...@agentpoint.com<mailto:n...@agentpoint.com>> wrote: Thanks Richelo. I did examine some emails that were being blocked and yep two staff were using Hubspot's email tracking. So that very much is a possibility as being the culprit or a contributing factor. A few weeks ago I told them to disable that tracking however with no improvement. The odd thing is other affected staff haven't used link tracking at all, and there are a lot of staff not affected all on the same domain. On 11/3/19 3:21 pm, Richelo Killian wrote: I have seen something similar for some of our clients, and it turned out to be a Gmail Chrome plugin they used for tracking. I can’t remember the exact plugin, but, it was changing all links in the email to the plugin tracking domain, and that domain was blacklisted at Microsoft. So, first thing is to check if those users have any kind of Chrome plugin for Gmail active and disable them and test again. Not saying this IS the problem, but, it’s a place to start looking ;-) Kind Regards, Richelo Killian From: Nick Stallman <n...@agentpoint.com><mailto:n...@agentpoint.com> Reply: Nick Stallman <n...@agentpoint.com><mailto:n...@agentpoint.com> Date: March 11, 2019 at 01:16:19 To: mailop@mailop.org<mailto:mailop@mailop.org> <mailop@mailop.org><mailto:mailop@mailop.org> Subject: [mailop] Certain addresses from G Suite going straight to O365 spam Has anyone come across a strange issue with O365's spam filter, where some addresses on a domain go straight to spam but other addresses don't, when they are all G Suite addresses? We've noticed 3 of our staff have their emails reliably going straight to spam for O365 destinations, but everyone else can send emails just fine. The affected users are all using Gmail directly (no email clients), nothing fancy at all and I can't see any reason why they would have been affected. I'm at a bit of a loss as to where to go from here: - DKIM, DMARC and SPF are all set up correctly - G Suite support wasn't much help as the emails are being delivered correctly, and they verified DKIM, DMARC and SPF. - We've got SNDS for our mail server (for our servers) of course, but these emails are being delivered directly through GMail not our own servers. - I can't use the form to open a ticket for Outlook.com<https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Foutlook.com%2F&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814802989&sdata=s%2FVoFspPDT%2FptHKuaARzSOHc4xRpn8ydD0jwsisWdvM%3D&reserved=0> delivery issues as our servers aren't doing the sending, and there aren't any logged errors (the emails aren't being rejected). - No bulk marketing or anything has been sent from the affected users, so I can't imagine anyone would have manually marked emails as spam. - This issue occurs to all client O365 domains, I've looked at about a dozen different destination O365 domains. It's all a very weird scenario. Any suggestions would be appreciated. -- Nick Stallman TECHNICAL DIRECTOR [Image removed by sender. Email] n...@agentpoint.com<mailto:n...@agentpoint.com> [Image removed by sender. Phone] 02 8039 6820<tel:0280396820> [Image removed by sender. Website] www.agentpoint.com.au<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.agentpoint.com.au%2F&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814802989&sdata=Bso3mO7xLVWtaI5HQQ3yEva3clmaKYcquHWNhhOWOz8%3D&reserved=0> [Image removed by sender. Agentpoint]<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.agentpoint.com.au%2F&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814812984&sdata=jIqOLmyytrFG%2Bh6DMipeFW7s0DQs0GXqvMiGYCvD%2FC4%3D&reserved=0> [Image removed by sender. Netpoint]<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fnetpoint.group%2F&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814812984&sdata=t9dAf00Y9WNIRKfp4K%2BjjJhEvS9UZlCGNFOqAnTH8FE%3D&reserved=0> Level 3, 100 Harris Street, Pyrmont NSW 2009 [Image removed by sender. Facebook]<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.facebook.com%2Fagentpoint%2F&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814822978&sdata=HP8CwsRmMuEaA7%2Fy9hEz6Yx12f6B2D74IbWPo5fnEsA%3D&reserved=0> [Image removed by sender. Twitter] <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2Fagentpoint&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814822978&sdata=0nvbhX5d8C5rUUZqBfsQTIa5ARx%2Blk%2FPYK91tVm%2BNck%3D&reserved=0> [Image removed by sender. Instagram] <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.instagram.com%2FAgentpoint%2F&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814832972&sdata=NoFPjuZqCEZ4mMbTpbq2xqbkVFvAvrcT8adZ9RKO7IM%3D&reserved=0> [Image removed by sender. Linkedin] <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fagentpoint-pty-ltd&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814832972&sdata=j3slRi5MR6EQrkLxsn7TQyFcA2m6gcNiAx1Q0qZSP6I%3D&reserved=0> _______________________________________________ mailop mailing list mailop@mailop.org<mailto:mailop@mailop.org> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fchilli.nosignal.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fmailop&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814832972&sdata=MYriGCKVvMtiI5p3liPCDRD4HbKFTCNDy5q9eCB1oDU%3D&reserved=0> _______________________________________________ mailop mailing list mailop@mailop.org<mailto:mailop@mailop.org> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fchilli.nosignal.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fmailop&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814842966&sdata=709EkG4m8DHr91UounOnHhZoL4dlH%2FwxUXXUlBZk9J8%3D&reserved=0> -- Nick Stallman TECHNICAL DIRECTOR [Image removed by sender. Email] n...@agentpoint.com<mailto:n...@agentpoint.com> [Image removed by sender. Phone] 02 8039 6820<tel:0280396820> [Image removed by sender. Website] www.agentpoint.com.au<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.agentpoint.com.au%2F&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814852960&sdata=zZW5AAqddUujpmB1xlLgc1CCpxM8QJ8urCN5ESDWSys%3D&reserved=0> [Image removed by sender. Agentpoint]<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.agentpoint.com.au%2F&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814852960&sdata=zZW5AAqddUujpmB1xlLgc1CCpxM8QJ8urCN5ESDWSys%3D&reserved=0> [Image removed by sender. Netpoint]<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fnetpoint.group%2F&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814862957&sdata=2rGSMcC2bjPoZJllsO08fQimLWJGA7EH97UwSTyzC50%3D&reserved=0> Level 3, 100 Harris Street, Pyrmont NSW 2009 [Image removed by sender. Facebook]<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.facebook.com%2Fagentpoint%2F&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814862957&sdata=8GgQNDB%2BeF55NC8hzQ3HewBEApq%2FnSWxo4NjXsUUs5g%3D&reserved=0> [Image removed by sender. Twitter] <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2Fagentpoint&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814862957&sdata=HCJiZOXUkRhb6z70MMVW4lYnaP4WBLZQnF7pE6yuj%2Fc%3D&reserved=0> [Image removed by sender. Instagram] <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.instagram.com%2FAgentpoint%2F&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814872949&sdata=7yHCR4pLCFj4DoCf8VbFKKWyuozwIJoPgCJs5X01pjI%3D&reserved=0> [Image removed by sender. Linkedin] <https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fagentpoint-pty-ltd&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814872949&sdata=OXnE%2BEAkqe8FNxgfBdLWv5%2BKssZnWJjx1h7m1fmnC2M%3D&reserved=0> _______________________________________________ mailop mailing list mailop@mailop.org<mailto:mailop@mailop.org> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fchilli.nosignal.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fmailop&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814882944&sdata=j3K4giNVrO2XOlDYD8X%2FnGwXzgd5KV%2BQWS3P8QtbY0k%3D&reserved=0> -- Having an Email Crisis? We can help! 800 823-9674 Laura Atkins Word to the Wise la...@wordtothewise.com<mailto:la...@wordtothewise.com> (650) 437-0741 Email Delivery Blog: https://wordtothewise.com/blog<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwordtothewise.com%2Fblog&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814882944&sdata=E6Z92Nd3RlrYANFdEOEHfqpizWPOchMuO1hn180Hmc8%3D&reserved=0> -- Nick Stallman Technical Director [Image removed by sender. Email] n...@agentpoint.com<mailto:n...@agentpoint.com> [Image removed by sender. Phone] 02 8039 6820<tel:0280396820> [Image removed by sender. Website] www.agentpoint.com.au<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.agentpoint.com.au%2F&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814892939&sdata=fm2Y%2FiJrzdDzxNLGdaOM9PUaWqWDhkOGFiHMkknyYr4%3D&reserved=0> [Image removed by sender. Agentpoint]<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.agentpoint.com.au%2F&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814892939&sdata=fm2Y%2FiJrzdDzxNLGdaOM9PUaWqWDhkOGFiHMkknyYr4%3D&reserved=0> [Image removed by sender. Netpoint]<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fnetpoint.group%2F&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814902934&sdata=e3%2FnfCyJyTLc5bQ3RP1hiZDT6wtsrXOPdquM4prIR7Y%3D&reserved=0> Level 3, 100 Harris Street, Pyrmont NSW 2009 [Image removed by sender. Facebook]<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.facebook.com%2Fagentpoint%2F&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814902934&sdata=b%2Fq7UdP3mPg2%2FrK4OH23ZWLPsCg5xrvzrm706YmpDos%3D&reserved=0>[Image removed by sender. Twitter]<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2Fagentpoint&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814912926&sdata=vczJ47CPIHntIGcNWFqlaLwurH%2FkM2UYOHJxAu0Q8Vo%3D&reserved=0>[Image removed by sender. Instagram]<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.instagram.com%2FAgentpoint%2F&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814912926&sdata=YySIlIUEHtICgih%2BqkGnOAzgfzOjWFZy95jvWNR0i%2Fo%3D&reserved=0>[Image removed by sender. Linkedin]<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fagentpoint-pty-ltd&data=02%7C01%7Cmichael.wise%40microsoft.com%7C690312ae7e2b4fe668c808d6a64d6cc0%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636879248814922921&sdata=VtkJ8jQKCCQImfovvElsQ7%2F%2FvvLHmrwQ%2B7PuhC6fuTI%3D&reserved=0>
_______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
