On Wed, Jan 3, 2024 at 5:06 AM Matus UHLAR - fantomas
wrote:
> What?
>
> If the message came from .outlook.com hosts, it should be reported to
> ab...@outlook.com.
>
> You are right, it did come from an .outlook.com host. My mistake. I'm not
sure why they blocked the user, then.
On Tue, Jan 2, 2024 at 3:11 PM Torpey List wrote:
I started forwarding full headers and text to "ab...@outlook.com" and
they blocked my IP.
On 02.01.24 16:49, Shawn Iverson wrote:
ab...@outlook.com is for reporting abuse on the freemail
Outlook/Hotmail/MSN platforms, not Microsoft tenants.
On Tue, Jan 2, 2024 at 3:11 PM Torpey List wrote:
> I started forwarding full headers and text to "ab...@outlook.com" and
> they
> blocked my IP.
>
>
ab...@outlook.com is for reporting abuse on the freemail
Outlook/Hotmail/MSN platforms, not Microsoft tenants.
https://msrc.microsoft.com/report/
I started forwarding full headers and text to "ab...@outlook.com" and they
blocked my IP.
-Original Message-
From: David Jones via users
Sent: Tuesday, January 2, 2024 1:07 PM
To: Charles Sprickman
Cc: SA Mailing list
Subject: Re: MS-relayed spam
I would report this to
On 2024-01-01 at 16:28:04 UTC-0500 (Mon, 1 Jan 2024 16:28:04 -0500)
Charles Sprickman
is rumored to have said:
Hi all,
Full headers are here as well: https://pastebin.com/wHNmnvtE
I'm not really following what's going on here - a few things confuse
me...
- the empty from envelope, which I
On 01.01.24 16:28, Charles Sprickman wrote:
Full headers are here as well: https://pastebin.com/wHNmnvtE
neither indicate that the mail was relayes by microsoft.
Isn't this just backscatter, non-delivery notice on fake mail?
I'm not really following what's going on here - a few things confuse
I would report this to Microsoft Abuse and setup local rules that add a point
or two something like this:
header BAD_O365_SENDER X-OriginatorOrg =~ /.*\.onmicrosoft\.com$/
With a threshold of 6.2, you might want to consider either lowering that a
little or bumping up some default scores for so
Hi all,
Full headers are here as well: https://pastebin.com/wHNmnvtE
I'm not really following what's going on here - a few things confuse me...
- the empty from envelope, which I thought was more of a "bounce" thing
- that it does seem formatted like a bounce
- across multiple servers I'm see
