> From: Michael Wise <michael.w...@microsoft.com> > The account has probably already been killed.
I doubt that. I quoted entire header and the one-line body, but: ================================================================== Date: Fri, 4 Sep 2015 22:03:03 +0300 From: l...@lena.kiev.ua To: ab...@microsoft.com Subject: Spam complaint Spam: > Return-path: <> > Received: from mail-sg2apc01hn0234.outbound.protection.outlook.com ... > Subject: YOU HAVE BEEN ANNOUNCED AS ONE OF THE FUND BENEFICIARY!!! ... > X-Originating-IP: [116.202.38.142] ... > X-Forefront-Antispam-Report: SFV:SPM;... ================================================================== From: Microsoft Online Safety <mosaf.mrea.ww.00.en.cvg.mnl.au.t01.spt.sg...@css.one.microsoft.com> Subject: SRX1303257687ID - FW: Spam complaint Date: Wed, 9 Sep 2015 20:47:10 +0000 ... Please forward a copy of the questionable message, including the full message headers... ================================================================== Date: Wed, 9 Sep 2015 23:51:40 +0300 From: l...@lena.kiev.ua To: Microsoft Online Safety <mosaf.mrea.ww.00.en.cvg.mnl.au.t01.spt.sg...@css.one.microsoft.com> Subject: Re: SRX1303257687ID - FW: Spam complaint > Please forward a copy of the questionable message, including the full > message headers. Specifically, we need an unedited copy of the message > that includes the X-originating IP. I already quoted full message headers. I repeat: Return-path: <> ... ================================================================== From: Microsoft Online Safety <mosaf.mrea.ww.00.en.cvg.mnl.au.t01.spt.sg...@css.one.microsoft.com> To: <l...@lena.kiev.ua> Subject: RE: SRX1303257687ID - FW: Spam complaint Date: Thu, 10 Sep 2015 21:45:15 +0000 ... Please forward a copy of the questionable message, including the full message headers... ================================================================== Date: Fri, 11 Sep 2015 03:00:06 +0300 From: l...@lena.kiev.ua To: Microsoft Online Safety <mosaf.mrea.ww.00.en.cvg.mnl.au.t01.spt.sg...@css.one.microsoft.com> Subject: Re: SRX1303257687ID - FW: Spam complaint Do you read? I already sent you the full message headers TWICE. > Please forward a copy of the questionable message, including the full > message headers. Specifically, we need an unedited copy of the message > that includes the X-originating IP. ================================================================== From: Microsoft Online Safety <mosaf.mrea.ww.00.en.cvg.mnl.au.t01.spt.sg...@css.one.microsoft.com> To: <l...@lena.kiev.ua> Subject: RE: SRX1303257687ID - FW: Spam complaint Date: Fri, 11 Sep 2015 16:54:36 +0000 Hello I can understand your frustration. Unfortunately we cannot take action on e-mail accounts that are not part of the Microsoft network... ================================================================== Date: Fri, 11 Sep 2015 20:10:45 +0300 From: l...@lena.kiev.ua To: Microsoft Online Safety <mosaf.mrea.ww.00.en.cvg.mnl.au.t01.spt.sg...@css.one.microsoft.com> Subject: Re: SRX1303257687ID - FW: Spam complaint Content-Type: text/plain; charset=us-ascii User-Agent: Mutt/1.4.2.3i > I can understand your frustration. Unfortunately we cannot take action > on e-mail accounts that are not part of the Microsoft network. Read the header again, attentively this time. The spam came from: Received: from mail-sg2apc01hn0234.outbound.protection.outlook.com ([104.47.125.234] helo=APC01-SG2-obe.outbound.protection.outlook.com) by lena.kiev.ua with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256) (Exim 4.86 (FreeBSD)) id 1ZXwD5-000Id2-HP for l...@lena.kiev.ua; Fri, 04 Sep 2015 21:59:48 +0300 Is 104.47.125.234 part of the Microsoft network? The spam had empty MAIL FROM (envelope-from, Return-Path), is it throwing you off? ================================================================== Silence so far. _______________________________________________ mailop mailing list mailop@mailop.org http://chilli.nosignal.org/mailman/listinfo/mailop