> From: Michael Wise <michael.w...@microsoft.com>

> The account has probably already been killed.

I doubt that. I quoted entire header and the one-line body, but:

==================================================================

Date: Fri, 4 Sep 2015 22:03:03 +0300
From: l...@lena.kiev.ua
To: ab...@microsoft.com
Subject: Spam complaint

Spam:

> Return-path: <>
> Received: from mail-sg2apc01hn0234.outbound.protection.outlook.com
...
> Subject: YOU HAVE BEEN ANNOUNCED AS ONE OF THE FUND BENEFICIARY!!!
...
> X-Originating-IP: [116.202.38.142]
...
> X-Forefront-Antispam-Report: SFV:SPM;...

==================================================================

From: Microsoft Online Safety
        <mosaf.mrea.ww.00.en.cvg.mnl.au.t01.spt.sg...@css.one.microsoft.com>
Subject: SRX1303257687ID - FW: Spam complaint
Date: Wed, 9 Sep 2015 20:47:10 +0000

...
Please forward a copy of the questionable message, including the full
message headers...

==================================================================

Date: Wed, 9 Sep 2015 23:51:40 +0300
From: l...@lena.kiev.ua
To: Microsoft Online Safety 
<mosaf.mrea.ww.00.en.cvg.mnl.au.t01.spt.sg...@css.one.microsoft.com>
Subject: Re: SRX1303257687ID - FW: Spam complaint

> Please forward a copy of the questionable message, including the full
> message headers.  Specifically, we need an unedited copy of the message
> that includes the X-originating IP.

I already quoted full message headers. I repeat:

Return-path: <>
...

==================================================================

From: Microsoft Online Safety
        <mosaf.mrea.ww.00.en.cvg.mnl.au.t01.spt.sg...@css.one.microsoft.com>
To: <l...@lena.kiev.ua>
Subject: RE: SRX1303257687ID - FW: Spam complaint
Date: Thu, 10 Sep 2015 21:45:15 +0000

...
Please forward a copy of the questionable message, including the full
message headers...

==================================================================

Date: Fri, 11 Sep 2015 03:00:06 +0300
From: l...@lena.kiev.ua
To: Microsoft Online Safety 
<mosaf.mrea.ww.00.en.cvg.mnl.au.t01.spt.sg...@css.one.microsoft.com>
Subject: Re: SRX1303257687ID - FW: Spam complaint

Do you read? I already sent you the full message headers TWICE.

> Please forward a copy of the questionable message, including the full
> message headers.  Specifically, we need an unedited copy of the message
> that includes the X-originating IP.

==================================================================

From: Microsoft Online Safety
        <mosaf.mrea.ww.00.en.cvg.mnl.au.t01.spt.sg...@css.one.microsoft.com>
To: <l...@lena.kiev.ua>
Subject: RE: SRX1303257687ID - FW: Spam complaint
Date: Fri, 11 Sep 2015 16:54:36 +0000

Hello

I can understand your frustration. Unfortunately we cannot take action
on e-mail accounts that are not part of the Microsoft network...

==================================================================

Date: Fri, 11 Sep 2015 20:10:45 +0300
From: l...@lena.kiev.ua
To: Microsoft Online Safety 
<mosaf.mrea.ww.00.en.cvg.mnl.au.t01.spt.sg...@css.one.microsoft.com>
Subject: Re: SRX1303257687ID - FW: Spam complaint
Content-Type: text/plain; charset=us-ascii
User-Agent: Mutt/1.4.2.3i

> I can understand your frustration. Unfortunately we cannot take action
> on e-mail accounts that are not part of the Microsoft network.

Read the header again, attentively this time. The spam came from:

Received: from mail-sg2apc01hn0234.outbound.protection.outlook.com 
([104.47.125.234] helo=APC01-SG2-obe.outbound.protection.outlook.com)
        by lena.kiev.ua with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
        (Exim 4.86 (FreeBSD))
        id 1ZXwD5-000Id2-HP
        for l...@lena.kiev.ua; Fri, 04 Sep 2015 21:59:48 +0300

Is 104.47.125.234 part of the Microsoft network?
The spam had empty MAIL FROM (envelope-from, Return-Path),
is it throwing you off?

==================================================================

Silence so far.

_______________________________________________
mailop mailing list
mailop@mailop.org
http://chilli.nosignal.org/mailman/listinfo/mailop

Reply via email to