Heh. These days, when I go home for the day, I am so gone home.

I’m looking thru my inbox and having a hard time finding your email, could you 
ping me offline and tell me what the URL shortener is and I’ll have a peek.

Aloha,
Michael.
--
Michael J Wise
Microsoft Corporation| Spam Analysis
"Your Spam Specimen Has Been Processed."
Got the Junk Mail Reporting 
Tool<http://www.microsoft.com/en-us/download/details.aspx?id=18275> ?

From: mailop [mailto:mailop-boun...@mailop.org] On Behalf Of Marc Powell
Sent: Thursday, February 9, 2017 9:10 AM
To: mailop@mailop.org
Subject: [mailop] Office365 EOP/phishing detection


This is one of the first messages you've received from 
li...@xodus.org<mailto:li...@xodus.org>. Learn how we recognize email 
senders<http://aka.ms/LearnAboutSenderIdentification>

Feedback<http://aka.ms/SafetyTipsFeedback>

Hi all,

Long (loooooong) time lurker, rare poster here. I work for a fairly well known 
ESP and last week our private link shortener was reported as being classified 
as malicious by Office365 users. Our system had detected that an unusual 
mailing had been sent and locked down the account; they had accidentally leaked 
their password to a malicious actor. That was all resolved last week yet the 
link is still being reported as malicious.

We've made attempts through the support channels [1] (ticket SRX1373730344ID is 
the most recent) to get information to help us discover if there is further 
activity that we haven't been able to identify, or have the URL reclassified. 
Support just repeats that they see no problems with delivery of our messages 
from our source addresses... I've attempted reaching out to Michael Wise 
directly via MAAWG early yesterday but no movement there, yet.

Has anyone else experienced this? Is there another path other than Support to 
get insight into what we did or are doing wrong and how to get information to 
correct it? I'm getting pressure internally and am running out of paths.

Thanks for any suggestions.

--
Marc
[1] 
https://support.microsoft.com/en-us/getsupport?oaspworkflow=start_1.0.0.0&wfname=capsub&productkey=edfsmsbl3&locale=en-us&ccsid=636221707147571152&wa=wsignin1.0<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fgetsupport%3Foaspworkflow%3Dstart_1.0.0.0%26wfname%3Dcapsub%26productkey%3Dedfsmsbl3%26locale%3Den-us%26ccsid%3D636221707147571152%26wa%3Dwsignin1.0&data=02%7C01%7Cmichael.wise%40microsoft.com%7C6bd1f9fc5eca410351f508d4510f8652%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636222574503197964&sdata=%2FKBlipm4hkN5ECACn5g5gmjZzNYYTsmICY%2B9VfOM8oI%3D&reserved=0>
_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to