That they are cryptic is by design.



They identify the specific message so that we can trace other details of it, 
not the least being the TenantId, which will show who the sender org actually 
is, but in the case of traffic from outlook.com, it may end in 12 “a”s, so then 
we need the Network Message-Id to dig further.

Aloha,
Michael.
--
Michael J Wise
Microsoft Corporation| Spam Analysis
"Your Spam Specimen Has Been Processed."
Open a ticket for Hotmail<http://go.microsoft.com/fwlink/?LinkID=614866> ?



-----Original Message-----
From: post...@sfina.com <post...@sfina.com>
Sent: Monday, August 25, 2025 11:39 AM
To: Michael Wise <michael.w...@microsoft.com>; mailop@mailop.org
Subject: Re: [EXTERNAL] [mailop] How to filter efficiently spam originating 
from a Microsoft customer?



On 2025-08-25 14:09, Michael Wise wrote:

> Sorry, I should have been more precise.

>

> These ones, from the message that you just sent:

>

> X-MS-Exchange-Organization-Network-Message-Id:

> 2449da6f-4e1e-429f-0cc6-08dde401949a

>

> X-MS-Office365-Filtering-Correlation-Id:

> 2449da6f-4e1e-429f-0cc6-08dde401949a

>



no need to apologize to me, you could have happily ignored my indirect

unhappiness with your employer.



now that you taught me to identify the relevant headers, their content

is still quite cryptic to me.  It seems individualized per message, not

per customer.  I would like to filter all messages from this one

customer only, because your employer has legit customers whose messages

I want to receive.



How do I determine which part of those relevant headers identifies the

individual customer?



Note that this message made it past all the usual spam filters that

block the more obvious nuisances.  These actors know who they are

targeting and why.  There are about 10K individual lawyers in my

province with write access to the Land Registry on which millions,

sometimes billions are transacted every day.  There is a real jackpot

for whoever can successfully phish a single one of us.



Thanks,

Yuv
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to