User Profile
Jordan160
Copper Contributor
Joined 6 years ago
User Widgets
Recent Discussions
Re: Outgoing emails marked as SPAM and Phishing emails by O365 servers
MaxWinterstein I made that Reddit post. It's a shame Microsoft doesn't have a means to resolve the issue you're facing. When a organization get's so big, really difficult issues like this seem to slip through the cracks.14KViews0likes0CommentsRe: Outgoing emails marked as SPAM and Phishing emails by O365 servers
EmailIssues That really sucks, trying to get past the first line of support is the hardest. As long as you have the headers stating the category, it should pretty straight forward to resolve. It's just trying to get someone from support who actually understands what needs to happen or have them escalate it to someone that knows. I'm going to post this resolution to Reddit just-in-case MS decides to lock this thread or delete it. It's a shame that support can't understand their own technology stack to identify and issue and provide some sort of resolution. This type of process resolution has been in place with other vendors like PaloAlto, Fortinet and Sophos for years.23KViews1like6CommentsRe: Outgoing emails marked as SPAM and Phishing emails by O365 servers
EmailIssues I'm sorry to hear that. You have to be persistent and point them to this post and ask for an escalation. Unfortunately, I am unable to provide the ticket number due to the privacy of the client. However, this is what was communicated by the person who got ahold of someone at Microsoft after 8 hours of total time with their support staff. They also had to make sure they had the appropriate SPF/DKIM/DMARC records in-place before they would even consider looking further. Basically, there are third-party lists that scan sites looking for phishing stuff, they had found domain name to be a part of that. They are working on clearing off the domain from those lists, and while that’s being done Microsoft is clearing the domain from the watchlist at the moment. It should take a couple of hours for it all to propagate and take effect, and he will be calling me when it’s all done.23KViews0likes8CommentsRe: Outgoing emails marked as SPAM and Phishing emails by O365 servers
ALV_Work I'm having a similar issue with a client who has Office 365 for email. Their domain name was categorized as CAT:HPHISH due to their website being hacked. Once cleaned up they started having emails being quarantined. They put their domain name in their signature. So any customers they emailed with Office 365 wouldn't get the email, it would be quarantined. When a customer who wasn't on Office 365 got the email and replied, the client wouldn't get the email. We've reached out to Microsoft Support, however, they're unable to understand what needs to happen. And there is no system in-place to change/remove domain names from this categorization. Even though they have https://sender.office.com for de-listing IP addresses, there is no way to submit domain names. Other vendors like PaloAlto, FortiNET and Sohpos provide the means to submit evidence for delisting domain names categorized as Phishing or Spam. EDIT: The only method I see to report the domain name as a false positive or have the category changed or removed is through the Office 365 Protection Portal under the “Quarauntine Queue", by clicking “Submit Message” with no information on where it’s going or if I will get notified if any action was taken. The other method is in a Microsoft article https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/submit-spam-non-spam-and-phishing-scam-messages-to-microsoft-for-analysis which states “Use the same procedure as described in the "Use email to submit junk (spam) or phishing scam messages to Microsoft ," but send the message to not_junk@office365.microsoft.com.”99KViews0likes12Comments
Recent Blog Articles
No content to show