We help IT Professionals succeed at work.

potential spam investigation.

Hello,

We have a manager expecting emails coming from worknwearuniforms.com.  

Our Office 365 messaging system is blocking the emails coming from worknwearuniforms.com because the spam confidence level is high.  

I just want to see if there is anything we could do or investigate before we do the unblock.

Please advise.

Thanks.
Comment
Watch Question

Commented:
It's not on a blacklist:

https://mxtoolbox.com/SuperTool.aspx?action=blacklist%3aworknwearuniforms.com&run=toolpage

If you do business with the sender and trust their reputation you should be fine adding the domain to a whitelist.
You can create a transport rule for a specific domain to allow messages from it to be accepted.
btanExec Consultant
Distinguished Expert 2019
Commented:
Can check for any spoofed sender. Will be good to implement SPF. https://technet.microsoft.com/en-us/library/dn789058(v=exchg.150).aspx
This include a list to check on the message header of that spam mail mentioned.
https://blogs.technet.microsoft.com/exovoice/2016/09/12/basic-spam-troubleshooting-in-office-365/

Is your domain being spoofed? Meaning the emails seems to come from users inside your organization?

Are you receiving bulk emails, such as marketing campaigns?

Are you receiving, phishing emails, where someone pretending to be your customer is asking for money?

Are you the subject of an NDR storm?
btanExec Consultant
Distinguished Expert 2019

Commented:
For author advice.
Delete the question, abandoned.
btanExec Consultant
Distinguished Expert 2019

Commented:
Since the question ask for anything to do and investigate, I have shared some area of check as part of the investigation. If they are not valid pointer for checking then I suggest just delete the question away.