potential spam investigation.

nav2567
nav2567 used Ask the Experts™
on
Hello,

We have a manager expecting emails coming from worknwearuniforms.com.  

Our Office 365 messaging system is blocking the emails coming from worknwearuniforms.com because the spam confidence level is high.  

I just want to see if there is anything we could do or investigate before we do the unblock.

Please advise.

Thanks.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Commented:
It's not on a blacklist:

https://mxtoolbox.com/SuperTool.aspx?action=blacklist%3aworknwearuniforms.com&run=toolpage

If you do business with the sender and trust their reputation you should be fine adding the domain to a whitelist.
You can create a transport rule for a specific domain to allow messages from it to be accepted.
btanExec Consultant
Distinguished Expert 2018
Commented:
Can check for any spoofed sender. Will be good to implement SPF. https://technet.microsoft.com/en-us/library/dn789058(v=exchg.150).aspx
This include a list to check on the message header of that spam mail mentioned.
https://blogs.technet.microsoft.com/exovoice/2016/09/12/basic-spam-troubleshooting-in-office-365/

Is your domain being spoofed? Meaning the emails seems to come from users inside your organization?

Are you receiving bulk emails, such as marketing campaigns?

Are you receiving, phishing emails, where someone pretending to be your customer is asking for money?

Are you the subject of an NDR storm?
Bootstrap 4: Exploring New Features

Learn how to use and navigate the new features included in Bootstrap 4, the most popular HTML, CSS, and JavaScript framework for developing responsive, mobile-first websites.

btanExec Consultant
Distinguished Expert 2018

Commented:
For author advice.
Delete the question, abandoned.
btanExec Consultant
Distinguished Expert 2018

Commented:
Since the question ask for anything to do and investigate, I have shared some area of check as part of the investigation. If they are not valid pointer for checking then I suggest just delete the question away.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start Today