Thanks Vasil, its a request from one of our customers, this is specific spam message they want to remove, (they have a symantec spam filter which they have control of, they want us to remove it from 365 side)
Vasil Michev (MVP)
The method outlined above should work just fine for such scenario.