joaopbnogueira

Or having a lower % of body fat (within healthy limits) is the factor improving a better immune response?

The issue was eventually solved by - creating a Microsoft account and subscribing to 365 - opening a support ticket - systematically escalating the issue with evidence of what was happening (message traces, example emails, etc) - pointing to evidence on other blogs/sites that discussed the same problems

Thank you all for the suggestions.

Just found this thread which seems related: https://news.ycombinator.com/item?id=38042114

Thank you, you've gotten further than I have.

On my "quarantine" I can't find anything (it's empty) therefore I can't also check what's going on. But "URL detonation reputation" is consistent with the behavior we're observing.

Ok, that was smart. I bet it was fixed quickly.

This sounds like what's happening to us, but only if the dreaded 25friday.com keyword is included on the email content

We thought about it but: - this a statically generated site (SSG using Next.js), so there's backend runtime for the FE itself. - we do have a contact form, but under the hood it sends an email to our own inbox through internal APIs and the destination email is hard-coded, so I don't think they could hijack this (will check the audit log just in case). - it's hosted using Cloudflare pages - the worker/api part is severely rate limited - we would notice abuse since we have low monthly email sending limits on this api service

Ah, but we have purchased 1 license of MS365 precisely to help triage this issue and open a support ticket but the agent is as clueless as we are....

I'm with you but it's very hard to change the tools our clients use :)

We also had a look at it, but the problem is that we don't control our mail server as it's Google provided.

Could be the reason, but even so, we have really low volume campaigns and mostly to people we actually interact / have a history with. I would assume it would take more than a few accidental hits to trigger this issue.

Well, it works fine for every single recipient unless it's a Microsoft one.

If the recipient is using a personal microsoft / outlook / hotmail account the email gets delivered with a spam score of 9.

If the recipient is a MS 365 account, blackhole it is.

We even set up our own MS 365 to prove this.

I guess only basic since our main provider is Google, not MS.

We do use Azure for small stuff, but too small for any special support channel.

I'd love to but what see in practice is that the bigger the company the more likely it is that they use MS. Which hits double hard since this means our bigger clients are the ones not getting our emails...

Joking aside, we are seriously considering moving all comms to 25friday.nl (which we also own) if we can't find a way around this...

We signed up to MS 365 using a subdomain and try to triage the issue and if anything it only made the issue clearer, that it has nothing to do with the sending domain but pure content filtering.

Yes, I have.

Message Trace is an interesting one.

If we send an email without the 25friday.com keywords everything works fine, the message is shown on Message trace as delivered and the recipient gets the email with SCL 1 (all good here).

As soon as the very same email is appended with a www.25friday.com, Message Trace still shows the outbound email, also as delivered, but the recipient (if a Microsoft account) never gets the email. We used one of these emails (EML) to create a submission on the defender portal of a false positive, but they always simply disappear with 0 feedback (and the problem still occurring).

We also had a signature with the www.25friday.com link on it and took it out after realising it was causing emails to go to this black hole, so that at least we can still send emails, but we keep having to be careful to never sending any content (or attachment) that somehow mentions the 25friday.com domain.

Thanks, we have looked into this indeed, but the problem is that we don't really control the sending IPs as they are managed by Google.

I guess I'll try to submit a report anyway using Googles' outbound IPs.

Yeah, this is kind of the point. I'm not sure there's even a legal process for this as this is entirely under MS (opaque) internal control and we're not even based on the US.

We don't even have any sort of login on our main page, the redirects we have are mostly around apex domain to www.25friday.com, http to https and the likes.... This is a pure company landing page with the typical business description, career application page, articles etc.

We do have subdomains for internal tools of course, but those should not even be publicly accessible (behind an auth proxy).

Why not solar spheres?

Is it just me, or this could be the future of actually paying for search engines? I get way better answers for search queries through Chatgpt than Google for domain specific stuff.

Clean Code is not a blind religion, Uncle Bob is trying to make a point with the concepts behind the book and teaching you to consider/question if you're falling into bad code traps.

This book was written to make developers think and consider their choices, not a script for good code.

Roads were actually built for pedestrians first, jaywalking was 'invented' in the US https://news.ycombinator.com/item?id=3888104