There are two Abuse Reporting Format (ARF) email report formats used in the Microsoft Junk Mail Reporting (JMR) program:
- RFC822
- The original format
The RFC822 format
Microsoft recommends this format because complaints are forwarded as an attachment.
From: address is staff@hotmail.com.
Date: Tue, 21 sep 10 22:05:22 -0700
From: staff@hotmail.com
Subject: complaint about message from <IP>
To: <FBL EMAIL ADDRESS>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=3D3D"D255B82B-6C8B-45AE-AC2F-1F4270312A"
Return-Path: staff@hotmail.com
Message-ID:
X-OriginalArrivalTime: 22 Sep 2010 05:05:22.0268 (UTC) FILETIME=3D3D[C26839:01CB5A13]
--D255B82B-6C8B-45AE-AC2F-1F427033312A
Content-Type: message/rfc822
Content-Disposition: inline
X-HmXmrOriginalRecipient: <RECIPIENT'S EMAIL ADDRESS>
X-Reporter-IP: <IP>
X-Message-Delivery:
X-Message-Status: n
X-SID-PRA:
X-AUTH-Result: NONE
X-Message-Info:
Received: from <SENDER SERVER> ([IP]) by SNT0-MC3-F43.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 21 Sep 2010 15:51:58 -0700
Received: from <SENDER SERVER> (localhost.localdomain [127.0.0.1])
by <SENDER SERVER> (8.13.8/8.13.8) with ESMTP id o8LMpvCS005259
for <RECIPIENT'S EMAIL ADDRESS>; Tue, 21 Sep 2010 18:51:57 -0400
Received: (from apache@localhost)
by <SENDER SERVER> (8.13.8/8.13.8/Submit) id o8LMpvNB005258;
Tue, 21 Sep 2010 18:51:57 -0400
Date: Tue, 21 Sep 2010 18:51:57 -0400
Message-Id:
To:<RECIPIENT'S EMAIL ADDRESS IS LISTED>
Subject: <SUBJECT LINE>
MIME-Version: 1.0
Content-type: text/html; charset=3D3Diso-8859-1
From: <SENDER EMAIL ADDRESS>
Reply-To: <SENDER EMAIL ADDRESS>
X-Mailer: PHP/5.1.6
Return-Path: <SENDER EMAIL ADDRESS>
X-OriginalArrivalTime: 21 Sep 2010 22:51:58.0217 (UTC) FILETIME=3D3D[988D57=
9:01CB59DF]
<ORIGINAL HTML CONTENT>
--D255B82B-6C8B-45AE-AC2F-1F427033312A--
Original format
According to Windows Live, the complaint is forwarded as-is as Windows Live received it. The From address is the Hotmail customer's alias.
Return-Path: <>
X-Original-To:
Delivered-To:
Date: Sun, 12 Oct 2008 10:05:15
To: <sender's RP redirect email address>
Subject: <sender's original subject line>
From: <sender's email address>
Message-Id:
X-MailFrom: staff@hotmail.com
X-RcptTo:
Received:
X-HmXmrOriginalRecipient: <original recipient's hotmail email address>
X-Reporter-IP:
X-Message-Delivery:
X-Message-Status: n:0
X-SID-PRA:
X-Message-Info:
Received: from () by bay0-mc4-f3.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668);
Sun, 12 Oct 2008 08:07:35 -0700
DomainKey-Signature:
Date: Sun, 12 Oct 2008 08:07:31 PDT
From: <sender's email address>
Subject: <sender's original subject line>
To: <original recipient's hotmail email address>
X-Header-CompanyDBUserName:
List-Unsubscribe:
Reply-To:
X-Header-MasterId:
X-Header-Versions:
Message-ID:
MIME-Version: 1.0
Content-Type: text/html; charset=us-ascii
Return-Path:
X-OriginalArrivalTime: 12 Oct 2008 15:07:36.0117 (UTC) FILETIME=[42918650:01C92C7C]
<ORIGINAL HTML CONTENT>
