2.2.1.1 PidNamePhishingStamp
Type: PtypInteger32 ([MS-OXCDATA] section 2.11.1)
The PidNamePhishingStamp property ([MS-OXPROPS] section 2.470) indicates whether a message is likely to be a phishing message.
The value of this named property is a 32-bit field. The structure is specified as follows.
|
|
|
|
|
|
|
|
|
|
1 |
|
|
|
|
|
|
|
|
|
2 |
|
|
|
|
|
|
|
|
|
3 |
|
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
STAMP |
E |
X |
|||||||||||||||||||||||||||||
STAMP (28 bits): This field is obtained from the fifth value of the PidTagAdditionalRenEntryIds property ([MS-OXPROPS] section 2.509).
E - ENABLED (1 bit): If the value of this field is 1, the user has enabled functionality (such as hyperlinks, reply, and attachments) within the message. The default value for this field is zero (0), which indicates that the user has not enabled functionality.
X (3 bits): Unused. These bits SHOULD be set to zero (0) by the client and ignored by the server.