Dear all,
As title says. I have multiple domains on MIAB, but only with one I am facing issues that emails are marked with SPAM.
When testing blacklist with mxtoolbox my IP gets triggered with UCEPROTECTL3 but as mentioned only one domain is affected.
In custom DNS no special setting have changed. I only have
Can you propose some test that I can perform between domains to see where is the problem.
Thank in advance Z
Usually the reason for it being marked as spam is in the header of the email.
Can u share the header?
Have you checked with the blacklist to see why they have you listed?
Hi I am pasting the header text
Received: from VE1EUR01FT024.eop-EUR01.prod.protection.outlook.com
(2a01:111:e400:7e19::48) by
VE1EUR01HT081.eop-EUR01.prod.protection.outlook.com (2a01:111:e400:7e19::342)
with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3933.31; Mon, 15 Mar
2021 09:29:11 +0000
Received: from EUR04-HE1-obe.outbound.protection.outlook.com (104.47.13.51) by
VE1EUR01FT024.mail.protection.outlook.com (10.152.2.213) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.3933.31 via Frontend Transport; Mon, 15 Mar 2021 09:29:11 +0000
Received: from AM6P195CA0010.EURP195.PROD.OUTLOOK.COM (2603:10a6:209:81::23)
by AM5PR03MB3074.eurprd03.prod.outlook.com (2603:10a6:206:19::23) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3933.32; Mon, 15 Mar
2021 09:29:09 +0000
Received: from VE1EUR01FT061.eop-EUR01.prod.protection.outlook.com
(2603:10a6:209:81:cafe::14) by AM6P195CA0010.outlook.office365.com
(2603:10a6:209:81::23) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3933.31 via Frontend
Transport; Mon, 15 Mar 2021 09:29:09 +0000
Authentication-Results: spf=pass (sender IP is 5.189.165.135)
smtp.mailfrom=trideja.si; mydomain.com; dkim=pass (signature was verified)
header.d=trideja.si;mydomain.com; dmarc=pass action=none
header.from=trideja.si;compauth=pass reason=100
Received-SPF: Pass (protection.outlook.com: domain of trideja.si designates
5.189.165.135 as permitted sender) receiver=protection.outlook.com;
client-ip=5.189.165.135; helo=box.aero145.si;
Received: from box.aero145.si (5.189.165.135) by
VE1EUR01FT061.mail.protection.outlook.com (10.152.3.81) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.3933.31 via Frontend Transport; Mon, 15 Mar 2021 09:29:08 +0000
Received: from authenticated-user (box.aero145.si [5.189.165.135])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by box.aero145.si (Postfix) with ESMTPSA id 59E6384005D
for <myemail@mydomain.com>; Mon, 15 Mar 2021 10:29:07 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=trideja.si; s=mail;
t=1615800547; bh=l1EJeEQuT1fnSnMa2nU8HOkNs+7OwdPD4c4pYNRkrKc=;
h=From:To:Subject:Date:From;
b=YZvk16ifFnlNCmpdwDyMjdH9tE3HFtbEbZuG5rwafClUWI/kv3T8zdx5yHffhUQ6w
I+przSLwXLih3Fa9ag7B02kX30RnrzKBfKlxD0csQba/m1BfjIy+gBkvyIr6NXFYz8
oltf7BXhI6YZZyD94nUrtR58VOnwlrN4BLFvDsEroO41eQ/zi+ckv2ghrlVlH/yukC
mnX7nbaRo5qpd8obEIRBW4QFZWTBntugT3KjQ0B29iYz4A+avD4AqCMC6emqKqEsis
ACeVq80PQcG5p5eF2nJioyZqVkqGb107QAqL9RB+kYM5DBipfuIqaCxf4Ti7toFZ7A
lpdJjnssL/XYw==
From: <lovro.sambol@trideja.si>
To: <myemail@mydomain.com>
Subject: test
Date: Mon, 15 Mar 2021 10:29:06 +0100
Message-ID: <001a01d7197d$a5c904e0$f15b0ea0$@trideja.si>
MIME-Version: 1.0
Content-Type: text/plain
Thread-Index: AdcZfaIy6RfN6vwNSBqhSCzrJB+FAg==
Content-Language: en-si
Return-Path: lovro.sambol@trideja.si
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 39d6d41d-c7ca-4a42-ae3b-0fba82be994b:0
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 06fe852e-7ba3-4cb7-23d8-08d8e794c942
X-MS-TrafficTypeDiagnostic: AM5PR03MB3074:
VE1EUR01HT081:
X-MS-Exchange-AtpMessageProperties: SA
SL
X-MS-Oob-TLC-OOBClassifiers: OLM:1728;
X-Forefront-Antispam-Report:
CIP:5.189.165.135;CTRY:DE;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:box.aero145.si;PTR:box.aero145.si;CAT:SPM;SFS:(4636009)(44736005)(2876002)(6966003)(7596003)(86362001)(26005)(36756003)(3480700007)(1420700001)(33964004)(6266002)(356005)(6916009)(5660300002)(336012)(956004)(2616005)(58800400005)(1096003)(7116003)(22186003)(7636003)(4006050)(75640400001)(8676002)(35310200010)(220243001);DIR:INB;
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
=?utf-8?B?RjRSbnRkbk1HOFNCYVJWeTFHekN3MUhhRjF4VTdnU1YzWFo4VlJRZnc5SWpy?=
=?utf-8?B?V3ZhUVRZMENSVmc4NVpUQUlwcFM1ZEVqN2RXRXRxUmtDbEh1NFdYQ0JJUTRn?=
=?utf-8?B?cUMvek1oSm1wenU0OEZjVEZyWVo1ZEw5WGtxZFZTMTMrbk0yTDZ3QldWQVhC?=
=?utf-8?B?UXBWeWhEcmRPTjJkVkYyMGpLNU5TL2Y5djdyTDArUDZGQW54MCtLV1lOVWVx?=
=?utf-8?B?TTZhcWJXb3Q5ckNZajFjRzVnT25rOWthSEFVQVorOWJoU2RJU0VUdEwrRkJx?=
=?utf-8?B?T3EzbnhUbm8vRzg4bzROM0lmMnJLRElURUkrNlgwN3Zqc1RVK0pmNEh4TTkv?=
=?utf-8?B?NVlCMElVRmtHSUc3YXJDZ3N2RWYyUEE4YmZUM052enNyZ1VIRTVVNUV1ZFM4?=
=?utf-8?B?UDg0Z0xndWxhMGRNUzFlZ1NJRVpjMFJ5UGRmUUhoQndPa0hhL0Q5VXNieEoy?=
=?utf-8?B?VnhvNDhkbmUrS2RnQkRxS0ZaUmd3OG05MTk0eUwwYlRiUjNGVXFLS0JvbmpZ?=
=?utf-8?B?ZnhPZkxjUTltOTVQOFl5U0Z5OHZoNEsvTEczOWJaUXRGU0l5ZHRycTlrZDFm?=
=?utf-8?B?TURkUUlYQWt2OFJtRFI5dFRVRHlCa05BUlRuQTFjWEd2L0VHT0dUamFtY0xU?=
=?utf-8?B?enIvYUpTNXlJMytCTTNYNjFHdDdQRGhrM2NTdnloUWZPLzArQm9kQjU0RXFY?=
=?utf-8?B?MzQzK0lTdDVKQnFPZ0ozb1lEaVAvcjVlbklhZWRET0VncHdhaVowZlFOQ1hY?=
=?utf-8?B?Ly9PazYxbDU1U0plUFNBYmJ0M1VxMHRlbUEwQ0VMS3hBVWVJVkhNMERmcm55?=
=?utf-8?B?cGhlalgzdGNBTVNjVW1WaENvUHl0NlR6STVuNEhucU9QWDlOQWk1aHg5VG9u?=
=?utf-8?B?TmMvWGU4aURMbDJpRUkwU3NyWVVhWHdwcXVrSlh6NXNsbkpZcDBEd3BORUh2?=
=?utf-8?B?VkFEVE15VEVMcnVHcVA1WjBkQi9RaURIS0dKOXdRalIwYWVJTzlERUJWU3p2?=
=?utf-8?B?N2w5RC9uSHI2VGprQUxubUx6clduM3NsUnhKVUFuZXdPZG0yemhCdVpydGlG?=
=?utf-8?B?YnQ0RFlaSHhWRHA3YXhBUFhFQ1JtSmJPMENNajRpRkNKbnJHK1ZMdXhIc0FV?=
=?utf-8?B?UVplWG85ZkNlMlZoQW1QeExVWTgzUFM2b3orbXhkdUZBaDlCdU96ekxSTUhh?=
=?utf-8?B?NHY4T21ITE5RQnpVQ2ZHTVAvVjEzOGpLV0w2bFZmMnJpRmQzbDM5T0o1Ymhs?=
=?utf-8?B?a082MnVDaktuU3IxaldJNjdsa2Jwa2tsalA2N1JvSU44RUw5ekJ0dUpHanhu?=
=?utf-8?B?NUdXWjVVZHRBOHZ0ZitwZ09DRmhqby9XMlV6RTUzTmxHQm54Skthakkxdnp3?=
=?utf-8?B?ZlVEQXJiOGRjVDA2Sm9JNXRYL0NXRkV5VmtkcWVXNHJKUXlIVktTVThzbEd2?=
=?utf-8?B?Ym1DS2g3ay9rWnNPMlhRVVdBRHRHaDBEN0lpbnc5V2ZOMDlyL3V0d084Q2w3?=
=?utf-8?B?dnNoekgveTFGdyt3cVBOM2dqU1B2RVpXejRVRUExck9lY3p1bHIrVVRlODdh?=
=?utf-8?B?V1M2c3FxK0tuQ0lNRVBzRkJESGZ3MWJzaCtLZjhnT003cjg0K1ZvUFQrU2Nu?=
=?utf-8?B?NjNqeW1CRytWTm40Z3J3Ym44cGFybXJxTVVQTi9oNmFiYTZ6Rno4YWhzaCtH?=
=?utf-8?B?THJGQUdRYjVHZC9DY2VIS2NyOWdpays5Vzl1bWNESmJCbmMwRWxyWTQyUGxz?=
=?utf-8?B?WUVmUDM3OHZkQ013b1l6Mks4bU16aHhnTHZhZTNjWjZxcStzNDNGSEp4NWpu?=
=?utf-8?B?dVFWaEhEM0Q4Rm9ReWcybGJYeUpseldRak5JS0t1ZnJCbmxTeGwvalh6S0Nj?=
=?utf-8?B?MHNFOTNyVjVHT2kvc2ZoWk5ZdnhoZ3hxbzZpeEJoOUMzT1MwQ3g3T2dwQ3N5?=
=?utf-8?B?eWpEZ2tqbXBWM2tJZDQveTltbVV3TzdLOEJpc2ZzNUlHazZvKzM5TlYzVU4y?=
=?utf-8?B?bVNjLzE1Smlyek9LbFRYMGZmaFgwN3N2b0dZc1dkeFloZDJhZEtpQTJXNHVi?=
=?utf-8?B?eXRrekFNUlEyU2xESzdLeG1oM1RiK0hjaWR1N1ZkdzZCWGJwWE9FejR4K0Nq?=
=?utf-8?B?cjh5K0E5Y3g3RnloSjIzZkJLZnhPbUkwMitvbExpVmVBQ0xZOXRnL3h0WDJs?=
=?utf-8?B?TUJuSU1qSUVLOTBUWEJPYWp6NXZFWVNHZGppenlkNUtlWlJ6bXp4VTcxcS9V?=
=?utf-8?B?bXN4UDF2OC9oc2hkaGhOZVdNZjF5TVhSeHFmVjhxc3FHRDRyYkxxTG92bjlZ?=
=?utf-8?B?WGVEcytnL2IrM0RqMm1SOWR4MFNENGxhTGcrb1lwOFIrWFFvclArck8vWGhr?=
=?utf-8?B?QWZObC8xQi8zNG4xY0FxajIrR1hOMGtFMVljeEJKdjhoSlFEQWY3QzBHbGtG?=
=?utf-8?Q?6JxGTsIL/cHakg15qSWe7fllxoE4u/QiJME=3D?=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR03MB3074
X-EopAttribution-RoutedToQuarantineCount: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped:
VE1EUR01FT024.eop-EUR01.prod.protection.outlook.com
X-OriginatorOrg: mycompany.onmicrosoft.com
UCEPROTECT Blacklist Policy LEVEL 3 explanation is here UCEPROTECT®-Network - Spam protection made in Switzerland
alento
March 15, 2021, 6:43pm
5
I do not know what you used in the body of your email … but most larger email providers will send emails with the subject test to spam.
Always use a legit subject and body when doing a test email, never ever just ‘test’ and ‘test’. For example:
Subj: Just experimenting
Body: I need to determine if this is working ok. Please advise.
Thanks!
Or something brief but more involved than just ‘test’.
Also please check for blacklists:
https://multirbl.valli.org/dnsbl-lookup/5.189.165.135.html
Are all of your domains .si domains or are there other TLD’s in use as well??
HI Alento I give it another try as proposed with same result.
Received: from VE1EUR01FT018.eop-EUR01.prod.protection.outlook.com
(2a01:111:e400:7e19::4b) by
VE1EUR01HT233.eop-EUR01.prod.protection.outlook.com (2a01:111:e400:7e19::494)
with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3933.30; Mon, 15 Mar
2021 19:04:04 +0000
Received: from EUR01-VE1-obe.outbound.protection.outlook.com (104.47.1.76) by
VE1EUR01FT018.mail.protection.outlook.com (10.152.2.221) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.3933.31 via Frontend Transport; Mon, 15 Mar 2021 19:04:04 +0000
Received: from DB6P193CA0001.EURP193.PROD.OUTLOOK.COM (2603:10a6:6:29::11) by
PR3PR03MB6618.eurprd03.prod.outlook.com (2603:10a6:102:71::12) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.3933.32; Mon, 15 Mar 2021 19:03:51 +0000
Received: from DB5EUR01FT019.eop-EUR01.prod.protection.outlook.com
(2603:10a6:6:29:cafe::80) by DB6P193CA0001.outlook.office365.com
(2603:10a6:6:29::11) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3933.31 via Frontend
Transport; Mon, 15 Mar 2021 19:03:51 +0000
Authentication-Results: spf=pass (sender IP is 5.189.165.135)
smtp.mailfrom=trideja.si; mydomain.com.com; dkim=pass (signature was verified)
header.d=trideja.si;mydomain.com.com; dmarc=pass action=none
header.from=trideja.si;compauth=pass reason=100
Received-SPF: Pass (protection.outlook.com: domain of trideja.si designates
5.189.165.135 as permitted sender) receiver=protection.outlook.com;
client-ip=5.189.165.135; helo=box.aero145.si;
Received: from box.aero145.si (5.189.165.135) by
DB5EUR01FT019.mail.protection.outlook.com (10.152.4.249) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.3933.30 via Frontend Transport; Mon, 15 Mar 2021 19:03:50 +0000
Received: from authenticated-user (box.aero145.si [5.189.165.135])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by box.aero145.si (Postfix) with ESMTPSA id 7A183840046
for <ziga.mihajlovic@mydomain.com.com>; Mon, 15 Mar 2021 20:03:48 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=trideja.si; s=mail;
t=1615835028; bh=aRSF5Uef7HNp2BrYh+x9eTkHI1Et6YjhNGF8PWxfIQQ=;
h=From:To:Subject:Date:From;
b=eQmQNWaD/Vgek/OBLXWkT5bfUGK8ccVGFGu5nguf86XYCuhhmH+DzW8HIOgIFCnkT
UrzNhRynWebMZKOBWWY0EJywkXt+UyHeTWLi1UbMaaAq8x8zoyXtKFC37Eyu/2DvIv
BqcP+NNrsziF17XciA7KPR2MafZgattXrpWs4oEjItCoMNq6xdDHekRoj6skOKkKhW
ZZjsWt1H64YyJNfUW7MQ96vd9sAQ2gL4ESgk4tgQbQj0eCKUEEzvnkukWMInf5AxjF
zD0nxMt6EQvjxrKxVU2Fsni60MBnvsxyjQfYeDsxEW9uJ9602mtnteihFLW6cv1fjP
NGlpq0VoqA9sw==
From: <lovro.sambol@trideja.si>
To: <ziga@mydomain.com.com>
Subject: Ponudba
Date: Mon, 15 Mar 2021 20:03:48 +0100
Message-ID: <004701d719cd$ee5c3790$cb14a6b0$@trideja.si>
MIME-Version: 1.0
Content-Type: text/plain
Thread-Index: AdcZzYWxcuJ+shJmQj+M48cYjZFVBw==
Content-Language: en-si
Return-Path: lovro.sambol@trideja.si
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 39d6d41d-c7ca-4a42-ae3b-0fba82be994b:0
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 596d45dd-7f7c-478e-51f7-08d8e7e511cb
X-MS-TrafficTypeDiagnostic: PR3PR03MB6618:
VE1EUR01HT233:
X-MS-Exchange-AtpMessageProperties: SA
SL
X-MS-Oob-TLC-OOBClassifiers: OLM:2089;
X-Forefront-Antispam-Report:
CIP:5.189.165.135;CTRY:DE;LANG:sl;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:box.aero145.si;PTR:box.aero145.si;CAT:SPM;SFS:(4636009)(2876002)(75640400001)(26005)(6916009)(6266002)(1096003)(36756003)(5660300002)(336012)(4006050)(2616005)(28085005)(356005)(8676002)(21480400003)(7596003)(6966003)(956004)(7116003)(3480700007)(33964004)(1420700001)(58800400005)(44736005)(86362001)(7636003)(35310200010);DIR:INB;
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
=?utf-8?B?bEVYeXNPV1BMSGF4L3RHRnZ3NkNPQWg5cDFqb2JoanJtNm83TDN4OEdtdG0w?=
=?utf-8?B?eWdPSm9QS2xabXVwRUp5cm00K3NtTHBpYTlnb1E4Sll6aXFWR1RxZHNOOWd3?=
=?utf-8?B?czBkV3FRcVN6UERScDYwRUtOclRZTjdrVy9qUXdxZm1PK0huTTBUZ0Q5L0Rm?=
=?utf-8?B?L2JRZUdZUXhDSERiUWY3SkVDRE5yaHcxU3hlUXJrd2diTFRWM0VEeS9qV2ds?=
=?utf-8?B?cG45MUxhMFlFU0laYS93SCsrMi9URFdGbDN4N2tuMG9XQnMvdGF6aWxPUm8r?=
=?utf-8?B?QVgvRHNvVW9KR2lHMVJXTWY2VDZLVlFEZ09KbE9CQnJReGt6UWUxZi9GSG0r?=
=?utf-8?B?dFR0SXkreElncm9YY2pRaDR0RXlyaDZsejB1VHBqY0tNTzVyYWJtRlJ5Snk2?=
=?utf-8?B?djVSUjM0MkJ3UTRySU5rNnhxUFVDdGlGbXlteUVXNTFuSmdFcDBMdHNWelRB?=
=?utf-8?B?RnFiaHc0KzhQcDQ4Ukloek1Jc0R3RHJxRmIzMHVHbUxGR0FMaGgyWWZwbHV2?=
=?utf-8?B?eHVKOXZLWkJUdDljN0RqNEo3WmpxRzJHYjhLeDF2Q2oyU0pTTFBCUlRyYVFR?=
=?utf-8?B?YXozSGI4cWVwT1FpZHBVM3ZqVGRvdElZQzUyVFlkMXZjRGZmVzF0alYrbDdZ?=
=?utf-8?B?UUZ0RTFCV2R4UlMwbXd0SW9Gd1Z2N3ZDZ0F3WS9oOHprays2SFltc1Y4S0Iz?=
=?utf-8?B?dTVOYi9IYnlZRitwZUtqc0dNTDduSTBQZ0xBSFV4cWxKYmxrQlZEVmpCR3Nk?=
=?utf-8?B?WkhmKzBwMkRnTllnUkEwdjRMcEZwb2QxVUVjQ0Fpc0JhdTlqZWtjaE1wZUlY?=
=?utf-8?B?TlZVaVR2WlRlSkJGcE5TVSt4WUVCN1o0djJGNWFPNEtPYk45ZVMrTGIxUFZx?=
=?utf-8?B?dXF1T2htM21GZHNIVW9UTkJUdGdlY2J3OUc3SXNZYVh4UWxHSGhoNk9tUGZR?=
=?utf-8?B?L0xnRXdzZHRnOHpxSXNha2ttaGRxd2J4R0JNdS8xUnorcjlDdW5RSWZXc01l?=
=?utf-8?B?Sk9IUDRWREtJdERTZzhNREEySDJaTHF2Z1BVcXg1ZGYwSkE5aWJLU0lIY3V0?=
=?utf-8?B?bThPWUNVOGJMUGlBY2w0UkJYWG1UN1B0TjJFTlVKb2pkaFFrOERGUFBOZ3NI?=
=?utf-8?B?UWJnbTZSR2JQMDNRZ0I0QWhMNHk2SHBCTDhDRFR6VFByaU9uU0VueG5Zdnh5?=
=?utf-8?B?OHdibHB4ZTBzdllSR29qUDRrRjM1aUVpVVBxSGR6OUZrTFpxTnFPNTNaVzU5?=
=?utf-8?B?VVc3ZFgvbkxOZWJYZlZqMzdiNEVCZ0RtNjYrVjZGT0F0THo4dmJ6QUlZRGpG?=
=?utf-8?B?R3Z2WDFocWJuOFJQcFJNQ2QwUjNDUjdwaWlmWCsvSXFtcWxmQTVSamhxcjZJ?=
=?utf-8?B?ODgwY2hqK1Y3NDhkQkdZankyTTlYdHZNTGd4VXdlWTFWdlRnQzNlK2I4cGxL?=
=?utf-8?B?cW5ESERwc2ZycXRkOVRrNDNxWWZJcnZQMm1oSk5QUGtPWVpsYVhya1JpLzVG?=
=?utf-8?B?Q2MzSmk4Z3JSellLa3FXbXc2MFF0SFdzSGZwcDQ3WXJIZ0wyR1o1L1FjQnVo?=
=?utf-8?B?blY3Kzl1eE1NVTNpOEJyVHhmTFo3ZFlVTUtleVNYZDNXWDRZRjFmN1hDa2l3?=
=?utf-8?B?RXdxN0srT3ZUSEpHblVQbFdOQnYzait4Wjk0WVFCL29jd0Rocy83L3dONGJk?=
=?utf-8?B?WVltSkJ6ZmtLdEljcWtsZVZ0UWlHRklkQS9WNGxOeDRDK3psZEl4bW4vbkN4?=
=?utf-8?B?M1pvYWhiQUEwWlBkeS9xUUxXUTRlUVVhL1lpWTZ3THJrdFlaeEhhV1hpcmdn?=
=?utf-8?B?d3JIV3UzMG0rVlpOZEJBN1kzdVNQRHhZdHpPcHN0V0JKek90anM5eFQ2dW0z?=
=?utf-8?B?MW1ONWZWbjFtemI0anNqNUFXVGw3d2JEYTE4cW51T2tqME9HSHU4YmVtdS9W?=
=?utf-8?B?YTdpVXVoUjYxaEU3eURnS0hIZ2dBWlpYSkZja0E2NExWNGx4Q0VBSDQxZkJW?=
=?utf-8?B?THB5bkxMajNCUEJyeWhLZHdsbXZNVTh6cUJSVGNWL1FvRm5yMktlRENvR0xZ?=
=?utf-8?B?WjB2bytvWnRMOCs3clJ3T3QzQW80eDFiRkh3UDNCU3Q0Wm45Z0VHSitRWXNo?=
=?utf-8?B?QzhaaGV0MERTcy9USUNMeTRzMzNIS1E2WHYwV28vbzEvcTV4cXRyWkFoSXBP?=
=?utf-8?B?dVpWQ09iWGtaSHd5YitNWVpKVUdqOU8xQjZWeVJiUlFkek9vNEs0NDI2ZkVJ?=
=?utf-8?B?amhiSW1LWEZPSkd5S2hSL2xBdDlkb3RQaXEveDVzS2R5NWM4bUxCOVlNQ1FR?=
=?utf-8?B?ZURpeE1aVzBZWW5YU2VzSlFvMnhVcHQyOVlkY2IxNU5QYUZ6dUpPSXJ4SjlG?=
=?utf-8?B?RXo3ckhzdGl5RmxrakRQdWFrS3lzbHJQQWxnK3pyYzkvS1o1cS81REwrMTFq?=
=?utf-8?B?ZXhsWUdQVzFQcHFPMFMySVF0NklYNzFWSjBkNDNQcUJ6QjhNeG1UbjZhdjN2?=
=?utf-8?B?RjUydks1YXBNUSsyekNnMlNmRW44S3JNdjVmTlNlQ1BVM0R6OHlpMzFqZWVn?=
=?utf-8?B?aTc5TllydmkreFk1U2sxb2ZyMkVTaFpSL3hnVlBmUEdjMHFCTXZTelZsUFZM?=
=?utf-8?B?Tjl4SGtNYnB0eG0vVEVJZWpYMFY1WjZvNUtieHE5SVI5TzRGYWZuMTJRVnpi?=
=?utf-8?B?OFAvbFZER2YvdWxwM2xsWDVhTmhaODJ1N3c9PQ==?=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PR3PR03MB6618
X-EopAttribution-RoutedToQuarantineCount: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped:
VE1EUR01FT018.eop-EUR01.prod.protection.outlook.com
X-OriginatorOrg: mydomain.com.onmicrosoft.com
Hi Team,
I am still struggling and trying to identify why one of my domains is getting in to spam
Just to update on this domain I had two email users. And I have asked both to sent me the email to my company email where they used MS OFFICE 365. One email came in OK the other one was marked with spam. I then created a new email account on that domain and again it was send to spam.
On MXTOOLBOX spam analyze I have dropped in the message header and I got a result -4 out of 5
Even on the report below it is stated that system has not identify it as SPAM. is this now a reputation issue?
Is it possible that there is an issue with IP6 as I have that one enabled ?
-4.8/5.0
Spam detection software, running on the system "ip-10-2-10-203.ec2.internal",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (-4.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at https://www.dnswl.org/, high
trust
[2a01:111:e400:7e18:0:0:0:50 listed in]
[list.dnswl.org]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.0 TVD_SPACE_RATIO No description available.
Yes. Whenever possible, disable IPv6.