Het omgekeerde vindt nu bij mij plaats.
Ik heb 2 domeinen waarvan ik de mail laat doorsturen naar mijn freedom.nl account.
Regelmatig komt er mail in de spambox terecht die geen spam is, maar sinds vandaag komt spam geadresseerd aan geharveste accounts in mijn gewone mailbox, en blijft veel reguliere mail nog steeds in de spambox steken…
Hier wat headers. gebruikte mailadressen van mijzelf geanonimiseerd.
Dit is spam, doorgestuurd vanaf een catch-all bij een hoster en zou in de spambox moeten komen, komt het niet want spam-score 1.
Received: from [54.39.87.24] (port=12808 helo=bothercritic.bio)
by web0093.zxcs.nl with esmtp (Exim 4.96-58-g4e9ed49f8)
(envelope-from turquoise@bothercritic.bio)
id 1ptm0b-000Izt-2X
for x@x.x;
Tue, 02 May 2023 11:09:17 +0200
Date: Tue, 02 May 2023 03:58:49 -0500
From: “Barx BusyBall” turquoise@bothercritic.bio
MIME-Version: 1.0
Precedence: bulk
To: x@x.x
Subject: Both of my dogs love this ball…
Message-ID: 42AzOfJsB-CpV2a0lzgebmZ8GE-YA17rSdGZCIigBCo.PHMy97vF0n2m8c9NWnYcyrq_VtfaVnZ1jYlC4wZf_e0@bothercritic.bio
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
SPFCheck: Server passes SPF test, -30 Spam score
SpamTally: Final spam score: unset because ESF not run (SpamAssassin unset, whitelist, or skipped)
X-Forwarded-For: x@x.x
X-Forwarded-For: x@x.x
X-Soverin-Spam-Level: *
X-Soverin-Spam-Bar: +
X-Soverin-Spam-Result: default: False [1.86 / 15.00];
FROM_NEQ_ENVFROM(1.00)[turquoise@bothercritic.bio,SRS0=14cf=x=bothercritic.bio=turquoise@x.x];
NEURAL_SPAM(0.87)[0.348];
R_SPF_ALLOW(-0.20)[+a];
MIME_HTML_ONLY(0.20)[];
MX_GOOD(-0.01)[];
FORGED_SENDER(0.00)[turquoise@bothercritic.bio,SRS0=14cf=x=bothercritic.bio=turquoise@x.x];
FUZZY_BLOCKED(0.00)[rspamd.com];
RCVD_TLS_LAST(0.00)[];
MIME_TRACE(0.00)[0:~];
R_DKIM_NA(0.00)[];
RCVD_COUNT_TWO(0.00)[2];
MID_RHS_MATCH_FROM(0.00)[];
FORGED_RECIPIENTS_FORWARDING(0.00)[];
DMARC_NA(0.00)[bothercritic.bio];
FORWARDED(0.00)[x@x.x];
ARC_NA(0.00)[];
ASN_FAIL(0.00)[3.9.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.0.0.0.c.e.2.6.0.a.2.asn6.rspamd.com:server fail];
RCPT_COUNT_ONE(0.00)[1];
FROM_HAS_DN(0.00)[];
FORGED_SENDER_FORWARDING(0.00)[];
PRECEDENCE_BULK(0.00)[];
TO_DN_NONE(0.00)[];
FORGED_RECIPIENTS(0.00)[m:x@x.x,s:x@freedom.nl]
X-Soverin-Spam-Status: No, score=1.86
Deze legitieme mail is rechtstreeks aan mijn Freedom mailadres verzonden en belandde met score 7 in de spambox:
Return-Path: <bounces+19107112-43d2-[mijn account bij Freedom]=freedom.nl@em6324.allegion.com>
Delivered-To: [mijn account bij Freedom]@freedom.nl
Received: from mx.soverin.net ([10.10.4.102])
by storage.soverin.net with LMTP
id 1YZOB0a0TmRihzcAv6/pJw
(envelope-from <bounces+19107112-43d2-[mijn account bij Freedom]=freedom.nl@em6324.allegion.com>)
for <[mijn account bij Freedom]@freedom.nl>; Sun, 30 Apr 2023 18:32:38 +0000
Received: from o1.ptr7232.allegion.com (o1.ptr7232.allegion.com [149.72.195.213])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
(No client certificate requested)
by mx.soverin.net (Postfix) with ESMTPS id 4Q8ZhN4cm5zNP
for <[mijn account bij Freedom]@freedom.nl>; Sun, 30 Apr 2023 18:32:36 +0000 (UTC)
Authentication-Results: mx.soverin.net;
dkim=pass header.d=allegion.com header.s=s1 header.b=iWNIvc04;
spf=pass (mx.soverin.net: domain of “bounces+19107112-43d2-[mijn account bij Freedom]=freedom.nl@em6324.allegion.com” designates 149.72.195.213 as permitted sender) smtp.mailfrom=“bounces+19107112-43d2-[mijn account bij Freedom]=freedom.nl@em6324.allegion.com”;
dmarc=pass (policy=reject) header.from=allegion.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=allegion.com;
h=mime-version:from:subject:content-type:to:cc:content-type:from:
subject:to;
s=s1; bh=uGbxfwX84lGlXKkEcwTzRC2geW0P3U0UNNcdRCYoo+w=;
b=iWNIvc04Qrspo+XrgPwl9ffs3PLIUMdya1tzWzIGHsHAs/AfbxcF6vYAOosBoutmoNDh
fYzhxwnUSAwZRqDyvm5u9M6VwYRuZKdNf2PL30+NzvdhM91muTrHsu17MM4Ocx2pCkcsDU
wN9gDqguyUpbjMS6kA4BPHsFF4DymU6cmbXjxK5JsqCkSV3XEl14lyCzxhttlQZU62nTiw
RXKhGG2I54gLrUsnsJ+VXxN86rjMv6rueRbWk7KUO0155ekcwmaTpqEzZ0fse5C61Cgs7w
KDWLQapPzR7swdjjzDfSPHhV4GV75/nOt3gqHZtiUDKP1JbuNLCJusoli10Cc4Rg==
Received: by filterdrecv-59cb65cf6d-7cbts with SMTP id filterdrecv-59cb65cf6d-7cbts-1-644EB302-10
2023-04-30 18:27:15.14038835 +0000 UTC m=+5856947.661052138
Received: from AK-AWP-IIS-01 (unknown)
by geopod-ismtpd-4 (SG) with ESMTP
id skZsBPryQiWAC01D7xcGPA
for <[mijn account bij Freedom]@freedom.nl>;
Sun, 30 Apr 2023 18:27:14.726 +0000 (UTC)
MIME-Version: 1.0
From: axa.keyservice@allegion.com
Date: Sun, 30 Apr 2023 18:27:15 +0000 (UTC)
Subject: Bedankt voor uw bestelling bij de AXA Sleutelservice
Content-Type: multipart/mixed;
boundary=–boundary_550_47224e0c-b1cd-4873-a597-8a5a4840f9a2
Message-ID: skZsBPryQiWAC01D7xcGPA@geopod-ismtpd-4
X-SG-EID:
=?us-ascii?Q?61dv40GvekN5d4XnqTt5Pu+8IOkJc1D1aIA6ACvouxg59tOdaT222ooGAsJdf1?=
=?us-ascii?Q?0sbCtWwY9hippYXbHdtjifekcgB5J3Nra9Fyh=2F1?=
=?us-ascii?Q?KVn67rGWDIAwGEbKR8k1eSHHWOUH9j1P4LiSraT?=
=?us-ascii?Q?oTojplvgFUXrziTMgm5zoMNIBaPWUrdmRRUIP9M?=
=?us-ascii?Q?UvqUjr2KgEqFwghS=2FfkAIBTnFIwPEUPdInWnP+S?=
=?us-ascii?Q?VzycNAgEAEelxV7yg=3D?=
To: [mijn account bij Freedom]@freedom.nl
X-Entity-ID: Yim0kY6d+FUFedFAat2Tfw==
X-Soverin-Spam-Status: Yes, score=7.64
X-Soverin-Spam-Level: *******
X-Soverin-Spam-Bar: +++++++
X-Soverin-Spam-Result: default: False [7.64 / 15.00];
FROM_NEQ_ENVFROM(3.00)[axa.keyservice@allegion.com,bounces@em6324.allegion.com];
HTML_SHORT_LINK_IMG_1(2.00)[];
NEURAL_SPAM(1.32)[0.526];
MIME_BASE64_TEXT_BOGUS(1.10)[];
DMARC_POLICY_ALLOW(-0.50)[allegion.com,reject];
MID_RHS_NOT_FQDN(0.50)[];
FORGED_SENDER(0.33)[axa.keyservice@allegion.com,bounces@em6324.allegion.com];
R_SPF_ALLOW(-0.20)[+ip4:149.72.195.213];
MIME_HTML_ONLY(0.20)[];
R_DKIM_ALLOW(-0.20)[allegion.com:s=s1];
MANY_INVISIBLE_PARTS(0.10)[2];
MIME_BASE64_TEXT(0.10)[];
MIME_GOOD(-0.10)[multipart/mixed,multipart/alternative,multipart/related];
MX_GOOD(-0.01)[];
RCPT_COUNT_ONE(0.00)[1];
PREVIOUSLY_DELIVERED(0.00)[[mijn account bij Freedom]@freedom.nl];
FROM_NO_DN(0.00)[];
BLOCKLISTDE_FAIL(0.00)[149.72.195.213:server fail];
TO_MATCH_ENVRCPT_ALL(0.00)[];
TAGGED_FROM(0.00)[19107112-43d2-[mijn account bij Freedom]=freedom.nl];
ASN(0.00)[asn:11377, ipnet:149.72.192.0/19, country:US];
TO_DN_NONE(0.00)[];
HAS_ATTACHMENT(0.00)[];
ARC_NA(0.00)[];
RCVD_COUNT_THREE(0.00)[3];
MIME_TRACE(0.00)[0:+,1:+,2:~,3:+,4:~,5:~,6:+,7:~];
DKIM_TRACE(0.00)[allegion.com:+];
RCVD_TLS_LAST(0.00)[];
GREYLIST(0.00)[pass,body]
X-Spam: Yes