Hi,
For a while now, I have been getting emails in my spam with scores of 6 or higher in the general format of:
Quote:
my first name
<a dodgy link>
<empty lines>
<some random text>
|
However, today, this same kind of email got into my inbox with no spam score at all.
I have put the header below. Can anyone see why it might have got past the spam filters?
Code:
Return-Path: <AnisimovAI@mpei.ru>
Received: from compute4.internal (compute4.nyi.internal [10.202.2.44])
by sloti5d1t04 (Cyrus 3.1.7-612-g13027cc-fmstable-20191203v1) with LMTPA;
Tue, 03 Dec 2019 04:45:49 -0500
X-Cyrus-Session-Id: sloti5d1t04-1575366349-3735980-2-11184768417430371984
X-Sieve: CMU Sieve 3.0
X-Spam-known-sender: no
X-Spam-sender-reputation: 500 (none)
X-Spam-score: 0.0
X-Spam-hits: BAYES_40 -0.001, HTML_MESSAGE 0.001, ME_SENDERREP_NEUTRAL 0.001,
RCVD_IN_DNSWL_NONE -0.0001, SPF_HELO_PASS -0.001, SPF_PASS -0.001,
LANGUAGES en, BAYES_USED user, SA_VERSION 3.4.2
X-Spam-source: IP='193.233.67.19', Host='flogger.mpei.ac.ru', Country='RU',
FromHeader='ru', MailFrom='ru'
X-Spam-charsets: plain='utf-8', html='utf-8'
X-Resolved-to: userID@fastmail.com
X-Delivered-to: name@domain.tld
X-Mail-from: AnisimovAI@mpei.ru
Received: from mx4 ([10.202.2.203])
by compute4.internal (LMTPProxy); Tue, 03 Dec 2019 04:45:49 -0500
Received: from mx4.messagingengine.com (localhost [127.0.0.1])
by mailmx.nyi.internal (Postfix) with ESMTP id C61F11CE00ED
for <name@domain.tld>; Tue, 3 Dec 2019 04:45:44 -0500 (EST)
Received: from mx4.messagingengine.com (localhost [127.0.0.1])
by mx4.messagingengine.com (Authentication Milter) with ESMTP
id B0414A4AE2E;
Tue, 3 Dec 2019 04:45:44 -0500
ARC-Seal: i=1; a=rsa-sha256; cv=none; d=messagingengine.com; s=fm1; t=
1575366344; b=YI3+D0Q+s4IJNjd0vyFImIEnq6Xk1k2Rw3vmnKbMSeIftk9X9t
NUQjV2r/C++h0fZBctpQFIbRIZ3nfXQ+M8AM7PY42/kzkSSd7tAGhAHuvCquEwac
o6Gs9pwhQ2ikpZZBDBtmGWHtt7hnnH7+/UTtVMm1cwWxmUyIXjbLeDgaHlWPJk6O
vI5qWoKLMlyqEGhk/wE47x2e93hlxuoKiHn7zpJP4wAPhjxI4+kVJLl0O9hgK3SQ
51vuHcs0eaxjGv8idMoERxBdojA6UtHvYgAdBQKv5xT3e2TFzNUvpPbUm13Edvki
NQlEBtfycQggU8/wdMfnrCZH3Tp4DWgSgvZg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=
messagingengine.com; h=subject:from:content-type:message-id:date
:to:content-transfer-encoding:mime-version; s=fm1; t=1575366344;
bh=a4AEniQk7xcb5x0OMxkXu0+QjWVUYQLqa1SnmvIyO50=; b=OQs/ikWgwtoL
tCc3lPEikLz4MVfY2jMjI9bBhjMRnGiAGO/1xrOfA/bSibWpfBV0RdSdwv+y91PT
Tha1Zox0w9x0gxEkXWUC0F7TNZz3BC38v3T8aGF091tEUO1OBqvII94NH19YJC0i
L9YNw9fTI9GwllDd1Ppn8R1jNn9V06aOTWw1nAtmSM4Z1ADUBAs1fmGB/dXqtwG/
wPpjMiqus6hjEYIhvPcvoLXicn47/D3xSZVbBkwx7hjSR077MvDHFGUjXPcLMjJt
tupcYp+da/oMaw2MeiSM7JFwO86mTxxl4Ksx58wUMUlc7fGyDZ+VJQBgqx8HoRha
+ye3usOIbQ==
ARC-Authentication-Results: i=1; mx4.messagingengine.com; arc=none (no signatures found);
dkim=none (no signatures found);
dmarc=none policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p header.from=mpei.ru;
iprev=pass smtp.remote-ip=193.233.67.19 (flogger.mpei.ac.ru);
spf=pass smtp.mailfrom=AnisimovAI@mpei.ru smtp.helo=flogger.mpei.ac.ru;
x-aligned-from=pass (Address match);
x-ptr=pass smtp.helo=flogger.mpei.ac.ru policy.ptr=flogger.mpei.ac.ru;
x-return-mx=pass header.domain=mpei.ru policy.is_org=yes
(MX Records found: mcl.mpei.ac.ru);
x-return-mx=pass smtp.domain=mpei.ru policy.is_org=yes
(MX Records found: mcl.mpei.ac.ru);
x-tls=pass smtp.version=TLSv1 smtp.cipher=AES128-SHA smtp.bits=128/128;
x-vs=clean score=23 state=0
Authentication-Results: mx4.messagingengine.com;
arc=none (no signatures found);
dkim=none (no signatures found);
dmarc=none policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p header.from=mpei.ru;
iprev=pass smtp.remote-ip=193.233.67.19 (flogger.mpei.ac.ru);
spf=pass smtp.mailfrom=AnisimovAI@mpei.ru smtp.helo=flogger.mpei.ac.ru;
x-aligned-from=pass (Address match);
x-ptr=pass smtp.helo=flogger.mpei.ac.ru policy.ptr=flogger.mpei.ac.ru;
x-return-mx=pass header.domain=mpei.ru policy.is_org=yes
(MX Records found: mcl.mpei.ac.ru);
x-return-mx=pass smtp.domain=mpei.ru policy.is_org=yes
(MX Records found: mcl.mpei.ac.ru);
x-tls=pass smtp.version=TLSv1 smtp.cipher=AES128-SHA smtp.bits=128/128;
x-vs=clean score=23 state=0
X-ME-VSCause: gggruggvucftvghtrhhoucdtuddrgedufedrudejjedgtdelucetufdoteggodetrfdotf
fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdggtfgfnhhsuhgsshgtrhhisggvpdfu
rfetoffkrfgpnffqhgenuceurghilhhouhhtmecufedttdenucgfrhhlucfvnfffucdlvd
efmdenucfjughrpefuhfgtoffkfffvgfggsegrjehmrehhtdejnecuhfhrohhmpehmihgt
hhgvlhgvucifrghkvghfihgvlhguuceorghnihhsihhmohhvrghisehmphgvihdrrhhuqe
enucffohhmrghinhepsggvnhgusghulhhlvghtrdighiiinecukfhppeduleefrddvfeef
rdeijedrudelpdduleefrddvfeefrdeikedrudefudenucfrrghrrghmpehinhgvthepud
elfedrvdeffedrieejrdduledphhgvlhhopehflhhoghhgvghrrdhmphgvihdrrggtrdhr
uhdpmhgrihhlfhhrohhmpeeotehnihhsihhmohhvtefksehmphgvihdrrhhuqecuuffkkg
fgpeefuddvfecuuefqffgjpeejuefkvfenucevlhhushhtvghrufhiiigvpedt
X-ME-VSScore: 23
X-ME-VSCategory: clean
Received-SPF: pass
(mpei.ru: 193.233.67.19 is authorized to use 'AnisimovAI@mpei.ru' in 'mfrom' identity (mechanism 'ip4:193.233.67.19' matched))
receiver=mx4.messagingengine.com;
identity=mailfrom;
envelope-from="AnisimovAI@mpei.ru";
helo=flogger.mpei.ac.ru;
client-ip=193.233.67.19
Received: from flogger.mpei.ac.ru (flogger.mpei.ac.ru [193.233.67.19])
(using TLSv1 with cipher AES128-SHA (128/128 bits))
(No client certificate requested)
by mx4.messagingengine.com (Postfix) with ESMTPS
for <name@domain.tld>; Tue, 3 Dec 2019 04:45:42 -0500 (EST)
MailScanner-NULL-Check: 1575971059.69816@bgV+7Hj7CEejLMewLLqwRg
Received: from SMTP2.public.mpei.local (mpei-lan-68-131.mpei.ac.ru [193.233.68.131])
by flogger.mpei.ac.ru (8.13.6/8.13.6/SuSE Linux 0.8) with ESMTP id xB39iCEn032608
for <name@domain.tld>; Tue, 3 Dec 2019 12:44:17 +0300
Received: from HUB3.public.mpei.local (10.1.1.49) by SMTP2.public.mpei.local
(10.1.1.26) with Microsoft SMTP Server (TLS) id 8.3.515.0; Tue, 3 Dec 2019
12:44:10 +0300
Received: from smtp.mpei.ru (10.1.114.11) by HUB3.public.mpei.local
(10.1.1.49) with Microsoft SMTP Server (TLS) id 8.3.485.1; Tue, 3 Dec 2019
12:44:07 +0300
Subject: michele wakefield
From: michele wakefield <anisimovai@mpei.ru>
Content-Type: multipart/alternative;
boundary="Apple-Mail-B233C799-E58C-4B78-B1A1-B506BE9EE1DA"
X-Mailer: iPhone Mail (16G77)
Message-ID: <100CF5A6-C712-4F80-BD35-99D9F199A327@mpei.ru>
Date: Tue, 3 Dec 2019 02:44:04 -0700
To: james <name@domain.tld>
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0 (1.0)
X-MPEI-MailScanner-Information: MPEInet administration http://net.mpei.ru
X-MPEI-MailScanner: Found to be clean
X-MPEI-MailScanner-From: anisimovai@mpei.ru
X-Remote-Spam-Status: No