I see secureserver.net and sendgrid.net, of course it gets flagged. I am constantly harassed by these networks. I would not recommend using secureserver.net, I think those servers are easy to hack, otherwise I would not even know this network.
-----Original Message----- From: Daryl Rose [mailto:rosed...@gmail.com] Sent: zondag 29 november 2020 16:41 To: users@spamassassin.apache.org Subject: Legitimate message being flagged as spam I get an email/receipt from a vendor on a payment made. This message continuously gets flagged as spam even though I've added it to the whitelist_from.cf list. Received: (qmail 26946 invoked by uid 30297); 27 Nov 2020 20:52:17 -0000 Received: from unknown (HELO p3plibsmtp02-04.prod.phx3.secureserver.net) ([68.178.213.4]) (envelope-sender <bounces+3662312-701a-<to-address>@sendgrid.net>) by p3plsmtp23-04-26.prod.phx3.secureserver.net (qmail-1.03) with SMTP for <to-address>; 27 Nov 2020 20:52:17 -0000 Received: from o1.3nn.shared.sendgrid.net ([167.89.100.129]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 256/256 bits) (Client did not present a certificate) by CMGW with ESMTP id ikj3kLwOeFeQXikj3kiQrL; Fri, 27 Nov 2020 13:52:17 -0700 X-CMAE-Analysis: v=2.4 cv=SdYyytdu c=1 sm=1 tr=0 ts=5fc16701 b=1 cx=a_idp_nop a=d87GDerR7hnUjA61tTL9RQ==:117 a=d87GDerR7hnUjA61tTL9RQ==:17 a=kj9zAlcOel0A:10 a=zPYWiABUAAAA:8 a=5-f5ixlAKy49-4MjWEkA:9 a=O-7aY5Sf57aUu7p3:21 a=_W_S_7VecoQA:10 a=CjuIK1q_8ugA:10 a=5LfDJFqq-uUA:10 a=AWL3az150N33eOPX4RKm:22 a=Z5ABNNGmrOfJ6cZ5bIyy:22 a=UDnyf2zBuKT2w-IlGP_r:22 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sendgrid.net; h=from:subject:mime-version:to:content-type:content-transfer-encodi ng; s=smtpapi; bh=5/eVCwWUZDl73ybzUYFmyMNdYNgvUvrvS9S5NJHu8QU=; b=kDKnSU9Bb2Mi5khPiwjinzdlOorchkBuNfEWHSiqVeWqCaZPHmztDB3ZeQXPLVkVb LuH 6NgvFXajs2aidTnh9bSKSMn4RaTPC+nvQU4DxFoXj0dL9yy9rjBGsdmS0BBD6+qzBl6 gSi i2UwAMxRGXKbODjK5T5Ll1us3XKXKt9cI= Received: by filterdrecv-p3iad2-5dc87598f5-8bxxp with SMTP id filterdrecv-p3iad2-5dc87598f5-8bxxp-19-5FC16700-AD 2020-11-27 20:52:16.878084415 +0000 UTC m=+951689.287978429 Received: from spiderdoor.com (unknown) by ismtpd0118p1mdw1.sendgrid.net (SG) with ESMTP id ceyKf2F5QpyH7v63ZKS3nA Fri, 27 Nov 2020 20:52:16.783 +0000 (UTC) Date: Fri, 27 Nov 2020 20:52:16 +0000 (UTC) From: no-re...@spiderdoor.com Message-ID: <5fc1670079f34_26fd3171828...@api1.mail> Subject: Payment Receipt for Unit G030 - paid from SpiderApp Mime-Version: 1.0 X-SG-EID: =?us-ascii?Q?nNFctdm0BWd6iTjLSzehWYRyQOg6=2FUycD+ddLrh9vGVcvZBTHPJYDTCVi DqyYQ?= =?us-ascii?Q?Li3bEIOOksE35=2FhSgezGSc37DN46Fkbxk1TO9E8?= =?us-ascii?Q?MGQPgTWt6k58DhiRQTG0=2F+79xc=2FO7jtyaG0XkLO?= =?us-ascii?Q?1DjUXyElg+pd9Ry=2Fm1Wy7CmJWR0I1zJgLk=2FUjTC?= =?us-ascii?Q?=2F7EUOycJlpjn1eLS5JSN9MBpwsXNk7EKGYPvDxO?= =?us-ascii?Q?duJHjPbILEuJJjx1g=3D?= To: i...@myspace.rent, <to-address> X-Entity-ID: eEuAPys4acQ9ere1FZlp6A== Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: 7bit X-CMAE-Envelope: MS4xfLrAfEKlWNG6dcz1a05VWlMXnGyOE7soLGjybMz1QFzvpZ8a8cRDyTGNbMY9ezX311xK b9zb5aWg3AtH7xkCUlT7kaAYASl+bOfJ3EEdSfKKIoPXjO+i gjrerNiIxiRiWOcLF0BuxQKyIc/5BN0U4rxx20N0k1kPbaXyR06Ty99IgAWy9imxFxsms0GP 03MmGWur7XyGwMcP6r/JKJ3ntGwGN1Diolw7WC+ywjp9VBM5 X6m7dicNVVVO+LUx/qLWyQ== X-Nonspam: None Any idea why it gets flagged and what rule I need to put in place to prevent it from happening? Thank you. Daryl
