Mail going to spam folder in cox.net
Mail going to spam folder in cox.net
I am trying to troubleshoot an issue with mail that I am sending through a third party (ESP) to myself, and for over a month now the messages have been delivered to the junk folder. I want to determine if this is an issue with content or perhaps with the sending domain or IP reputation. The messages aren't being bounced or blocked.
The messages are consistently going to the junk folder now, and even when a contact forwards the same message to me (that they successfully received elsewhere) their forwarded messages go to the junk folder. I'd also like to know if this is a problem for my mailbox or if it may be impacting other cox.net users who we send the same messages to.
Below are the headers for two such messages, retrieved from the junk folder. Can someone from Cox examine the headers to determine what might be going on? I don't believe I have a rule in place for the sending domain set to be blocked or junked, nor do I have them set to be allowed. The two message headers:
Message 1 - junk folder placement:
Return-Path: <[REMOVED]>
Received: from eastrmimpi210 ([68.230.241.251]) by eastrmfepi101.cox.net
(InterMail vM.8.01.05.15 201-2260-151-145-20131218) with ESMTP
id <20150826183304.RQGX24673.eastrmfepi101.cox.net@eastrmimpi210>
for <[REMOVED]@cox.net>; Wed, 26 Aug 2015 14:33:04 -0400
Received: from [REMOVED] by eastrmimpi210 with cox
id 9WZ11r00B0fxNjC01WZ2To; Wed, 26 Aug 2015 14:33:03 -0400
X-Spam-Optin: quarantine
Message-ID: <9WZ11r00B0fxNjC01WZ2To>
X-CT-Score: NA
X-Authority-Analysis: v=2.0 cv=eZPjic4H c=1 sm=1 b=1 p=2kgPxcPQX4wA:10
a=OgR1bFBF52G5VLou61Qdlg==:17 a=jqJx3APsAAAA:8 a=LDByVImiAAAA:8
a=kviXuzpPAAAA:8 a=jPJDawAOAc8A:10 a=uRRa74qj2VoA:10
a=lyYuGu4CHa5PaZGX25icmyaRxzw=:19 a=Yx3IPQ1jo9L7taPXwAoA:9 a=QEXdDO2ut3YA:10
a=WhyLCfzSn8QA:10 a=Y9ZmdtH27PMA:10 a=ZSZAJmUR2EIA:10 a=UTW3GctDQawA:10
a=PR7BF1aH1wEA:10 a=8NxcaRFQ8m0A:10 a=qTpy2nhRcN4A:10 a=YnjVFmDOeLoA:10
a=JHyW0B_OV8oA:10 a=M4QScfzLx2AA:10 a=KYXIKXl0XnsA:10
a=w198VKY8_hbgblWb4fUA:9 a=2Ahxn7RlsFsA:10 a=OgR1bFBF52G5VLou61Qdlg==:117
X-CM-Score: 96.00
Received: from [REMOVED] id hro35u16jb4h for <[REMOVED]@cox.net>; Wed, 26 Aug 2015 14:33:01 -0400 (envelope-from <[REMOVED]>)
X-Receiver: <[REMOVED]@cox.net>
X-Sender: <[REMOVED]>
Date: Wed, 26 Aug 2015 18:33:01 +0000
From: <[REMOVED]>
Reply-To: <[REMOVED]@cox.net>
Subject: =?UTF-8?B?KiogSW5mb3JteiBUZXN0LTIgKiogUkkgTWVkaWNhbCBKb3VybmFs4oCTQXVn?==?UTF-8?B?dXN0IElzc3Vl?=
To: <[REMOVED]@cox.net>
Message-ID: <[REMOVED]>
List-Unsubscribe: <http://[REMOVED].net/[REMOVED]/default.asp?action=u&email=[REMOVED]@cox.net&mi=4606687>
X-IADB-IP: [REMOVED]
X-IADB-IP-REVERSE: [REMOVED]
X-IADB-URL: [REMOVED]
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="Mjk4OTM0MTA1NDA3MTM5MzU4NDc3OTgxNDg4OTk4"
Message two, a forward of the message above sent to me from another provider, also placed in the junk folder:
Return-Path: <[REMOVED]>
Received: from eastrmimpi110 ([68.230.240.50]) by eastrmfepi207.cox.net
(InterMail vM.8.01.05.15 201-2260-151-145-20131218) with ESMTP
id <20150825151858.UGZD15495.eastrmfepi207.cox.net@eastrmimpi110>
for <[REMOVED]>; Tue, 25 Aug 2015 11:18:58 -0400
Received: from mail-ob0-f170.google.com ([209.85.214.170])
by eastrmimpi110 with cox
id 93Fv1r02b3h9KGZ013JuwG; Tue, 25 Aug 2015 11:18:54 -0400
X-Spam-Optin: quarantine
Message-ID: <93Fv1r02b3h9KGZ013JuwG>
X-CT-Score: NA
X-Authority-Analysis: v=2.0 cv=cuRFZSEi c=1 sm=1 p=2kgPxcPQX4wA:10
a=jqJx3APsAAAA:8 a=pGLkceISAAAA:8 a=jPJDawAOAc8A:10 a=uRRa74qj2VoA:10
a=LDByVImiAAAA:8 a=Yba-5btluGXBt1vgvQEA:9 a=QEXdDO2ut3YA:10 a=WhyLCfzSn8QA:10
a=Y9ZmdtH27PMA:10 a=ziwGhm86LekA:10 a=M4QScfzLx2AA:10 a=2Ahxn7RlsFsA:10
a=HfggiU_nJIziXa3iytcA:9 a=UiCQ7L4-1S4A:10 a=hTZeC7Yk6K0A:10
a=_W_S_7VecoQA:10 a=frz4AuCg-hUA:10 a=d5Tk2X25c3oA:10 a=NWVoK91CQyQA:10
a=99SZI+B64J60o7343nyXDw==:117
X-CM-Score: 96.00
Received: by mail-ob0-f170.google.com with SMTP id wr7so144800267obb.2
for <[REMOVED]@cox.net>; Tue, 25 Aug 2015 08:18:55 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:from:references:in-reply-to:mime-version
:thread-index:date:message-id:subject:to:content-type;
bh=eyXaQobaSK4Bu8l0Uen6l5s0W5f5vy4e/tYYnb3NCuQ=;
b=ii+fpub53ffTMiDM/+l3uTXCpfA6Cn1PZdFnZaWLKxR7g7SAHaxdUKl8ap1mERnm2i
4KlvJUro1TGyRuK/XPi4ByE4n93545mbWUxSzLe5V0pm5Q4Cp3seNhXEuJNdwzczQcvj
v0yIQaKLRmv5LvOxevlE8saIJzm/RzWdu/nluCB5+uf/3yJAbz57R/VC3nmCVE5lVoW3
eucVnQSiWiYg7Wd2EfJNRsDmPO8fza9QAm0un3aUPpZjehEeRuv4zO2WB4IT8CVMC4ga
1Vd1/LpQIgeK4qcph/6SLpZC1Cz9pmnngV4e+P23NPXCH43nG8nSlrJFcRUNEh95wf6j
QEFg==
X-Gm-Message-State: ALoCoQmGgkdJZmyNy8vPTOrUbAyjizNHV26Oz3x7t/T81w1NkqYYRF4gSrdgdw1OX/Az9ZomWbH3
X-Received: by 10.60.33.74 with SMTP id p10mr28256410oei.62.1440515934836;
Tue, 25 Aug 2015 08:18:54 -0700 (PDT)
From: <[REMOVED]>
References: <[REMOVED]>
In-Reply-To: <[REMOVED]>
MIME-Version: 1.0
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQGaIpo9KhG6sBGOw2oGNuCV+ZfGFp6KTN3g
Date: Tue, 25 Aug 2015 11:16:45 -0400
Message-ID: <b85f27beac4c6856b680 @mail.gmail.com>
Subject: =?UTF-8?Q?RE=3A_=2A=2A=2D1_=2A=2A_Journal=E2=80=93August?=
=?UTF-8?Q?_Issue?=
To: <[REMOVED]@cox.net>
Content-Type: multipart/alternative; boundary="089e0115eef896fdc0051e244039"
One thing I noticed in both messages was the "X-CT-Score: NA" and "X-CM-Score: 96.00", where messages that are NOT placed in the junk folder have "X-CT-Score: 0.00" and "X-CM-Score: 0.00", like so:
X-CT-Class: Clean
X-CT-Score: 0.00
X-CT-RefID: str=0001.0A020202.55DF6A14.0288:SCFSTAT18704550,ss=1,re=-4.000,fgs=0
X-CT-Spam: 0
X-Authority-Analysis: v=2.0 cv=bsyS8jmi c=1 sm=1 a=jqJx3APsAAAA:8
a=pGLkceISAAAA:8 a=uRRa74qj2VoA:10 a=3rIOuboa6WO4aOeUn_AA:9 a=QEXdDO2ut3YA:10
a=dCqkORpdOv8A:10 a=dF6-1Dv-l8Iueur8euIA:9 a=UiCQ7L4-1S4A:10
a=hTZeC7Yk6K0A:10 a=_W_S_7VecoQA:10 a=frz4AuCg-hUA:10
a=8KaXlSnK7icamR8iFF8A:9 a=IKIoO-ieCDEA:10 a=W0k1p8L2Fg/Q12D2FaSoVw==:117
X-CM-Score: 0.00
What do the X-CT and X-CM scores mean? This seems to be a consistent difference between delivered and junked messages. I don't need to know the secret sauce behind the scoring, but I am hoping to know what is the basic cause for scores to go one way or another, or to be "NA" as seen in the junked message above.
I am configured to use classic webmail, though I am interacting with my mail not through the cox.net web UI, instead using Apple mail on my Mac. I have reported messages from the sender as false positives in the past, and have gone to the cox.net webmail only when I need to retrieve messages that wind up in the junk folder there.
If I could get some assistance figuring out why these messages are always going to the junk folder I would appreciate it. I don't want to just add an allow rule to push the messages through, as that simply masks the issue. It may not even be effective, as I believe those rules work AFTER the cox.net's spam filter has made its own judgement and the messages may remain in the junk folder. I also want to figure out if this is an issue specific to my mailbox or if it is impacting other cox.net recipients of the same mail as we send to many members of the organization who usecox.net addresses for their email.
If there is any additional information I can provide, please let me know. If the conversation must be taken offline to avoid exposing too much information, that would also be okay. I can involve someone from the ESP in the conversation as needed.
