KAM - here are the results I received from the raptor address:
Thanks for using our loopback service. Below is the results of our system for
your email (NOTE: you are receiving a "spam" report which is generated for all
score levels. Please check the score and if it is below 5.0, that would be the
default.):
No, hits=-0.4 required=5.8
tests=ARC_SIGNED=0.001,ARC_VALID=0.001,DKIM_SIGNED=0.1,
DKIM_VALID=-0.1,DKIM_VALID_AU=-0.1,DKIM_VALID_EF=-0.1,
DMARC_PASS=-0.1,EMPTY_MESSAGE=2.344,HTML_MESSAGE=0.001,
KAM_RPTR_PASSED=-1,MIME_HTML_MOSTLY=0.1,
RCVD_IN_DNSWL_NONE=-0.0001,RCVD_IN_MSPIKE_H2=-0.001,
RCVD_IN_SENDERSCORE_90_100=-1.5,SPF_HELO_PASS=-0.001,
SPF_PASS=-0.001
subtests=__ANY_TEXT_ATTACH,__ANY_TEXT_ATTACH_DOC,
__BODY_TEXT_LINE,__CT,__CTYPE_HAS_BOUNDARY,
__CTYPE_MULTIPART_ALT,__CTYPE_MULTIPART_ANY,
__DKIMWL_BULKMAIL,__DKIM_DEPENDABLE,__DKIM_EXISTS,
__DOS_RCVD_THU,__DOS_RELAYED_EXT,__EMPTY_BODY,
__ENV_AND_HDR_FROM_MATCH,__ESP_MSDYNAMICS_ID,__ESP_MSND_ID,
__ESP_SALESFORCE_ID,__ESP_SENDGRID_DOM,__ESP_SMTPCOM_ID,
__E_LIKE_LETTER,__FORGED_RCVD_TRAIL,__FROM_FULL_NAME,
__GB_TO_ADDR,__HAS_DATE,__HAS_DKIM_SIGHD,__HAS_FROM,
__HAS_MESSAGE_ID,__HAS_MSGID,__HAS_RCVD,__HAS_SUBJECT,
__HAS_THREAD_INDEX,__HAS_TNEF,__HAS_TO,
__HAVE_BOUNCE_RELAYS,__HELO_DNS,__HELO_HIGHPROFILE,
__HELO_NOT_RDNS,__HTML_LENGTH_0000_1024,__HTML_LENGTH_384,
__HTML_LENGTH_512,__JM_REACTOR_DATE,__KAM_ALLSCRIPTS1,
__KAM_AMAZON2,__KAM_BBB1,__KAM_BODY_LENGTH_LT_1024,
__KAM_CVS1A,__KAM_DISCORDCDN2,__KAM_DISCORDCDN3,
__KAM_DMARC_POLICY_NONE,__KAM_DOCUSIGN3,__KAM_DROPBOX2,
__KAM_FAKE_ACE2,__KAM_FAKE_ACEHARDWARE2_1B,
__KAM_FAKE_CAN_POST5,__KAM_FAKE_CHASE5,__KAM_FAKE_CITIZEN5,
__KAM_FAKE_COINBASE3_2,__KAM_FAKE_COSTCO_1B,
__KAM_FAKE_CVS_1B,__KAM_FAKE_DELIVER12,__KAM_FAKE_DELIVER4,
__KAM_FAKE_DELIVER6,__KAM_FAKE_DELIVER8,__KAM_FAKE_EFAX1,
__KAM_FAKE_HOMEDEPOT_1B,__KAM_FAKE_LINKEDIN2,
__KAM_FAKE_LOWES_1B,__KAM_FAKE_MT5,__KAM_FAKE_NETFLIX1B,
__KAM_FAKE_PRIME_1B,__KAM_FAKE_SAMSCLUB1B,
__KAM_FAKE_SA_POST1,__KAM_FAKE_STARBUCKS1B,
__KAM_FAKE_TREZOR1,__KAM_FAKE_WALGREENS1B,__KAM_FAKE_ZIX1,
__KAM_FEDEX2,__KAM_GOOGLE2_2,__KAM_HARP3,__KAM_HAS_0_URIS,
__KAM_JURY3,__KAM_MAILSPLOIT2,__KAM_MANYTO,
__KAM_MULTIPLE_FROM,__KAM_PAYPAL3B,__KAM_RPTR_PASSED,
__KAM_UPS2,__KAM_VERIZON3,__KAM_WETRANSFER3,__KAM_WU1,
__LAST_EXTERNAL_RELAY_NO_AUTH,
__LAST_UNTRUSTED_RELAY_NO_AUTH,
__LCL__ENV_AND_HDR_FROM_MATCH,
__LCL__KAM_BODY_LENGTH_LT_1024,__LOWER_E,__MIME_HTML,
__MIME_VERSION,__MISSING_REF,__MISSING_REPLY,__NOT_SPOOFED,
__PDS_HTML_LENGTH_1024,__PDS_HTML_LENGTH_2048,
__PDS_MSG_1024,__PDS_MSG_512,__PDS_RDNS_MTA,
__RATWARE_0_TZ_DATE,__RB_GT_200,__RCD_RDNS_MAIL,
__RCD_RDNS_MAIL_MESSY,__RCD_RDNS_OB,__RCVD_IN_DNSWL,
__RCVD_IN_HOSTKARMA,__RCVD_IN_MSPIKE_L,
__RCVD_IN_SENDERSCORE_90_100,__RDNS_LONG,__SANE_MSGID,
__SPF_FULL_PASS,__STY_INVIS,__STY_INVIS_1,
__STY_INVIS_1_MINFP,__SUBJ_NOT_SHORT,__TAG_EXISTS_BODY,
__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TAG_EXISTS_META,
__TAG_EXISTS_STYLE,__TOCC_EXISTS,__TVD_MIME_ATT_TP,
__T_PDS_MSG_512
This email has been identified and tagged as spam by PCCC's Raptor
Email Security,
https://us-west-2.protection.sophos.com?d=raptoremailsecurity.com&u=aHR0cHM6Ly9SYXB0b3JFbWFpbFNlY3VyaXR5LmNvbS8=&p=m&i=NjUyMDNjNzBhNTYyZDQ1ZDE4N2E2ZTky&t=TFQ5dU9EaTNkZ2d4YUwyZDQ1K2I4Ymc0TjV3cUVNdW1GeHpkSmlkOVJrUT0=&h=d355be3b454b459292d91657b7b45d51&s=AVNPUEhUT0NFTkNSWVBUSVbrTmNf7hx1URHN74DwCDPByZHqlKpcE_mjjTlwqqkBmw.
If this was done in error, your original message has been attached
along with this report, so you can easily retrieve it.
For spam/phish assistance, please contact PCCC's customer support at
raptorrevie...@pccc.com with your goal such as, "please block this,"
"please review this and tell me if it is spam/phish/real," or
"please allow this." From there, PCCC's security experts will work
on the problem.
PCCC is very proud of Raptor's technology and rarely uses simplistic
features like WL & BL entries. PCCC will carefully analyze the email
and implement algorithm changes, make rule updates, create custom
rules, update/contact RBLs, contact other ISPs, and much more! It's
our job to keep good email flowing and block bad email. Plus, we
publish our research for free so your support requests help block
spammers world-wide.
NOTE: For support issues not related to spam/phish, please email
supp...@pccc.com or give us a call at +1.703.359.9700.
We also provide Phishing and Social Media Awareness training!
Visit
https://us-west-2.protection.sophos.com?d=raptoremailsecurity.com&u=aHR0cHM6Ly9SYXB0b3JFbWFpbFNlY3VyaXR5LmNvbS90cmFpbmluZw==&p=m&i=NjUyMDNjNzBhNTYyZDQ1ZDE4N2E2ZTky&t=U1lUeDRFOVFVbzZqbllaR0l4QTliRzRON1JuQmJpVnlHTnJyUHd3cVc4az0=&h=d355be3b454b459292d91657b7b45d51&s=AVNPUEhUT0NFTkNSWVBUSVbrTmNf7hx1URHN74DwCDPByZHqlKpcE_mjjTlwqqkBmw
for more information.
Content preview:
Subject Prefix:
Languages:
QR-code:
Filter Tests:
ARC_SIGNED=0.001,ARC_VALID=0.001,DKIM_SIGNED=0.1,DKIM_VALID=-0.1,DKIM_VALID_AU=-0.1,DKIM_VALID_EF=-0.1,DMARC_PASS=-0.1,EMPTY_MESSAGE=2.344,HTML_MESSAGE=0.001,KAM_RPTR_PASSED=-1,MIME_HTML_MOSTLY=0.1,RCVD_IN_DNSWL_NONE=-0.0001,RCVD_IN_MSPIKE_H2=-0.001,RCVD_IN_SENDERSCORE_90_100=-1.5,SPF_HELO_PASS=-0.001,SPF_PASS=-0.001
Subtests:
__ANY_TEXT_ATTACH,__ANY_TEXT_ATTACH_DOC,__BODY_TEXT_LINE,__CT,__CTYPE_HAS_BOUNDARY,__CTYPE_MULTIPART_ALT,__CTYPE_MULTIPART_ANY,__DKIMWL_BULKMAIL,__DKIM_DEPENDABLE,__DKIM_EXISTS,__DOS_RCVD_THU,__DOS_RELAYED_EXT,__EMPTY_BODY,__ENV_AND_HDR_FROM_MATCH,__ESP_MSDYNAMICS_ID,__ESP_MSND_ID,__ESP_SALESFORCE_ID,__ESP_SENDGRID_DOM,__ESP_SMTPCOM_ID,__E_LIKE_LETTER,__FORGED_RCVD_TRAIL,__FROM_FULL_NAME,__GB_TO_ADDR,__HAS_DATE,__HAS_DKIM_SIGHD,__HAS_FROM,__HAS_MESSAGE_ID,__HAS_MSGID,__HAS_RCVD,__HAS_SUBJECT,__HAS_THREAD_INDEX,__HAS_TNEF,__HAS_TO,__HAVE_BOUNCE_RELAYS,__HELO_DNS,__HELO_HIGHPROFILE,__HELO_NOT_RDNS,__HTML_LENGTH_0000_1024,__HTML_LENGTH_384,__HTML_LENGTH_512,__JM_REACTOR_DATE,__KAM_ALLSCRIPTS1,__KAM_AMAZON2,__KAM_BBB1,__KAM_BODY_LENGTH_LT_1024,__KAM_CVS1A,__KAM_DISCORDCDN2,__KAM_DISCORDCDN3,__KAM_DMARC_POLICY_NONE,__KAM_DOCUSIGN3,__KAM_DROPBOX2,__KAM_FAKE_ACE2,__KAM_FAKE_ACEHARDWARE2_1B,__KAM_FAKE_CAN_POST5,__KAM_FAKE_CHASE5,__KAM_FAKE_CITIZEN5,__KAM_FAKE_COINBASE3_2,_!
_KAM_FAKE_COSTCO_1B,__KAM_FAKE_CVS_1B,__KAM_FAKE_DELIVER12,__KAM_FAKE_DELIVER4,__KAM_FAKE_DELIVER6,__KAM_FAKE_DELIVER8,__KAM_FAKE_EFAX1,__KAM_FAKE_HOMEDEPOT_1B,__KAM_FAKE_LINKEDIN2,__KAM_FAKE_LOWES_1B,__KAM_FAKE_MT5,__KAM_FAKE_NETFLIX1B,__KAM_FAKE_PRIME_1B,__KAM_FAKE_SAMSCLUB1B,__KAM_FAKE_SA_POST1,__KAM_FAKE_STARBUCKS1B,__KAM_FAKE_TREZOR1,__KAM_FAKE_WALGREENS1B,__KAM_FAKE_ZIX1,__KAM_FEDEX2,__KAM_GOOGLE2_2,__KAM_HARP3,__KAM_HAS_0_URIS,__KAM_JURY3,__KAM_MAILSPLOIT2,__KAM_MANYTO,__KAM_MULTIPLE_FROM,__KAM_PAYPAL3B,__KAM_RPTR_PASSED,__KAM_UPS2,__KAM_VERIZON3,__KAM_WETRANSFER3,__KAM_WU1,__LAST_EXTERNAL_RELAY_NO_AUTH,__LAST_UNTRUSTED_RELAY_NO_AUTH,__LCL__ENV_AND_HDR_FROM_MATCH,__LCL__KAM_BODY_LENGTH_LT_1024,__LOWER_E,__MIME_HTML,__MIME_VERSION,__MISSING_REF,__MISSING_REPLY,__NOT_SPOOFED,__PDS_HTML_LENGTH_1024,__PDS_HTML_LENGTH_2048,__PDS_MSG_1024,__PDS_MSG_512,__PDS_RDNS_MTA,__RATWARE_0_TZ_DATE,__RB_GT_200,__RCD_RDNS_MAIL,__RCD_RDNS_MAIL_MESSY,__RCD_RDNS_OB,__RCVD_IN_DNSWL,__RCVD_!
IN_HOSTKARMA,__RCVD_IN_MSPIKE_L,__RCVD_IN_SENDERSCORE_90_100,_!
_RDNS_LONG,__SANE_MSGID,__SPF_FULL_PASS,__STY_INVIS,__STY_INVIS_1,__STY_INVIS_1_MINFP,__SUBJ_NOT_SHORT,__TAG_EXISTS_BODY,__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TAG_EXISTS_META,__TAG_EXISTS_STYLE,__TOCC_EXISTS,__TVD_MIME_ATT_TP,__T_PDS_MSG_512
URI Tests: bbb.org sophos.com
Content analysis details: (-0.4 points, 5.8 required)
2.3 EMPTY_MESSAGE Message appears to have no textual parts
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[104.47.57.169 listed in wl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at
https://us-west-2.protection.sophos.com?d=dnswl.org&u=aHR0cHM6Ly93d3cuZG5zd2wub3JnLw==&p=m&i=NjUyMDNjNzBhNTYyZDQ1ZDE4N2E2ZTky&t=M0VRaStPM2FhL1I3bTRxWmV1Y3NnUjhZTG9pWFAyU0g2Y1BnMDErU0lWVT0=&h=d355be3b454b459292d91657b7b45d51&s=AVNPUEhUT0NFTkNSWVBUSVbrTmNf7hx1URHN74DwCDPByZHqlKpcE_mjjTlwqqkBmw,
no
trust
[104.47.57.169 listed in list.dnswl.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 ARC_VALID Message has a valid ARC signature
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 ARC_SIGNED Message has a ARC signature
-1.5 RCVD_IN_SENDERSCORE_90_100 Senderscore.org score of 90 to 100
0.1 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DMARC_PASS DMARC pass policy
-1.0 KAM_RPTR_PASSED Passed Mail Relay Reverse DNS Test
Thanks!
Mark W. Stanley, Managed Services Engineer
Richweb, Inc. / mstan...@corp.richweb.com
O: 804-368-0421 X 120
richweb.com / hvens.com
-----Original Message-----
From: mailop <mailop-boun...@mailop.org> On Behalf Of mailop-requ...@mailop.org
Sent: Thursday, October 26, 2023 3:54 PM
To: mailop@mailop.org
Subject: [SUSPECTED SPAM] mailop Digest, Vol 39, Issue 48
Caution! This message was sent from outside your organization.
Send mailop mailing list submissions to
mailop@mailop.org
To subscribe or unsubscribe via the World Wide Web, visit
https://list.mailop.org/listinfo/mailop
or, via email, send a message with subject or body 'help' to
mailop-requ...@mailop.org
You can reach the person managing the list at
mailop-ow...@mailop.org
When replying, please edit your Subject line so it is more specific than "Re:
Contents of mailop digest..."
Today's Topics:
1. Re: Still Don't understand Google's relaying systems..
Duplicate Return-Path, and other things.. (Atro Tossavainen)
2. Re: [External] Need Help with Google Deliverability Issue
(Kevin A. McGrail)
----------------------------------------------------------------------
Message: 1
Date: Thu, 26 Oct 2023 22:17:49 +0300
From: Atro Tossavainen <mail...@atrotossavainen.fi>
To: mailop@mailop.org
Subject: Re: [mailop] Still Don't understand Google's relaying
systems.. Duplicate Return-Path, and other things..
Message-ID: <20231026191749.gq28...@dm7.infinitemho.fi>
Content-Type: text/plain; charset=iso-8859-1
> They're a legit Google customer. What's there to marvel at?
https://developers.google.com/gmail/api/guides <- have a look.
--
Atro Tossavainen, Founder, Partner
Koli-Lõks OÜ (reg. no. 12815457, VAT ID EE101811635) Tallinn, Estonia tel.
+372-5883-4269, https://www.koliloks.eu/
------------------------------
Message: 2
Date: Thu, 26 Oct 2023 15:43:53 -0400
From: "Kevin A. McGrail" <kevin.mcgrail-mai...@pccc.com>
To: mailop@mailop.org
Subject: Re: [mailop] [External] Need Help with Google Deliverability
Issue
Message-ID: <726fd9fa-da01-4d35-b711-25bbd218a...@pccc.com>
Content-Type: text/plain; charset="utf-8"; Format="flowed"
Mark, was there a bounce message with any information?
Send a message to raptorloopb...@raptoremailsecurity.com and that will
tell you what that spam scanner sees to check your SPF, DKIM, DMARC, etc.
Regards,
KAM
On 10/26/2023 3:13 PM, Mark Stanley via mailop wrote:
>
> I have recently migrated one of our customers from Google to Office365
> and have been encountering deliverability issues when sending to Google
>
> Raptor Remark: Please be careful! This email is from an EXTERNAL
> sender. Be aware of impersonation and credential theft.
>
> I have recently migrated one of our customers from Google to Office365
> and have been encountering deliverability issues when sending to
> Google-related domains. All other domains are perfectly fine and
> haven’t seen any issues. Listed below are the headers for a bounced
> email to a Gmail account:
>
> ARC-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass;
>
> b=IUdOSeOS2v8fBqFRT+2+ob/64xDWHCrxU6br11+L6Gjlytj2kEMHoVq7TCpkgY1uKHg/IxVBQh1bpLReem8wfvKVM4ncibBVmls1IAmgt/fFxBThm7Vgfc3HZUlmk0NYy+0ifABUO8cVWXE9nz0/XyjTXfmI2lo0CX4Ysgk+mN5FxmFHz1yCDYJomM0k8Naxr7+nO8d9TC7TQ/U2QlH6aHfa2I+kHP/vxNAYPumA6At7aBtXh7o5ULqNt3LDrW/tTJua/8M6Z5KZccU2GHa/wlEaaEH4g9/cLSPGn28kDx5bj1j5jMdl7zXjnETZYymGCEKFJwJMOFecCl3kI4YX7g==
>
> ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed;
> d=microsoft.com;
>
> s=arcselector9901;
>
> h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
>
> bh=U1XPevLPW3kgepb4RRUmQy20bmFrzeFdm+z8xjlDhQo=;
>
> b=MveUHC2brc6+/jbu/Q1RrDABPlHSagEN1omoqqUmP04RPTk60M+AZtFEC2tF2LImub4A1RvvL/w9FjP+lysSfftGpywNPazJHaPgGiW44cqS2S84sGkJFDgHCivhnSfBKYBKHFGvAZhjYe16CXWERd//M0u/yGtTRPoG8J/OSKUcugiMpsburQ6ffOHOmRLERu+w8fBKn7A+4rwIDoKP2/efhZNJ7xQWk/Z6MAB32UXmxWPYOY+/kUMRyQ1Z5Sf2ZAT9MoRnVldID4W9HeGMA75Ticxl8Dt0e/Q+XoD4f7BEHKpwoznNEr9HSLNQXkQSbSuPharKncn3fZEyIbQh6A==
>
> ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=pass (sender
> ip is
>
> 198.154.181.224) smtp.rcpttodomain=gmail.com
> smtp.mailfrom=richmond.bbb.org;
>
> dmarc=pass (p=none sp=none pct=100) action=none
> header.from=richmond.bbb.org;
>
> dkim=pass (signature was verified) header.d=richmond.bbb.org; dkim=pass
>
> (signature was verified)
> header.d=mail-dkim-us-west-2.prod.hydra.sophos.com;
>
> arc=pass (0 oda=1 ltdi=1 spf=[1,1,smtp.mailfrom=richmond.bbb.org]
>
> dkim=[1,1,header.d=richmond.bbb.org]
>
> dmarc=[1,1,header.from=richmond.bbb.org])
>
> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=richmond.bbb.org;
>
> s=selector1;
>
> h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
>
> bh=U1XPevLPW3kgepb4RRUmQy20bmFrzeFdm+z8xjlDhQo=;
>
> b=IBp6WddL0tAEtjsUg9TLjHYmU5nmyIqGMASfttCAkZzzJQLOspzOwgifiLEXyz3lfCwmIC89UkBptAT4Z0p5sFvDUNDTtWkMoK5nPxNpjJAZenjDXSrwRfwcj0WOjcLV7VaIvVYyEs2Db+8tikyWrR2VJ2I9iNAYJkIWqwP50u9jcPYUj3FHKR44B7cxTz1VXeegS2RPjZ968HuIvKsGx6gKSgtWobvcPsYgNA3apo1BZ/Y+i3h7cGx1cdJJPED5uyyeIj8dZ/l28DoMSETkT29DVqCcKvgbVQUyM2URBFUgvksANuYRRjFcE119QOlQSsyGyl1ligENnsozK5MyYQ==
>
> Received: from DM6PR07CA0095.namprd07.prod.outlook.com
> (2603:10b6:5:337::28)
>
> by CO6PR04MB8329.namprd04.prod.outlook.com (2603:10b6:303:134::10) with
>
> Microsoft SMTP Server (version=TLS1_2,
>
> cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6933.22; Thu,
> 26 Oct
>
> 2023 19:00:26 +0000
>
> Received: from DS1PEPF0001708E.namprd03.prod.outlook.com
>
> (2603:10b6:5:337:cafe::30) by DM6PR07CA0095.outlook.office365.com
>
> (2603:10b6:5:337::28) with Microsoft SMTP Server (version=TLS1_2,
>
> cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6933.19 via
> Frontend
>
> Transport; Thu, 26 Oct 2023 19:00:25 +0000
>
> X-MS-Exchange-Authentication-Results: spf=pass (sender IP is
> 198.154.181.224)
>
> smtp.mailfrom=richmond.bbb.org; dkim=pass (signature was verified)
>
> header.d=richmond.bbb.org;dmarc=pass action=none
>
> header.from=richmond.bbb.org;
>
> Received-SPF: Pass (protection.outlook.com: domain of richmond.bbb.org
>
> designates 198.154.181.224 as permitted sender)
>
> receiver=protection.outlook.com; client-ip=198.154.181.224;
>
> helo=mfod-usw2.prod.hydra.sophos.com; pr=C
>
> Received: from mfod-usw2.prod.hydra.sophos.com (198.154.181.224) by
>
> DS1PEPF0001708E.mail.protection.outlook.com (10.167.17.134) with Microsoft
>
> SMTP Server (version=TLS1_2,
> cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
>
> 15.20.6933.18 via Frontend Transport; Thu, 26 Oct 2023 19:00:25 +0000
>
> Received: from ip-172-17-2-248.us-west-2.compute.internal
> (ip-172-17-2-248.us-west-2.compute.internal [127.0.0.1])
>
> by mfod-usw2.prod.hydra.sophos.com (Postfix) with ESMTP id
> 4SGZqr6KmBzdZMC
>
> for <markwstanley2...@gmail.com>; Thu, 26 Oct 2023 19:00:24
> +0000 (UTC)
>
> X-Sophos-Product-Type: Mailflow
>
> X-Sophos-Email-ID: 331699fdd3364172b148bf658ab8ad0a
>
> Received: from NAM12-DM6-obe.outbound.protection.outlook.com
>
> (mail-dm6nam12lp2169.outbound.protection.outlook.com [104.47.59.169])
>
> (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
>
> (No client certificate requested)
>
> by mf-outbound-usu-west-2.prod.hydra.sophos.com (Postfix) with ESMTPS id
>
> 4SGZqq1wzhzRhQn
>
> for <markwstanley2...@gmail.com>; Thu, 26 Oct 2023 19:00:23 +0000 (UTC)
>
> ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
>
> b=kJDl3l74RdoxT1QOA0ix5VgwvFhYhqzcUgGkZr0vhcxIyulP8EGiqJBMBBHFnEBAvzwYh6Wl3yoAV1RR5U6jCUuNWAHYG6lqhXMRycSJXMZCbJGY+k8DMwhMVOY48VMec+GZ8SzQOfjzIzoZ3eF6eLKvgc9ZVRyIP4y5EV3oOxn1SXnNP4uXC9Y6X+FLUW00R/RTiHFPlytHt4hhEktZ/5bGIMHknGHbLhcfsulVbFAfDPxCuI0lqwkpTOrlX4EjOEI09nEXghzxBhAOUmLX4eFJBcRfzMlUDlriv6gyYniTKeOVNuwn7eOb6Smy4W7STqkRth8Z48BmFYVCcexKMw==
>
> ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
> d=microsoft.com;
>
> s=arcselector9901;
>
> h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
>
> bh=U1XPevLPW3kgepb4RRUmQy20bmFrzeFdm+z8xjlDhQo=;
>
> b=j2oLsbNnA/8EGoq5tIM6WVMrAI8PefNYnRWMOmg9EoJTFxXNOViT1vcYZ1Tv80gLv/WICsLnQTBQrxDExEwVBZ636+WRwdjj9vOo0Mh6+O/mt8PDPxGLP+DfAxi0O000rB7d0hsQ6gugFt17fTwmrY7shWwVS94HM1SYFtcwpAJgeWLMJhgBrFCvWl1NzFtK7kLcmEzZL2RKCY+jy2MzFQMBJIcwM1G9pImeuxXM8evpuih/Q7GTnBivqS7Al2c4W0JnJCFoLopkJGYcTDddHPbg5PpopBWjR6UrbNXHvlCZeMsXXFQThIv9ZCcQnVgCHJZ4Ou84eskjk6eyRyQnbQ==
>
> ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
>
> smtp.mailfrom=richmond.bbb.org; dmarc=pass action=none
>
> header.from=richmond.bbb.org; dkim=pass header.d=richmond.bbb.org;
> arc=none
>
> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=richmond.bbb.org;
>
> s=selector1;
>
> h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
>
> bh=U1XPevLPW3kgepb4RRUmQy20bmFrzeFdm+z8xjlDhQo=;
>
> b=IBp6WddL0tAEtjsUg9TLjHYmU5nmyIqGMASfttCAkZzzJQLOspzOwgifiLEXyz3lfCwmIC89UkBptAT4Z0p5sFvDUNDTtWkMoK5nPxNpjJAZenjDXSrwRfwcj0WOjcLV7VaIvVYyEs2Db+8tikyWrR2VJ2I9iNAYJkIWqwP50u9jcPYUj3FHKR44B7cxTz1VXeegS2RPjZ968HuIvKsGx6gKSgtWobvcPsYgNA3apo1BZ/Y+i3h7cGx1cdJJPED5uyyeIj8dZ/l28DoMSETkT29DVqCcKvgbVQUyM2URBFUgvksANuYRRjFcE119QOlQSsyGyl1ligENnsozK5MyYQ==
>
> DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
> t=1698346819;
>
> s=v1; d=mail-dkim-us-west-2.prod.hydra.sophos.com;
>
> h=Content-Type:Date:Subject:To:From;
>
> bh=U1XPevLPW3kgepb4RRUmQy20bmFrzeFdm+z8xjlDhQo=;
>
> b=jcJw6d6HDGLRjPmeM/Ye+DF43hHJMaao4by5+Jfi6F45SAggkc4D41+8pFSpNk2t
>
> Qx7LNQOyPjHyJ4K1AqYgL973657era/YNEniTZsHKZS5CIyFqjxQBu73Uk0YkrXzw3W
>
> L6oNeNo4Bp/kKYZXG8aKNFFBTUkea06TysmByIp4T+AiSUca1JkVpcciwzviaqhoc18
>
> lP9L/2U/ORZUDEzh037Jmx0CKYP30w9Ry3fp9cYmfkGUSvY0lIu2fwa5mDodB65OWjp
>
> uoIFFVzDGfpi28usziso1gO89Ih7n0MMIj6TTrGJx0ZzuxKXZilwUIg9zKNr8ey1Gka
>
> LtUlmxEqag==
>
> Received: from BY5PR04MB6706.namprd04.prod.outlook.com
> (2603:10b6:a03:22e::24)
>
> by MN2PR04MB7134.namprd04.prod.outlook.com (2603:10b6:208:1e3::24)
>
> with Microsoft SMTP Server (version=TLS1_2,
>
> cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6933.19; Thu,
> 26 Oct
>
> 2023 19:00:20 +0000
>
> Received: from BY5PR04MB6706.namprd04.prod.outlook.com
>
> ([fe80::4324:9275:a4f7:113c]) by BY5PR04MB6706.namprd04.prod.outlook.com
>
> ([fe80::4324:9275:a4f7:113c%3]) with mapi id 15.20.6933.019; Thu, 26
> Oct 2023
>
> 19:00:19 +0000
>
> Any insight into this is greatly appreciated. We have getting bounce
> backs for several days now, but experienced a brief period where
> Google domains were able to be reached.
>
> *Mark W. Stanley, Managed Services Engineer*
>
> Richweb, Inc. / mstan...@corp.richweb.com
>
> O: 804-368-0421 X 120
>
> richweb.com / hvens.com
>
>
> RAPTOR REMARK: Alert! Please be careful! This email is from an EXTERNAL
> sender. Be aware of impersonation and credential theft.
>
> _______________________________________________
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://list.mailop.org/private/mailop/attachments/20231026/96d95649/attachment.htm>
------------------------------
Subject: Digest Footer
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
------------------------------
End of mailop Digest, Vol 39, Issue 48
**************************************
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
