Pak ini ada contoh kasusnya utk domain : Morepen.com

*HEADER TIDAK KENA SPAM : *
From - Tue Jun 11 12:30:06 2019

X-Account-Key: account1
X-UIDL: MD50000080769:MSG:2088414:30744597:3968526086
X-Mozilla-Status: 1013
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-MDAV-Result: clean
X-MDAV-Processed: webmail.pttdp.com, Tue, 11 Jun 2019 12:24:21 +0700
Return-path:<[email protected]>
Received: from secure.emailsrvr.com [(184.106.54.10)] by pttdp.com 
(117.102.88.187) (MDaemon PRO v18.5.2)
        with DomainPOP id md50002188374.msg; Tue, 11 Jun 2019 12:24:20 +0700
X-MDRemoteIP: 184.106.54.10
X-MDHelo:
X-MDArrival-Date: Tue, 11 Jun 2019 12:24:20 +0700
X-Return-Path:[email protected]
X-Envelope-From:[email protected]
X-MDaemon-Deliver-To:[email protected]
Delivered-To:[email protected]
Delivered-To:[email protected]
Received: from director7.mail.iad3b.rsapps.net ([172.31.255.6])
        by backend21.mail.iad3b.rsapps.net with LMTP id gAQIIyA6/1wxYwAAyuEoYQ
        for<[email protected]>; Tue, 11 Jun 2019 01:20:32 -0400
Received: from proxy1.mail.iad3b.rsapps.net ([172.31.255.6])
        by director7.mail.iad3b.rsapps.net with LMTP id +A4DIyA6/1yhYgAAJbq6dw
        ; Tue, 11 Jun 2019 01:20:32 -0400
Received: from smtp9.gate.iad3b ([172.31.255.6])
        (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
        by proxy1.mail.iad3b.rsapps.net with LMTP id OGmRIiA6/1z8OAAALM5PBw
        ; Tue, 11 Jun 2019 01:20:32 -0400
X-Spam-Flag: NO
Authentication-Results:  smtp9.gate.iad3b.rsapps.net 
x-tls.subject="/C=US/ST=California/L=Mountain View/O=Google 
LLC/CN=smtp.gmail.com"; auth=pass (cipher=AES128-GCM-SHA256)
X-Virus-Scanned: OK
X-Orig-To:[email protected]
X-Originating-Ip: [209.85.167.46]
Authentication-Results: smtp9.gate.iad3b.rsapps.net; iprev=pass policy.iprev="209.85.167.46"; 
spf=pass smtp.mailfrom="[email protected]"  smtp.helo="mail-lf1-f46.google.com"; 
dkim=pass header.d=morepen.com; dmarc=none (p=nil; dis=none) header.from=morepen.com
X-Suspicious-Flag: NO
X-Classification-ID: 9f5ab1c0-8c08-11e9-af66-525400f4d366-1-1
Received: from [209.85.167.46] ([209.85.167.46:39213] 
helo=mail-lf1-f46.google.com)
        by smtp9.gate.iad3b.rsapps.net 
(envelope-from<[email protected]>)
        (ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=AES128-GCM-SHA256
        subject="/C=US/ST=California/L=Mountain View/O=Google 
LLC/CN=smtp.gmail.com")
        id CA/AF-16647-C1A3FFC5; Tue, 11 Jun 2019 01:20:32 -0400
Received: by mail-lf1-f46.google.com with SMTP id p24so8274014lfo.6
        for<[email protected]>; Mon, 10 Jun 2019 22:20:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=morepen.com; s=google;
        h=mime-version:references:in-reply-to:from:date:message-id:subject:to
         :cc;
        bh=mUuwUiI0omMfk3SRyL06RkcHjCVHmmFxewgllOXXUes=;
        b=VJV+HNZajtxdak0cToRZ71SaCUfeDsPsPZHqiyAoa0s9Lk7s8NhuXCVL/E1u0Tgsg5
         M59hCIqUNXXQlSpIsTyejBz+Ob48vlpzGreQSWNLGTs4zV4NF4ReCszNII6TKA543M15
         LnJNxwHS3pJubSUepev3CsB96ShUi5/TYALtk=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:references:in-reply-to:from:date
         :message-id:subject:to:cc;
        bh=mUuwUiI0omMfk3SRyL06RkcHjCVHmmFxewgllOXXUes=;
        b=a/jSnE8qtxmf/+b96ID2GhQhfxkkTcC1C2UmhfwgHBVrru9+NoK9kP0CVnTwVHmFc3
         82uGsbHc2HiQVtjKaxUfdsm6iTlhR15vtcJx9Q222Wlv9ag5vM9vG4aBSF75Dcy5mGNH
         aRdpYqc9HJPJiD0QnQbd7kOH4KEJrePmh8+tq1HQ3kzcGoxxKRw2B0dIMmGM2ZHKYrDt
         EdycIceeOIDjPrUdfsfVbN+DiDAgOuifVxtVtNNvYvAByE6DoVKZyZYERYidHq0MtwyX
         1likaCM/S8BGOAgon6vZmIGEgBMTBuiElO0aynnQTnLmB6Mz4twsB9koFKwGGxbKHlRm
         NhyQ==
X-Gm-Message-State: APjAAAUIaEWyrlsXtWxQV5olePVX2WvAAMjvNNOkBxgWIluc6jB3s9AS
        pXHh9zSoU5MCFCBMZ/WVy1ARNc3ZgDOKpt5Mwb8TQOMV
X-Google-Smtp-Source: 
APXvYqwXAGl8tJngiFgseLn3Yy/PJ7D9ZnceriLj4Kfv6cqGz8v+wjhHBkZ4BqB7whzg5uXl1XCItyB0+i/P+YjZry0=
X-Received: by 2002:a19:4b4c:: with SMTP id y73mr36107046lfa.129.1560230425299;
 Mon, 10 Jun 2019 22:20:25 -0700 (PDT)
MIME-Version: 1.0
References:<[email protected]>
 <cafjtjukk1jmnipys2picfxk2ktnwfdquiknx9s9pjoqze9q...@mail.gmail.com>
 <[email protected]>  
<CAHa=fmcyQcYA5cxQxgOgo=vitfcmp79wy99nm2dmhr2w3ro...@mail.gmail.com>
 <[email protected]>  
<CAHa=fmeFnLp=266p3-pa7foyuujh4fdypc1l_2sehxvfptt...@mail.gmail.com>
 <[email protected]>
In-Reply-To:<[email protected]>
From: Gaurav Lakhani<[email protected]>
Date: Tue, 11 Jun 2019 10:50:11 +0530
Message-ID:<CAHa=fmfk6hj+tnw+fklk8dzizngshfxzxzoyxxy-ufqneqo...@mail.gmail.com>
Subject: Re: RQ: Desloratadin
To: Vivi<[email protected]>
Cc: NOVI<[email protected]>, Bharat Rajdev<[email protected]>,
        "arpana.gupta"<[email protected]>

============================================
*HEADER KENA SPAM :***
From - Wed Jun 12 18:15:51 2019
X-Account-Key: account5
X-UIDL: MD50000036696:MSG:46682:30744846:4007288454
X-Mozilla-Status: 1001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-MDAV-Result: clean
X-MDAV-Processed: webmail.pttdp.com, Wed, 12 Jun 2019 18:06:49 +0700
X-Spam-Processed: webmail.pttdp.com, Wed, 12 Jun 2019 18:06:48 +0700
Return-path: <[email protected]>
X-Spam-Flag: YES
X-Spam-Level: ******
X-Spam-Status: Yes, score=6.5 required=5.0 tests=DEAR_SOMETHING,
        
FORGED_RELAY_MUA_TO_MX,HTML_MESSAGE,RDNS_NONE,SPF_PASS,T_FILL_THIS_FORM_SHORT,
        UNPARSEABLE_RELAY shortcircuit=no autolearn=disabled version=3.4.1
X-Spam-Report:
        *  3.5 FORGED_RELAY_MUA_TO_MX No description available.
        * -0.0 SPF_PASS SPF: sender matches SPF record
        *  1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
        *  0.0 HTML_MESSAGE BODY: HTML included in message
        *  1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
        *  0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay 
lines
        *  0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
        *      information
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28)
Received: from secure.emailsrvr.com [(184.106.54.10)] by pttdp.com 
(117.102.88.187) (MDaemon PRO v18.5.2)
        with DomainPOP id md50002189951.msg; Wed, 12 Jun 2019 18:06:47 +0700
X-MDRemoteIP: 184.106.54.10
X-MDHelo:
X-MDArrival-Date: Wed, 12 Jun 2019 18:06:47 +0700
X-Return-Path: [email protected]
X-Envelope-From: [email protected]
X-MDaemon-Deliver-To: [email protected]
Delivered-To: [email protected]
Delivered-To: [email protected]
Received: from director12.mail.iad3b.rsapps.net ([172.28.255.1])
        by backend21.mail.iad3b.rsapps.net with LMTP id uHYmD+zbAF3AOgAAyuEoYQ
        for <[email protected]>; Wed, 12 Jun 2019 07:03:08 -0400
Received: from proxy5.mail.ord1c.rsapps.net ([172.28.255.1])
        by director12.mail.iad3b.rsapps.net with LMTP id UEVKDOzbAF1SYAAANvxIog
        ; Wed, 12 Jun 2019 07:03:08 -0400
Received: from smtp1.gate.ord1c ([172.28.255.1])
        (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
        by proxy5.mail.ord1c.rsapps.net with LMTP id 2C2QBezbAF1DZwAAPBRIyg
        ; Wed, 12 Jun 2019 07:03:08 -0400
Authentication-Results:  smtp1.gate.ord1c.rsapps.net 
x-tls.subject="/C=US/ST=California/L=Mountain View/O=Google 
LLC/CN=smtp.gmail.com"; auth=pass (cipher=AES128-GCM-SHA256)
X-Virus-Scanned: OK
X-Orig-To: [email protected]
X-Originating-Ip: [209.85.167.43]
Authentication-Results: smtp1.gate.ord1c.rsapps.net; iprev=pass policy.iprev="209.85.167.43"; 
spf=pass smtp.mailfrom="[email protected]" smtp.helo="mail-lf1-f43.google.com"; 
dkim=pass header.d=morepen.com; dmarc=none (p=nil; dis=none) header.from=morepen.com
X-Suspicious-Flag: NO
X-Classification-ID: a7f454fe-8d01-11e9-901b-842b2b47c027-1-1
Received: from [209.85.167.43] ([209.85.167.43:33142] 
helo=mail-lf1-f43.google.com)
        by smtp1.gate.ord1c.rsapps.net (envelope-from 
<[email protected]>)
        (ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=AES128-GCM-SHA256
        subject="/C=US/ST=California/L=Mountain View/O=Google 
LLC/CN=smtp.gmail.com")
        id E1/F4-16248-BEBD00D5; Wed, 12 Jun 2019 07:03:07 -0400
Received: by mail-lf1-f43.google.com with SMTP id y17so11749554lfe.0
        for <[email protected]>; Wed, 12 Jun 2019 04:03:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=morepen.com; s=google;
        h=mime-version:references:in-reply-to:from:date:message-id:subject:to
         :cc;
        bh=H+rod+E+Qw13UF82r5aOPQvlT/85CVZkhUhxzV5DR+8=;
        b=DwsWZaVTnPbQE5CI/ntAEDYarmAAlwjB3NiZO74SMudW3Z7O6kI94dKTR8zg7nyPcV
         7dm6jJhOLDD/xoC+DQ/HPppgQh8LRlESFCWkf9mBUlbmlE4EdbOvwKoMqKC+uy9Ex6Tg
         TZ0rM8++aY5xgFEnxvs23m9hDocKaUTd7J+oo=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:references:in-reply-to:from:date
         :message-id:subject:to:cc;
        bh=H+rod+E+Qw13UF82r5aOPQvlT/85CVZkhUhxzV5DR+8=;
        b=f7Y3dTy0yOru3ZgG8TwDl5upqyhvW+1tjmgW/9M6GMqaDRZ0b+UN/tHotWzrx5P2Is
         EPJEtbTk2JgJxbZ8Rn62jxFTJkgMKWZ6CYqSwA7FiJGyU+1zrDb9a/4/vRcDlPRSD503
         sdeTlSdyEtZ7vOzgKJS2/G5cLlNTLblvi/mX2Hv5AjGxQwz7/SMd89UqZUJwZSY7Wohi
         +eAvbOexx/I3zqjpAWGaw2CbpPHAH1YIGLxKTRs173Fy/0S2VYe/Lq9m4cJxnQ06tflL
         hABSlH/eroU4iD1w8lfMyyRTXNAUdiwWmsALhNbkiudJaIfeATxbXF8N9jFQHMDGxIdU
         TBeQ==
X-Gm-Message-State: APjAAAVphxLDZonG/O6fdlTpWLRyTwNKWqSOBnKaGBnWlLTAi92CNRdY
        J74tbHitw0eXW6RWJ8qdx3B9gl3s3nc29cj6pH+0KazN
X-Google-Smtp-Source: 
APXvYqwDxO+NOUvpmBcriUaQN1sdizAJHmMaculXiVFXK4z74nH5aAGt0gXLaimaUNIE7piS9G7rUz4iuGspdojyYXY=
X-Received: by 2002:ac2:484f:: with SMTP id 15mr36438088lfy.51.1560337385754;
 Wed, 12 Jun 2019 04:03:05 -0700 (PDT)
MIME-Version: 1.0
References: <[email protected]>
In-Reply-To: <[email protected]>
From: Bharat Rajdev <[email protected]>
Date: Wed, 12 Jun 2019 16:31:45 +0530
Message-ID: <CAFjTjuKMhXjrG=zec6jr+bjtdholwuod-rtnzj1ls50jo92...@mail.gmail.com>
Subject: [***SPAM*** Score/Req: 06.5/5.0] Re: CPhI China 2019 - Meeting schedule
To: Vivi <[email protected]>
Cc: "praveen.dhanwaria" <[email protected]>,
        Piyush Tandon <[email protected]>
Content-Type: multipart/related; boundary="0000000000009bbdd5058b1e5b8d"
X-Spam-Prev-Subject: Re: CPhI China 2019 - Meeting schedule


--
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke [email protected]
Henti Langgan: Kirim mail ke [email protected]
Versi terakhir MD 19.0.1, SG 6.0.1

Kirim email ke