I get an email/receipt from a vendor on a payment made. This message continuously gets flagged as spam even though I've added it to the whitelist_from.cf list.
Received: (qmail 26946 invoked by uid 30297); 27 Nov 2020 20:52:17 -0000 > Received: from unknown (HELO p3plibsmtp02-04.prod.phx3.secureserver.net) > ([68.178.213.4]) > (envelope-sender > <bounces+3662312-701a-<to-address>@sendgrid.net>) > by p3plsmtp23-04-26.prod.phx3.secureserver.net (qmail-1.03) with > SMTP > for <to-address>; 27 Nov 2020 20:52:17 -0000 > Received: from o1.3nn.shared.sendgrid.net ([167.89.100.129]) > (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 256/256 bits) > (Client did not present a certificate) > by CMGW with ESMTP > id ikj3kLwOeFeQXikj3kiQrL; Fri, 27 Nov 2020 13:52:17 -0700 > X-CMAE-Analysis: v=2.4 cv=SdYyytdu c=1 sm=1 tr=0 ts=5fc16701 b=1 > cx=a_idp_nop > a=d87GDerR7hnUjA61tTL9RQ==:117 a=d87GDerR7hnUjA61tTL9RQ==:17 > a=kj9zAlcOel0A:10 a=zPYWiABUAAAA:8 a=5-f5ixlAKy49-4MjWEkA:9 > a=O-7aY5Sf57aUu7p3:21 a=_W_S_7VecoQA:10 a=CjuIK1q_8ugA:10 > a=5LfDJFqq-uUA:10 > a=AWL3az150N33eOPX4RKm:22 a=Z5ABNNGmrOfJ6cZ5bIyy:22 > a=UDnyf2zBuKT2w-IlGP_r:22 > DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sendgrid.net; > h=from:subject:mime-version:to:content-type:content-transfer-encoding; > s=smtpapi; bh=5/eVCwWUZDl73ybzUYFmyMNdYNgvUvrvS9S5NJHu8QU=; > b=kDKnSU9Bb2Mi5khPiwjinzdlOorchkBuNfEWHSiqVeWqCaZPHmztDB3ZeQXPLVkVbLuH > 6NgvFXajs2aidTnh9bSKSMn4RaTPC+nvQU4DxFoXj0dL9yy9rjBGsdmS0BBD6+qzBl6gSi > i2UwAMxRGXKbODjK5T5Ll1us3XKXKt9cI= > Received: by filterdrecv-p3iad2-5dc87598f5-8bxxp with SMTP id > filterdrecv-p3iad2-5dc87598f5-8bxxp-19-5FC16700-AD > 2020-11-27 20:52:16.878084415 +0000 UTC m=+951689.287978429 > Received: from spiderdoor.com (unknown) > by ismtpd0118p1mdw1.sendgrid.net (SG) with ESMTP > id ceyKf2F5QpyH7v63ZKS3nA > Fri, 27 Nov 2020 20:52:16.783 +0000 (UTC) > Date: Fri, 27 Nov 2020 20:52:16 +0000 (UTC) > From: no-re...@spiderdoor.com > Message-ID: <5fc1670079f34_26fd3171828...@api1.mail> > Subject: Payment Receipt for Unit G030 - paid from SpiderApp > Mime-Version: 1.0 > X-SG-EID: > > > =?us-ascii?Q?nNFctdm0BWd6iTjLSzehWYRyQOg6=2FUycD+ddLrh9vGVcvZBTHPJYDTCViDqyYQ?= > =?us-ascii?Q?Li3bEIOOksE35=2FhSgezGSc37DN46Fkbxk1TO9E8?= > =?us-ascii?Q?MGQPgTWt6k58DhiRQTG0=2F+79xc=2FO7jtyaG0XkLO?= > =?us-ascii?Q?1DjUXyElg+pd9Ry=2Fm1Wy7CmJWR0I1zJgLk=2FUjTC?= > =?us-ascii?Q?=2F7EUOycJlpjn1eLS5JSN9MBpwsXNk7EKGYPvDxO?= > =?us-ascii?Q?duJHjPbILEuJJjx1g=3D?= > To: i...@myspace.rent, <to-address> > X-Entity-ID: eEuAPys4acQ9ere1FZlp6A== > Content-Type: text/html; charset=us-ascii > Content-Transfer-Encoding: 7bit > X-CMAE-Envelope: > > > MS4xfLrAfEKlWNG6dcz1a05VWlMXnGyOE7soLGjybMz1QFzvpZ8a8cRDyTGNbMY9ezX311xKb9zb5aWg3AtH7xkCUlT7kaAYASl+bOfJ3EEdSfKKIoPXjO+i > > > gjrerNiIxiRiWOcLF0BuxQKyIc/5BN0U4rxx20N0k1kPbaXyR06Ty99IgAWy9imxFxsms0GP03MmGWur7XyGwMcP6r/JKJ3ntGwGN1Diolw7WC+ywjp9VBM5 > X6m7dicNVVVO+LUx/qLWyQ== > X-Nonspam: None > > > Any idea why it gets flagged and what rule I need to put in place to prevent it from happening? Thank you. Daryl