Emails from the same domain go to spam

[Pasha Finkelshteyn]

When I send a letter from one account to another in the same mail in a box, it goes to spam. It looks like it should be somehow whitelisted.

[jvolkenant]

Could you post the "X-Spam-*" headers for an example email?

[Pasha Finkelshteyn]

X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on box.asm0dey.site
X-Spam-Flag: YES
X-Spam-Level: *******
X-Spam-Status: Yes, score=7.4 required=5.0 tests=ALL_TRUSTED,DKIM_SIGNED,
    DKIM_VALID,DKIM_VALID_AU,FROM_FMBLA_NEWDOM14,FROM_SUSPICIOUS_NTLD,
    FROM_SUSPICIOUS_NTLD_FP,HTML_MESSAGE,PDS_FRNOM_TODOM_NAKED_TO,
    PDS_FROM_NAME_TO_DOMAIN,PDS_OTHER_BAD_TLD,T_SCC_BODY_TEXT_LINE
    autolearn=no autolearn_force=no version=3.4.2
X-Spam-Report:
    * -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
    * 2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs
    * [URI: box.asm0dey.site (site)]
    * 0.0 HTML_MESSAGE BODY: HTML included in message
    * -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
    * author's domain
    * 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
    * valid
    * -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
    * -0.0 T_SCC_BODY_TEXT_LINE No description available.
    * 2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD
    * 1.0 FROM_FMBLA_NEWDOM14 From domain was registered in last 7-14
    * days
    * 1.8 PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain
    * 0.5 FROM_SUSPICIOUS_NTLD From abused NTLD
    * 1.2 PDS_FRNOM_TODOM_NAKED_TO Naked to From name equals to Domain
X-Spam-Score: 7.4

Here, thank you!

[Pasha Finkelshteyn]

Oooh, sorry, it was the box notification. Here is about email:

X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on box.asm0dey.site
X-Spam-Flag: YES
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.6 required=5.0 tests=ALL_TRUSTED,DKIM_SIGNED,
    DKIM_VALID,DKIM_VALID_AU,FROM_FMBLA_NEWDOM,FROM_SUSPICIOUS_NTLD,
    FROM_SUSPICIOUS_NTLD_FP,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,
    MIME_HTML_ONLY,PDS_OTHER_BAD_TLD,T_SCC_BODY_TEXT_LINE autolearn=no
    autolearn_force=no version=3.4.2
X-Spam-Report:
    * -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
    * 2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs
    * [URI: asm0dey.site (site)]
    * 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
    * 0.0 HTML_MESSAGE BODY: HTML included in message
    * -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
    * author's domain
    * 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
    * valid
    * -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
    * 1.5 FROM_FMBLA_NEWDOM From domain was registered in last 7 days
    * -0.0 T_SCC_BODY_TEXT_LINE No description available.
    * 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
    * tag
    * 2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD
    * 0.5 FROM_SUSPICIOUS_NTLD From abused NTLD
X-Spam-Score: 5.6
Received: from authenticated-user (box.asm0dey.site [87.251.76.56])
    (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
    (No client certificate requested)
    by box.asm0dey.site (Postfix) with ESMTPSA id 4EA9645A48
    for <[e-mail]>; Fri, 18 Feb 2022 21:07:57 +0300 (MSK)

[jvolkenant]

Looks like its because your TLD is .site. There may be a way for us to have a whitelist for domains hosted by MIAB. I don't have the spare cycles right now to dig into it.

[Pasha Finkelshteyn]

Oh, I see, thanks!