Forum Discussion

mmfairbairn's avatar
mmfairbairn
Settling in
26 days ago

Virgin media treating church emails as spam

I administer a church website with a .church domain and we're having problems with emails being sent to blueyonder addresses, which Virgin Media is treating as spam. All of our setup looks fine (SPF, DMARC and DKIM all looking good using MXToolbox). The only emails that seem to get through are plain text with just one short line of text. Anything more is treated as spam. Any ideas?

12 Replies

      • Anonymous's avatar
        Anonymous

        Which is to be expected, as you say "The only emails that seem to get through are plain text with just one short line of text”, which implies that that there is nothing explicitly wrong with your domain sending; ie plain test email get through, so what is triggering the spam detection? 

        Tell me, do the emails get through to VM subscribers, but get dumped into their spam folder - does seem, to be the case as per you post; or do they not get delivered at all? This is important to know.

        Tell me, do you have any footers or headers on your emails, any graphics which are loaded from an external site? That can cause an email filtering system to kick-off.

  • Thanks everyone for the replies. The emails to (all three) blueyonder addresses don't get delivered at all.  We're sending out such emails about three times a week, to between 20 and 40 people.  There are no footers, headers or graphics.  The emails are rejected even if it's completely plain text and without any website links.

    • coenoby's avatar
      coenoby
      Very Insightful Person

      mmfairbairn​ "The emails are rejected even if it's completely plain text and without any website links."

      If the emails are being rejected by VM  you should be getting  error "non delivery" messages back from VM. Those error messages should give a very strong clue as to why VM have not delivered them.  

      Without that information there is not a lot VM can do to resolve the situation.

      Coenoby

       

  • Thanks Coenoby.  You're right that we do get a detailed non-delivery message.  Here's an example (with personal information removed).

    *************************

    There's a problem with the recipient's mailbox. Please try resending the message. If the problem continues, please contact your email admin.


    mx4-prd-nl1-vmo.edge.unified.services gave this error:
    MXIN617 Message contains Spam Content ;id=RXk9u1kcfBmL8RXk9uvJKE;sid=RXk9u1kcfBmL8;mta=mx4-prd-nl1-vmo;dt=2025-06-17T16:56:57+02:00;ipsrc=52.101.196.98;

     

     

     

    Diagnostic information for administrators:

    Generating server: LO0P302MB1997.GBRP302.PROD.OUTLOOK.COM

    ***********,******@blueyonder.co.uk
    mx4-prd-nl1-vmo.edge.unified.services
    Remote server returned '554 5.2.0 MXIN617 Message contains Spam Content ;id=RXk9u1kcfBmL8RXk9uvJKE;sid=RXk9u1kcfBmL8;mta=mx4-prd-nl1-vmo;dt=2025-06-17T16:56:57+02:00;ipsrc=52.101.196.98;'

    Original message headers:

    ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
     b=oMR8oAIW9BfyLfhhW3SKtG/3nvfMatEfJMinMYwcEPFbfq/nWO7a9HAixfO9iAl6NfgU/zTFA+rWQKBdUhkCEMMEt1CmWo30qk91h/DbcNXTEmJPpZNjQZojsOw068LBJ/ubQWcfiuwEB98U4bwhIjU3M65jjZDXVyIu8OBDk6FO4Qs+pkl0ICVPIdDo5gnY1gPO1bsHn/YxUAvatLCx1Qcg6GyuI2sDOVXdNZ4Dh5i6GJMgZM0Mv7SaJw3YbSYPAAitjWdKa48vwRj/GynK7ZC/OSX8nivtXD5s5ztzPCjfbMis3+Q7AwhfdRGn+kxohm5uGOpDdiWVDcDzldSxyw==
    ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
     s=arcselector10001;
     h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
     bh=hQdCIGfQmn5pFuRkw/7/C3hbOExhQSVnhNUbKwiql50=;
     b=lNAMgVfYXzmY2ORSmssPICQXJ45BQnl14EZ+NG/wCvT0vZ++AtmLHufkzOJnhY8l17Zv3X1dj5WC9oGMH5GMePbVHh5TWTo70XhY3njUIHozxlGluv7OGdsbUvhIV7VV1PQSPJK0CKp0R333y/vEgEwLymrtZxLDi6V/Jgzm5F4oQreSOYKr2O4RRz+/McfE/OnDvm/ix/ulYbBPSQhVIpP4kGWaCdP6eD3netFnRxyz4dCXOxVnv5dzBb1FQycTbeKlUbsB1xMKEqMGV+RRTbrVBw7WEuOddXYTtubGIlFu/WILUnapwQhGl8J5dBA6lPoA+sO9iJxklbq6BVmbaQ==
    ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
     smtp.mailfrom=*****.church; dmarc=pass action=none header.from=*****.church;
     dkim=pass header.d=*****.church; arc=none
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=*****.church;
     s=selector1;
     h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
     bh=hQdCIGfQmn5pFuRkw/7/C3hbOExhQSVnhNUbKwiql50=;
     b=LeJ8LMYqAjuzMyBPEEc5jAaFCVZOWIG3hE066gtwAS2QE7n2WEwMu/x8veRhQ5bdVdD7p0AWIC68qEYPiIYETNiGT1/kwnXfyJcn8thUb7aEyN6Lf0Ak1mMrohmW8hFaKCArAnagI/qnA9+od4n9NTYMdHdi4YUqDuhbRFvy/FQ+rM9IsMFvra8HBFAHoxJav2ov0Cigd4PPmXht8DB8Sm3n7KOuRBsIE/Dc3uasuS7n0Fm231vHu6AMihes7Whpbin7zuq2q1W+S6tC7YR5CpER4XF683gy87+Pud0mAZrpvdh76SO7YQhqcvCbRsobHihrxZZVYaMc9w0x0oehWA==
    Received: from LO2P302MB0282.GBRP302.PROD.OUTLOOK.COM (2603:10a6:600:375::12)
     by LO0P302MB1997.GBRP302.PROD.OUTLOOK.COM (2603:10a6:600:428::20) with
     Microsoft SMTP Server (version=TLS1_2,
     cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8857.18; Tue, 17 Jun
     2025 14:56:56 +0000
    Received: from LO2P302MB0282.GBRP302.PROD.OUTLOOK.COM
     ([fe80::9ceb:aae:5ee1:2d67]) by LO2P302MB0282.GBRP302.PROD.OUTLOOK.COM
     ([fe80::9ceb:aae:5ee1:2d67%5]) with mapi id 15.20.8835.027; Tue, 17 Jun 2025
     14:56:49 +0000
    From: ************ <*******.*******@*****.church>
    To: "****************" <************@blueyonder.co.uk>
    Subject: Music for Sunday 22/6/2025
    Thread-Topic: Music for Sunday 22/6/2025
    Thread-Index: Advflu7y572iqZDSRjmFJUaZFVyK1wAADTnwAAANaYAAACfQIA==
    Date: Tue, 17 Jun 2025 14:56:49 +0000
    Message-ID: <LO2P302MB028259179589A6277E42ABB7E273A@LO2P302MB0282.GBRP302.PROD.OUTLOOK.COM>
    References: <LO2P302MB0282D3C12A70271793941D28E273A@LO2P302MB0282.GBRP302.PROD.OUTLOOK.COM>
     <LO2P302MB0282305AA187729A9E49E7B5E273A@LO2P302MB0282.GBRP302.PROD.OUTLOOK.COM>
     <LO2P302MB028204D3FC9BEE05DF061E2DE273A@LO2P302MB0282.GBRP302.PROD.OUTLOOK.COM>
    In-Reply-To: <LO2P302MB028204D3FC9BEE05DF061E2DE273A@LO2P302MB0282.GBRP302.PROD.OUTLOOK.COM>
    Accept-Language: en-GB, en-US
    Content-Language: en-US
    X-MS-Has-Attach:
    X-MS-TNEF-Correlator:
    authentication-results: dkim=none (message not signed)
     header.d=none;dmarc=none action=none header.from=*****.church;
    x-ms-publictraffictype: Email
    x-ms-traffictypediagnostic: LO2P302MB0282:EE_|LO0P302MB1997:EE_
    x-ms-office365-filtering-correlation-id: 58c00525-b3fa-4d5e-f052-08ddadaf3023
    x-ld-processed: 9c7359bf-246e-4afa-acaa-01216569856f,ExtAddr
    x-ms-exchange-senderadcheck: 1
    x-ms-exchange-antispam-relay: 0
    x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|376014|366016|10070799003|38070700018;
    x-microsoft-antispam-message-info: =?iso-8859-1?Q?eFo322Ivs4CnbfEqcetpsBBuHiTv0sAhWdWu5Q/AIHMMjTyDkXMZRJXizA?=
     =?iso-8859-1?Q?vXw+yE7HuKUbSFT5kQV0QHNcVYy5k25wFAOLUABguASC2e/326rDppqR6J?=
     =?iso-8859-1?Q?oSr94PzSDIAqk43ELEz/Gp3ojhf0WMBmmzsYirPgLvDvX40Z3/NzIcZRp1?=
     =?iso-8859-1?Q?GA/noX6DwOqDbmFhxaAS5c1DpZf4i0viAlfUvuFJBpbdl48h8UOGqfWtQE?=
     =?iso-8859-1?Q?O361qmeXNQJ2koBNsUiPlMA+fwWfuE6Xx8W+Ec//5wEnjttL0cDreNNhB3?=
     =?iso-8859-1?Q?kcDTay140GThc5Lurw0J4CU3puPXt7x84Siau0x5l8qOYkmDHUfL70uv2T?=
     =?iso-8859-1?Q?IoZgT0NEDYeZ6+SEJXEVHDdMgSf3N4oGnUn7kwk/kbTHGOHBdjAxhITH+N?=
     =?iso-8859-1?Q?/8ohXpNoWbJKcawsMpmhIKR8CkJvxp32tcVK+5Hyk1nuVNlNU8kGiEfXXD?=
     =?iso-8859-1?Q?YKhQRj2Xk5hogIk8QypWcZ55p/dkXmQ5h+yIuSDz6cOMpFfGrXAG0Wzwmg?=
     =?iso-8859-1?Q?dH6HfdyyKVyVAJrokZ505NQkMCpf8F5bB+aVEWwiJIz+qwT2HKDWHY2Y8f?=
     =?iso-8859-1?Q?SOIHCb23DAQjtX34MOAPl+Aq55Bh7NFgvC5C6SQZ0YYgOWC20S5u0Gg22N?=
     =?iso-8859-1?Q?xlB2OfiWtJUdR+LNbQSNwyvLTge4VxYNF0Wyft2uKMBUXXXJlcnrjTzVMr?=
     =?iso-8859-1?Q?vUuQu7ZJM7fVAm/VikOdnUeTrO8A3I4tMtFOpS3hTDqqGUWWMd17QeAVeP?=
     =?iso-8859-1?Q?u3sL8AJey9F/kulYxwr/JnP3ix1Pio4kZ50rzFZMCdHPN972KbMk1dDWQ3?=
     =?iso-8859-1?Q?kuq60qpnN5CfQedzZBHg+Mh6/Qipd44ZsbnxhRmUhXKcnuI4FAeCtDnCJr?=
     =?iso-8859-1?Q?uFibSD44ZNxOv7S/5+Wl537OKRJrLbNFjYRTp/Uo7wjzNWEf8PhEmyYPPf?=
     =?iso-8859-1?Q?LeL6ImuFtEstardAhsGjFTqyKsIJZDsBBHb0pv1xl9UmqcWKRocms6evaO?=
     =?iso-8859-1?Q?ypcPjssLmP4iS2uhAD44S5iRwystC6lsr4qsBd21X+oCexB3cUmDLSAS6S?=
     =?iso-8859-1?Q?0qc0qjNjQt7OFYciLtsNUXaeeNnnTckrY1HNwyQllvyYG/u0mFKRBEGmyx?=
     =?iso-8859-1?Q?GMNYLaEoEfR38ADIiRLWptdnYsBjPT5ik0BY73oYKxa5FiAj2IjAbouu9O?=
     =?iso-8859-1?Q?HANBqUTfEpsjOAuDzJ+cM0i1IKNxqXHBSTa9Ss/AasdK1NMUhJeJjzqyt+?=
     =?iso-8859-1?Q?YrTrQIE0iI/yuiOY/41NQW5kqzeeqt3ymv9TrizgyV62ZezRryqjy0rRl4?=
     =?iso-8859-1?Q?PHb49EiuaaXOwDCgSR3W1h3C0y7WLlfdHASIXsbn1W4CjUn1Ckme7RLEzl?=
     =?iso-8859-1?Q?9ghnTiNR/c00vFECSAM8a+3iQxWIVez58sMibjNcagnRdmAM128T8b7oGF?=
     =?iso-8859-1?Q?gT87SjHM31/P7Fb9KA50li+hBdbutFC/CX04OeCoEW/TJi+gjKlzDzGFmT?=
     =?iso-8859-1?Q?JfafuLAOfcw2RUPtrRQsqxgrOFDCDwwKBOetlTGZbs6g=3D=3D?=
    x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:LO2P302MB0282.GBRP302.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(376014)(366016)(10070799003)(38070700018);DIR:OUT;SFP:1102;
    x-ms-exchange-antispam-messagedata-chunkcount: 1
    x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?N4b62CNmXmqwnLw/93rxVdbQvg3/6bSaa4NXdtUex5gKY5TF2c+SaGT2j7?=
     =?iso-8859-1?Q?aJ6fr6z47PRGjQgNHFqi3Kd2Oy9i/3AFqB4KaH+JG/hMsHyxMIdjsjOROy?=
     =?iso-8859-1?Q?R7hO+5ANtvLOaTgUAyUXgZ0Nvk6B+n2pC1D7YlWehLMVuk87u6baxEdNih?=
     =?iso-8859-1?Q?lRZGwDXdRgOZ2j+njhqTf+/7pnWeis98wsm01M4+H63+ifOZe/RgWBpcV0?=
     =?iso-8859-1?Q?6CwX5YzavAcV2fgu96bHymdnvjJK66JNDmTzkg7qKAyOUma78naGNUQWIa?=
     =?iso-8859-1?Q?L6Zcmu+KgFzRqTgu5Hv2RLPRAicibHGmlsLkRkpHT1uRF/e4AOqZHxh5mv?=
     =?iso-8859-1?Q?XUjC3gcV23FJpjMLETXjlXYGCyqVqLgsagLgDA+ZGrWdrDHFMpkKyhWjZH?=
     =?iso-8859-1?Q?cKhwQ8olWydChlEOk2W+tygOvnnxzb1Grpe+MtGc+3twxO3MLKVK3fomjG?=
     =?iso-8859-1?Q?yulEzzIu0xC1sYwEPFFDFXn/PIdCBxEy6L9/nxl/lOyU6Nnb29D0WKzK74?=
     =?iso-8859-1?Q?1yOqjWmzCPQ2MaNCiA6eRWF0gsz16dp8lWu4369rclKjLdHl0KrWI1u1DU?=
     =?iso-8859-1?Q?86tEznSULCHUZNzJQqyEK/b703xhxq4+3gUc41RGtPkL/rUNip1OXkPEEi?=
     =?iso-8859-1?Q?GmPC1pe/9lWqssXNOuBqFhnzfRO1R9Vx6VX/fcTPPDtwYzCxlBc8k2IhqL?=
     =?iso-8859-1?Q?0DbIWNNE1YKifjSpMFnQ86eRZ/2CHFeDmiuIQhMpeqUeYTGMxPbPpMokiw?=
     =?iso-8859-1?Q?Nca1oEKqeG/QyD0c/3PaXH605i3Mzk6zoZdchmRxkd0r+Pzz7f9gFznJrt?=
     =?iso-8859-1?Q?kK+pO8rPO54mxIL7JT7y5mDQThyXXUlcBle/RNtuq3jbCMWHal5x/iAG0f?=
     =?iso-8859-1?Q?h6JWS16Iq3vN56i0YYQTDTvkhPnR34A5VQzgO415ajely+bNYwOJDp9SUh?=
     =?iso-8859-1?Q?ea5tb0mSveSxuqq2nlGw16M5AYe8As5nJ6ScSyjFuBjtwPb1j8W3WZ9PDN?=
     =?iso-8859-1?Q?hseXlPxGmU/dKNu/4B5KDm3skKefYPLzuNIdHWR6Au+rbyFYI8atepnNf1?=
     =?iso-8859-1?Q?fY4HqkrOCjO/7Wszinf1Ba9/IZqG1fYRSkNVnY+b7NhPihBAka6ZDU5R4Z?=
     =?iso-8859-1?Q?1D567RUZgJg/caTczoNuG3W5dTgDouCgsLHZvQ4InTKUnCi13g8m/56WjU?=
     =?iso-8859-1?Q?Cn2GTXDYE7GXGIWq+iiCHSvYmz3w0Vs2AlddRovkhQy+Lwf/vaU/HM0eCL?=
     =?iso-8859-1?Q?8q1GwtiQ6cUz5fT+rRhLF4wk2QQzWIcwxLKrM5UKice1ZjzN/q4tbLUpWD?=
     =?iso-8859-1?Q?RMfb0NdHTsJY1upnizakP0uYTjlEkccoX4/fdItnWFUQbnOxM3YPcQF+jM?=
     =?iso-8859-1?Q?nm3BjGx3h0nHe8gYjYkEhbqO3AonyfJvFZEzJW5vEDfcf4wQL/gxwwmI1H?=
     =?iso-8859-1?Q?M47pfJWa1uZUYofmxGRLi0ZpYhOxVhYx8DkYia6QHKBBPsJqgkmW1XkUiG?=
     =?iso-8859-1?Q?4Wh4ElgyrOQnAUdyrH0fG+xhcts30JducUmbe6FYrxsKjxkenNWhKKH1Nx?=
     =?iso-8859-1?Q?qLmdlLxuxUYKNiWV2Ntp040llnv65vEM53Y4jXFKqVfydeXU02Ml1bCwIf?=
     =?iso-8859-1?Q?qj3RRxglmeMEU04oQA4Vr72NEPGjTJNrfVIqjLI5NwXK2fUeJVaNomKgzr?=
     =?iso-8859-1?Q?+W99PasuPNWvlSiKpMtWBhQGPHsxGNvim7P9dXEVVr5/LtRqY2ZPuihZ/7?=
     =?iso-8859-1?Q?Dhfw=3D=3D?=
    Content-Type: text/plain; charset="iso-8859-1"
    Content-Transfer-Encoding: quoted-printable
    MIME-Version: 1.0
    X-OriginatorOrg: *****.church
    X-MS-Exchange-CrossTenant-AuthAs: Internal
    X-MS-Exchange-CrossTenant-AuthSource: LO2P302MB0282.GBRP302.PROD.OUTLOOK.COM
    X-MS-Exchange-CrossTenant-Network-Message-Id: 58c00525-b3fa-4d5e-f052-08ddadaf3023
    X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jun 2025 14:56:49.4629
     (UTC)
    X-MS-Exchange-CrossTenant-fromentityheader: Hosted
    X-MS-Exchange-CrossTenant-id: 9c7359bf-246e-4afa-acaa-01216569856f
    X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
    X-MS-Exchange-CrossTenant-userprincipalname: 6+Rw7a7YLL6MgzOafC/VcQ4AsibO9ft5hK4tMGCqV3gSUw0N5/hkbDDtCPhXsn2G3gMh73HWwCqzXzH9J2CaV6qJFiI/WYH8izAJQjeFcy4=
    X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO0P302MB1997

    • coenoby's avatar
      coenoby
      Very Insightful Person

      mmfairbairn​ 

      Ok, thanks for that.

      Just a thought, so do you send these emails with the  multiple recipients listed as BCC addresses?

      If so do you put an email address in the "To" field or do you just leave it blank? 

      If you list all the recipients as  BCC addresses and leave the "To" field blank I would try sending the emails again with BCC addresses but put your own email address in the to field.

      Emails with multiple BCCs and no "To" address may look very "spammy" to  VM's spam filters.

      Coenoby 

      • mmfairbairn's avatar
        mmfairbairn
        Settling in

        Thanks so much again Coenby,

        I've now tried all of the following:

        • Including my address in the 'To' field
        • Including someone else's address in the 'To' field
        • Using the Outlook webmail 'merge mail' facility

         

        All of which result in rejection (although oine did get through using the Outlook webmail 'merge mail' facility.)

        What does work OK is if I send separate individual emails to each of the blueyonoder recipients.

        I suspect there's nothing more I can do from my end, except submit a complaint to Virgin Media.

    • Molly_T's avatar
      Molly_T
      Icon for Forum Team rankForum Team

      Hi mmfairbairn 👋 Thanks for keeping this thread updated. (Also thanks to Coenoby for their insight and support on this one.)

      These kinds of email cases are tricky, as it may be that we need to resolve the issue from the Blueyonder accounts side. I will do my best to offer support and get an IT ticket raised for you for the team to investigate further. Please keep an eye on your Inbox 📩 in the top right corner of the page for a PM offering support. 

      It's most likely that the spam filters are identifying your chain email as spam due to the large number of recipients tagged in - this is further evidenced by the testing you have completed and that the emails arrive safely when being sent to the recipient on an individual basis. I'd recommend the users you are trying to send to check all of their spam filter settings (there's more information on this here) 👉 https://www.virginmedia.com/help/security/how-to-stop-spam-emails

      We can return to this public thread to keep it updated when we have another update. Thanks for your patience in the meantime! 🌞