[UA-discuss] Email from new domains going to Junk (was: Requesting a contact from outlook/hotmail)

Thu Aug 2 16:40:46 UTC 2018

Here is the info I received back from the engineering team.  They are happy to look at more failure cases if you have them.

This message in particular did not have the sender as safe-sender (but if you have instances where safesender does not work, please forward them to me) and was junked by the content filter.

The IP reputation for this range is not bad, and most content/communication should work fine (junk rate on the 162.210.70.55/30 registered to Directi in our systems is about 10%).  I provided a mitigation and junking should stop in less than one hour.

Regarding the newer TLDs, the % legitimate traffic registering them is microscopic.  I’ve been told by a spammer that periodically domains in these TLDs are available for sale in bulk for cents and therefore very much loved by spammers (.bid, .club as well).  Haven’t seen international TLDs abused yet in spam.
Towards outlook.com we don’t have a deterministic rule to penalize these TLDs but it could be content filter ML is downgrading them (statistically for the filter it makes sense).  O365 inbound and I am sure other providers do have rules that increase the spam scoring of these TLDs or do more scrutiny.

/marksv

From: Mark Svancarek (CELA)
Sent: Wednesday, August 1, 2018 12:14
To:
Subject: Email from new domains going to Junk (was: [UA-discuss] Requesting a contact from outlook/hotmail)

Sorry for spam, please forward as appropriate.

I am co-chair of https://uasg.tech, a community organization dedicated to the concept that all domain names and email addresses should be treated equally.  This is a conversation from our mailing list.

While I do expect mail from “new” Top-level Domains (e.g. .LAWYER or .みんな) to initially go to Junk while reputations are built, we are confused why they keep going there after users tag them as Not Junk and Safe Senders.

Who can help with this?

/marksv

From: Aman Masjide <aman at radix.email<mailto:aman at radix.email>>
Sent: Wednesday, August 1, 2018 04:34
To: Mark Svancarek (CELA) <marksv at microsoft.com<mailto:marksv at microsoft.com>>
Subject: Re: [UA-discuss] Requesting a contact from outlook/hotmail

Hi Mark,

We did some further research on the anti-spam filtering issue

Sample Test domains- amantest.space

We created a new email ID - bhow at amantest.space<mailto:bhow at amantest.space> and re-tested by sending emails to a newly created hotmail id vivek.shahani at hotmail.com<mailto:vivek.shahani at hotmail.com>, which also ended up in SPAM/Junk folder. Here are the email headers - https://ybin.me/p/72b2aca98ff1ebfe#wCZ4LqfnFSA90erT7PRkHQbUc3AvKtOEWdFSRG47khQ=<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fybin.me%2Fp%2F72b2aca98ff1ebfe%23wCZ4LqfnFSA90erT7PRkHQbUc3AvKtOEWdFSRG47khQ%3D&data=02%7C01%7Cmarksv%40microsoft.com%7C86f01d0cc9db4f25142e08d5f7a2aaba%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636687200389948082&sdata=qUZWITioqKODGQPFI544oZ82482ohT8L8qP4lxI06Eg%3D&reserved=0>

Here is the Analysis of the header - https://mxtoolbox.com/Public/Tools/EmailHeaders.aspx?huid=31f99e9d-dffd-4839-8f07-a476bd76a04f<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmxtoolbox.com%2FPublic%2FTools%2FEmailHeaders.aspx%3Fhuid%3D31f99e9d-dffd-4839-8f07-a476bd76a04f&data=02%7C01%7Cmarksv%40microsoft.com%7C86f01d0cc9db4f25142e08d5f7a2aaba%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636687200389948082&sdata=fb6k1foPw%2BJNZfPFX85%2Bus7Q2BvU02E%2BOOzUuuloYuE%3D&reserved=0>

The X-Exchange-Antispam-Report-CFA-Test shows our Bulkmail and Phising score as 0 [BCL:0;PCL:0]

Despite a 0 suspicious score, our mail ended up in the Junk Folder.

Our research about the issue led us to this outlook customer uservoice page where other users have also giveen similar feedbacks. Here is the uservoice page - https://outlook.uservoice.com/forums/601444-new-experiences-in-outlook-com/suggestions/20504851-regular-email-falls-into-junk-folder<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Foutlook.uservoice.com%2Fforums%2F601444-new-experiences-in-outlook-com%2Fsuggestions%2F20504851-regular-email-falls-into-junk-folder&data=02%7C01%7Cmarksv%40microsoft.com%7C86f01d0cc9db4f25142e08d5f7a2aaba%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636687200389948082&sdata=a7BGgxFmz0oOZaPtZgV4xzMaYyWn84X%2BJ8OuYT6yB2k%3D&reserved=0>

I believe there is some blanket rule within the Anti-Spam (URI Scanner) that classifies domains from new tlds or new domains from legacy/cc tlds automatically as spam. We sent this note to Florantine Stafie ( fstafie at microsoft.com<mailto:fstafie at microsoft.com> ) another contact we got from Domain Name Association, but haven't received a response so far.

I can imagine you have pleanty on your plate but hope you can take some time to look at it.

Thanks and regards,
Aman

On Wed, Jun 20, 2018 at 3:31 PM Aman Masjide <aman at radix.email<mailto:aman at radix.email>> wrote:
Hey Mark,

Thank you for your email. We at Radix are seeing some issues with our .SPACE TLD on outlook/hotmail. A few customers have claimed that emails sent from newly registered  .SPACE domains are ending up in the spam/junk folder of a hotmail/outlook recepient. We tested this theory by creating a new test domain and sent it to existing and new hotmail/outlook accounts. It ended up in the spam folder. We also checked for blacklists for sender IP reputation and it came out clean.

Sample Test domains- amantest.space(new domain), brills.space(old domain)
SenderID - mail at amantest.space<mailto:mail at amantest.space>, test at brills.space<mailto:test at brills.space>
Recepient1 - radixtest at outlook.com<mailto:radixtest at outlook.com>
Recepient2 - anu.somarajan at hotmail.com<mailto:anu.somarajan at hotmail.com>

I would like connect with the right individual within the organization with whom I can discuss this issue and work towards a solution.

Best Regards,

On Tue, Jun 19, 2018 at 9:04 PM, Mark Svancarek <marksv at microsoft.com<mailto:marksv at microsoft.com>> wrote:
I can represent Hotmail/Outlook.com.

From: UA-discuss <ua-discuss-bounces at icann.org<mailto:ua-discuss-bounces at icann.org>> On Behalf Of Aman Masjide
Sent: Tuesday, June 19, 2018 7:07 AM
To: ua-discuss at icann.org<mailto:ua-discuss at icann.org>
Subject: [UA-discuss] Requesting a contact from outlook/hotmail

Hey Folks,

Is anyone from outlook/hotmail on the list? If so, requesting you to kindly DM me. If not, I request someone on the group help me connect with someone.

Warm Regards,
--
[https://drive.google.com/a/radix.email/uc?id=0BxfW4uTHaeWiTXh6eVVSTDNoUlk&export=download]

Aman Masjide
Program Manager
Anti-Abuse Department
T: +91 (22) 6196 6300 Extn: 8653
Skype: amasjide
Google Buys Business.Site for Google My Business<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fbit.ly%2F2xsTmrn&data=02%7C01%7Cmarksv%40microsoft.com%7C86f01d0cc9db4f25142e08d5f7a2aaba%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636687200389948082&sdata=38LK1ZnwW7p70kApMuU99PkybQVe1ZMLo6DiNRmncKA%3D&reserved=0>

--
[https://drive.google.com/a/radix.email/uc?id=0BxfW4uTHaeWiTXh6eVVSTDNoUlk&export=download]

Aman Masjide
Program Manager
Anti-Abuse Department
T: +91 (22) 6196 6300 Extn: 8653
Skype: amasjide
Google Buys Business.Site for Google My Business<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fbit.ly%2F2xsTmrn&data=02%7C01%7Cmarksv%40microsoft.com%7C86f01d0cc9db4f25142e08d5f7a2aaba%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636687200389948082&sdata=38LK1ZnwW7p70kApMuU99PkybQVe1ZMLo6DiNRmncKA%3D&reserved=0>

--
[https://drive.google.com/a/radix.email/uc?id=0BxfW4uTHaeWiTXh6eVVSTDNoUlk&export=download]

Aman Masjide
Program Manager
Anti-Abuse Department
T: +91 (22) 6196 6300 Extn: 8653
Skype: amasjide
Google Buys Business.Site for Google My Business<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fbit.ly%2F2xsTmrn&data=02%7C01%7Cmarksv%40microsoft.com%7C86f01d0cc9db4f25142e08d5f7a2aaba%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636687200389948082&sdata=38LK1ZnwW7p70kApMuU99PkybQVe1ZMLo6DiNRmncKA%3D&reserved=0>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mm.icann.org/pipermail/ua-discuss/attachments/20180802/bfd7b349/attachment.html>