BCL filter in Outlook sending us to spam

[Lucas_Metherall]

Hi all, 

we are using 250ok to test our deliverability, and have discovered that outlook.com sees us as 'not a bulk sender', and sends us straight to spam. 

Code: The message isn't from a bulk sender. (BCL: 0)

Our last two emails were marked 100% spam .

Has anyone worked through this before? 

Thanks!

[SanfordWhiteman]

BCL 0 means you don't send what's considered a bulk amount of identical or near-identical messages to the service. This wouldn't be why you go straight to spam.

You want to look for the SCL and other markers in the SMTP headers. Does DKIM pass for your domain (not just for the marketo.com signature)? Do you have a newly rolled out DMARC record, perchance?

[Lucas_Metherall]

Our 250ok dashboard is giving green ticks for DKIM and DMARC, and SNDS, but yes, it is a new IP address. 

[SanfordWhiteman]

Can you show (please highlight using the Syntax Highlighter) the SMTP headers of a message directed to spam? (Or better yet, a couple of messages.)

[Lucas_Metherall]

I would really love to but I have no idea where to find that. Could you point me in the direction?

[SanfordWhiteman]

"View message source":

[Lucas_Metherall]

I love it when you ask me to do these things, it's a real stretch of what I'm familiar with. I sent this earlier but appears to not have 'sent':

Received: from DM5PR18CA0050.namprd18.prod.outlook.com (2603:10b6:3:22::12) by

 BY5PR18MB3137.namprd18.prod.outlook.com (2603:10b6:a03:1a6::14) with

 Microsoft SMTP Server (version=TLS1_2,

 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2623.9; Mon, 13 Jan

 2020 04:46:40 +0000

Received: from DM3NAM03FT054.eop-NAM03.prod.protection.outlook.com

 (2a01:111:f400:7e49::202) by DM5PR18CA0050.outlook.office365.com

 (2603:10b6:3:22::12) with Microsoft SMTP Server (version=TLS1_2,

 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2623.8 via Frontend

 Transport; Mon, 13 Jan 2020 04:46:40 +0000

Authentication-Results: spf=pass (sender IP is 185.28.196.157)

 smtp.mailfrom=marketo.worldanimalprotection.org.au;

 worldanimalprotection.org.au; dkim=pass (signature was verified)

 header.d=worldanimalprotection.org.au;worldanimalprotection.org.au;

 dmarc=pass action=none header.from=worldanimalprotection.org.au;compauth=pass

 reason=100

Received-SPF: Pass (protection.outlook.com: domain of

 marketo.worldanimalprotection.org.au designates 185.28.196.157 as permitted

 sender) receiver=protection.outlook.com; client-ip=185.28.196.157;

 helo=marketo.worldanimalprotection.org.au;

Received: from marketo.worldanimalprotection.org.au (185.28.196.157) by

 DM3NAM03FT054.mail.protection.outlook.com (10.152.83.223) with Microsoft SMTP

 Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

 15.20.2623.9 via Frontend Transport; Mon, 13 Jan 2020 04:46:39 +0000

X-MSFBL: Q95Ot2SdsDlA3rl5LkoW9EHJTkHg9KdgzGVJ7q+AfvE=|eyJ1IjoiMzYyLVhaTC0

        xMDQ6NTUzMTo2Mjg0OjI1NDkzOjA6NTAwOTo5OjE0NzIzOjExMzUwNTAzIiwiYiI

        6ImR2cC0xODUtMjgtMTk2LTE1NyIsImciOiJiZy1sb25kLTEzMiIsInIiOiJsbWV

        0aGVyYWxsQHdvcmxkYW5pbWFscHJvdGVjdGlvbi5vcmcuYXUifQ==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1578890797;

        s=m1; d=worldanimalprotection.org.au;

        i=@worldanimalprotection.org.au;

        h=Date:From:To:Subject:MIME-Version:Content-Type;

        bh=SZauF4561O+omlEIzkPO2zIbmIKzZGieKy1kFXzAEUA=;

        b=RMzfCDUMysjK6ZTGXStDK9Q1Ft45JdbwqOjZCbFZdt1geH46dulAsvJ11Q9tEQH1

        T+7Agy91f/PGTDFwkqkeXFB2rKwjV11vC2DDOjytrKuemrmd/JRm8OxHpfU9I7rcIye

        nq28eZ5CIySXYd93M7h75arUtUKnhokBJ4M78O/I=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1578890797;

        s=m1; d=mktdns.com; i=@mktdns.com;

        h=Date:From:To:Subject:MIME-Version:Content-Type;

        bh=SZauF4561O+omlEIzkPO2zIbmIKzZGieKy1kFXzAEUA=;

        b=n/i8YKWySvPkOvGHIt6rcOs7YZNs5mcZFN5RDV4Xz2JnSVjhw48HpD52q6YuXYXn

        NHOYLymfLGtKGVINfKGjhws/+hZSFou5BhJLQv/Z8AzP79UN2ER0838tYB120wPI7ek

        2J5/zKlydbZDhyUU8WuTni+c5hC0qPYQpds9sQv8=

[SanfordWhiteman]

What about the X-Microsoft-Antispam and X-Forefront-Antispam-Report headers?

(Also, this is going to be really hard to read unless you use the Syntax Highlighter to highlight it as text/None, which puts it in monospace font).

[Lucas_Metherall]

I got this from X-MS_Exchange

X-MS-Exchange-Organization-SCL: -1

X-Microsoft-Antispam: BCL:0;

X-Forefront-Antispam-Report:

 CIP:185.28.196.157;IPV:;CTRY:IE;EFV:NLI;SFV:SKN;SFS:;DIR:INB;SFP:;SCL:-1;SRVR:DM5PR18MB1642;H:marketo.worldanimalprotection.org.au;FPR:;SPF:None;LANG:en;

[SanfordWhiteman]

What doesn't make sense here is these are good outcomes which should result in the email being inboxed as hoped. SCL: -1 means non-spam, BCL: 0 means non-bulk.