Image the domain name is domain.com. It is an Sogo notification email.
That email was sent from support@domain.com to support@domain.com, in the mailcow Rspamd logs, it is named "\“Personal Address Book\” has been created". And the log details is:
MISSING_MID (2.5)
MISSING_MIME_VERSION (2)
SUBJ_EXCESS_QP (1.2)
MIME_MA_MISSING_HTML (1)
MIME_UNKNOWN (0.1) [application/x-sogo-notification]
MAILCOW_AUTH (-20)
BAYES_HAM (-1.642921) [85.98%]
MIME_GOOD (-0.1) [multipart/alternative, text/plain]
DYN_RL_CHECK (0)
MOO_FOOTER (0)
RCPT_MAILCOW_DOMAIN (0) [domain.com]
TO_EQ_FROM (0)
ARC_NA (0)
DKIM_SIGNED (0) [domain.com:s=dkim]
RCVD_COUNT_ZERO (0) [0]
TO_MATCH_ENVRCPT_ALL (0)
FROM_EQ_ENVFROM (0)
MISSING_XM_UA (0)
TO_DN_ALL (0)
MAILCOW_DOMAIN_HEADER_FROM (0) [domain.com]
FROM_HAS_DN (0)
RCPT_COUNT_ONE (0) [1]
BCC (0)
MIME_TRACE (0) [0:+, 1:+, 2:~],
Where can I find the smtp header? This email was not processed in our smtp relay provider activity logs.
Let me know if I still miss somthing?