{"info":{"_postman_id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","name":"Mailprotector API","description":"

The Mailprotector API is structured in a way to provide most console functionality through a RESTful interface. Access to some endpoints may be restricted for API keys belonging to managers with certain permissions. For any questions or suggestions, please create a new ticket with our support team: https://support.mailprotector.com/hc/en-us/requests/new.

Authentication

Authentication for all requests is granted via a Bearer token in the header of a request. Each manager account is provisioned with an API key for each active role which can be accessed via the web console.

To find the key of the current manager account, first log in to your manager account in the web console, then click on \"Edit my profile\" under the dropdown at the upper right corner of the page (logged in users can also go to https://emailservice.io/profile ). Once there, click the \"...\" button on the role that you would like to utilize in the API, and click the \"View API Key\" option.

The token will provide the same permissions as the role whose key is being used. The request's header should have the following field provided for every request.

\"Authorization\": \"Bearer {{your_api_key_here}}\"\n\n

List Request Parameters

All GET request routes which provide a list of entities (i.e. GET users) can be optionally filtered using query parameters which map to a field on the entity being requested. For example, when requesting a list of users, the first_name field can be filtered on by using the following URL:

\"emailservice.io/api/v1/domains/{{domain_id}}/users?first_name={{first_name}}\"\n\n

Results can also be filtered down based on the date or datetime the objects were created or updated. Five comparisons for dates/datetimes can be made:

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Abbreviation	Function
Ge	Greater than
Geq	Greater than or equal
Le	Less than
Leq	Less than or equal
Eq	Exactly equals

As an example, to find a list of users created on or after a certain date, you could use the following URL:

\"emailservice.io/api/v1/domains/{{domain_id}}/users?created_at[geq]=2018-01-01\"\n\n

All returned lists will include information about the current status of the paging through the response headers. Below is an example of what is returned under the \"X-Pagination\" key in the response headers.

{\n   \"total\":41,\n   \"total_pages\":2,\n   \"per_page\":25,\n   \"first_page\":true,\n   \"last_page\":false,\n   \"previous_page\":null,\n   \"current_page\":1,\n   \"next_page\":2,\n   \"out_of_range\":false\n}\n\n

The returned pages can be manipulated through the combination of the page and per_page keys. By default, these values are 1 and 25 respectively.

Filtering Logs

The logs endpoints for each entity can be filtered using the same criteria as the web console.

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Options	Possible Values
sort_direction	\"desc\" (default), \"asc\"
sort_field	\"@timestamp\" (default) \"prime.direction\" - Sort by inbound/outbound messages \"prime.from_header_raw\" - Sort by from address \"prime.recipient\" - Sort by to address \"prime.subject\" - Sort by subject line \"prime.decision\" - Sort by decision on messages (i.e \"deliver\" vs \"quarantine_spam\", etc) \"prime.score\" - Sort by the score of each message
page	int (default of 1)
page_size	int (default of 25)
sender	string (optional)
recipient	string (optional)
subject	string (optional)
decision	\"all\" (default),\"deliver\", \"quarantine_spam\", \"quarantine_virus\", \"quarantine_policy\", \"bounce\", \"encrypt\", \"delete\"
direction	\"inbound\", \"outbound\" (leave blank to retrieve both)
date_range_type	\"relative\" - Relative to the date_range_minutes provided \"custom\" - Absolute time provided as start_datetime and end_datetime parameters
date_range_minutes	int (defaults to 15). Only used if date_range_type is \"relative\".
start_datetime	iso8601 formatted datetime. Defaults to 15 minutes prior to the request being made.
end_datetime	iso8601 formatted datetime. Defaults to the time of the request if not provided.

An example request may look like the following:

emailservice.io/domains/{{domain_id}}/logs?sort_direction=desc&sort_field=@timestamp&page=1&sender=address&recipient=address&subject=subject&decision=deliver&direction=inbound&date_range_type=relative&date_range_minutes=30&start_datetime=2020-01-21T22:01:09Z&end_datetime=2020-01-21T22:16:09Z\n\n

","schema":"https://schema.getpostman.com/json/collection/v2.0.0/collection.json","toc":[{"content":"Authentication","slug":"authentication"},{"content":"List Request Parameters","slug":"list-request-parameters"},{"content":"Filtering Logs","slug":"filtering-logs"}],"owner":"9753375","collectionId":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","publishedId":"SWE83H2P","public":true,"customColor":{"top-bar":"","right-sidebar":"303030","highlight":"99CC00"},"publishDate":"2020-01-06T22:25:23.000Z"},"item":[{"name":"Resellers","item":[{"name":"Customers","item":[{"name":"Reseller Customers","id":"3f67b4cb-8e59-49b2-be59-ba6fd96b77db","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"GET","header":[{"key":"Authorization","value":"Bearer {{your_api_key_here}}","type":"text"}],"url":"emailservice.io/api/v1/resellers/{{reseller_id}}/customers","description":"

Get a list of all customers belonging to a reseller.

Create a new customer under a reseller.

Get all users under a reseller.

Get all managers belonging to a reseller.

Create a new manager belonging to a reseller. Note that roles cannot yet be added through the API and will need to be added manually via the console interface for the manager account to have an effective role.

Retrieve a list of block rules belonging to a reseller. Rules returned belong directly to the reseller and any rules nested under customers domains, user groups, or users under the reseller will not be retrieved.

Create a new allow or block rule for the reseller. Rules created here will apply to all customers, domains, user groups, and users under the reseller.

Delete an allow or block rule.

Get the active configuration for a reseller.

Edit the configuration of an existing reseller. Fields not supplied will not be overwritten.

Get a list of statements belonging to a reseller.

Get the logs belonging to domains under a reseller. Refer to the \"Filtering Logs\" section at the top of the page for more information on filtering the results.

Get messages from the quarantine of an entire reseller account. This includes the messages of all customers, domains, user groups and users under the reseller. Max page size of 50.

\n","auth":{"type":"bearer","bearer":{"token":"{{your_api_key_here}}"},"isInherited":true,"source":{"_postman_id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","name":"Mailprotector API","type":"collection"}},"urlObject":{"path":["api","v1","resellers","{{reseller_id}}","messages"],"host":["emailservice.io"],"query":[],"variable":[]}},"response":[{"id":"cb362320-bc5c-4a17-a5dc-91cc648a88a0","name":"Reseller Messages","originalRequest":{"method":"GET","header":[{"key":"Authorization","value":"Bearer {{your_api_key_here}}","type":"text"}],"url":"emailservice.io/api/v1/resellers/{{reseller_id}}/messages"},"status":"OK","code":200,"_postman_previewlanguage":"json","header":[{"key":"X-Frame-Options","value":"SAMEORIGIN"},{"key":"X-XSS-Protection","value":"1; mode=block"},{"key":"X-Content-Type-Options","value":"nosniff"},{"key":"X-Download-Options","value":"noopen"},{"key":"X-Permitted-Cross-Domain-Policies","value":"none"},{"key":"Referrer-Policy","value":"strict-origin-when-cross-origin"},{"key":"Content-Type","value":"application/json; charset=utf-8"},{"key":"ETag","value":"W/\"19da220c4459529847c69f79baa58e20\""},{"key":"Cache-Control","value":"max-age=0, private, must-revalidate"},{"key":"X-Request-Id","value":"2c751747-f348-445d-89bf-6f30cbb19dac"},{"key":"X-Runtime","value":"22.467986"},{"key":"Transfer-Encoding","value":"chunked"}],"cookie":[],"responseTime":null,"body":"[\n {\n \"id\": 1985056110,\n \"uuid\": \"4F03A4FF-7E36-489E-9F14-D7F95BB0EA2B.1\",\n \"address\": \"sales@mailprotector.com.au\",\n \"recipients\": [\n \"sales@mailprotector.com.au\"\n ],\n \"sender\": \"lanxifa02@163.com\",\n \"to\": \"\\\"sales\\\" \",\n \"from\": \"\\\"Keans Group Corp.\\\" \",\n \"cc\": \"\",\n \"subject\": \"Re;Luminous collect\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38485,\n \"name\": \"sales\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T20:50:11.000Z\"\n },\n {\n \"id\": 1985012921,\n \"uuid\": \"4CEEA828-38FB-44CF-A86B-8451E5D556E5.1\",\n \"address\": \"info@mailprotector.com.au\",\n \"recipients\": [\n \"info@mailprotector.com.au\"\n ],\n \"sender\": \"lanxifa02@163.com\",\n \"to\": \"\\\"info\\\" \",\n \"from\": \"\\\"Keans Group Corp.\\\" \",\n \"cc\": \"\",\n \"subject\": \"Re;Luminous collect\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 740\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 55,\n \"mode\": \"inbound\",\n \"title\": \"Ungrouped\",\n \"description\": \"Rules that have not yet been categorized or that don't fit in a category.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 682800,\n \"name\": \"info\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T18:18:14.000Z\"\n },\n {\n \"id\": 1987420093,\n \"uuid\": \"28E95B58-0820-4232-9A32-958FF0053DBE.1\",\n \"address\": \"kevin@milestonenetworks.com\",\n \"recipients\": [\n \"kevin@milestonenetworks.com\"\n ],\n \"sender\": \"WilliamStanley@velo.net.id\",\n \"to\": \"\\\"Evalyn\\\" \",\n \"from\": \"\\\"Dahlia\\\" \",\n \"cc\": \"\",\n \"subject\": \"Pay less get a real treasure! Order outstanding Levitra!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 3,\n \"mode\": \"inbound\",\n \"title\": \"ISP Helo\",\n \"description\": \"The HELO value used was from an ISP.\",\n \"weight\": 40\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 615906,\n \"name\": \"kevin\"\n },\n \"user_group\": {\n \"id\": 12972,\n \"name\": \"Main\"\n },\n \"domain\": {\n \"id\": 14776,\n \"name\": \"milestonenetworks.com\"\n },\n \"customer\": {\n \"id\": 1987,\n \"name\": \"OCx Networks\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T22:26:18.000Z\"\n },\n {\n \"id\": 1987418962,\n \"uuid\": \"FD14FAF3-9CB1-4F65-A0AB-411F4C7D957D.1\",\n \"address\": \"ben.hathaway@mailprotector.com\",\n \"recipients\": [\n \"ben.hathaway@mailprotector.com\"\n ],\n \"sender\": \"1axb2nwj5so0wb5ixy84vk1hmv90rmlj7fqd5d@bf02c.hubspotemail.net\",\n \"to\": \"ben.hathaway@mailprotector.com\",\n \"from\": \"Natalie Jones \",\n \"cc\": \"\",\n \"subject\": \"Building on Serverless for Cost Efficiency and Performance\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 220\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38383,\n \"name\": \"ben.hathaway\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T22:24:11.000Z\"\n },\n {\n \"id\": 1987418950,\n \"uuid\": \"790F645B-C35D-4011-B9C4-6DED5C95305D.1\",\n \"address\": \"andy.barringer@mailprotector.com\",\n \"recipients\": [\n \"andy.barringer@mailprotector.com\"\n ],\n \"sender\": \"1axbmdslr5a5f5yu4cgu47vnu9h9m1gm896r87@bf02b.hubspotemail.net\",\n \"to\": \"andy.barringer@mailprotector.com\",\n \"from\": \"Natalie Jones \",\n \"cc\": \"\",\n \"subject\": \"Building on Serverless for Cost Efficiency and Performance\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 220\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 728356,\n \"name\": \"andy.barringer\"\n },\n \"user_group\": {\n \"id\": 16148,\n \"name\": \"Exchange 2016\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T22:24:09.000Z\"\n },\n {\n \"id\": 1987414416,\n \"uuid\": \"B21B372E-1E3C-4554-9BDF-F7F5AF80D5B7.1\",\n \"address\": \"ben.hathaway@mailprotector.com\",\n \"recipients\": [\n \"ben.hathaway@mailprotector.com\"\n ],\n \"sender\": \"bounce@enews.datacenterworld.com\",\n \"to\": \"ben.hathaway@mailprotector.com\",\n \"from\": \"\\\"Brian Gillooly\\\" \",\n \"cc\": \"\",\n \"subject\": \"What are your data center objectives for 2020?\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 340\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38383,\n \"name\": \"ben.hathaway\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T22:14:59.000Z\"\n },\n {\n \"id\": 1987413826,\n \"uuid\": \"5A2090FF-0F8F-48E2-9F4D-D75BFE6E31AD.1\",\n \"address\": \"ricky.hayes@mailprotector.com\",\n \"recipients\": [\n \"ricky.hayes@mailprotector.com\"\n ],\n \"sender\": \"PatrickClark@telekom.rs\",\n \"to\": \"\\\"Ayleen\\\" \",\n \"from\": \"\\\"Elsie\\\" \",\n \"cc\": \"\",\n \"subject\": \"Sex only on special dates? Buy Viagra Soft! Enjoy life.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 173,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38445,\n \"name\": \"ricky.hayes\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T22:13:46.000Z\"\n },\n {\n \"id\": 1987413601,\n \"uuid\": \"2626825B-175C-4ECB-8C34-F0D73D42F751.1\",\n \"address\": \"dhunt@mailprotector.com.au\",\n \"recipients\": [\n \"dhunt@mailprotector.com.au\"\n ],\n \"sender\": \"ChristopherCooper@totsona.com\",\n \"to\": \"\\\"Stefanie\\\" \",\n \"from\": \"\\\"Francoise\\\" \",\n \"cc\": \"\",\n \"subject\": \"Don't be ashamed to buy Cialis! Live full life.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 25,\n \"mode\": \"inbound\",\n \"title\": \"Policy Block List\",\n \"description\": \"This message came form an IP that is on the Policy Block List. The PBL is a DNSBL database of end-user IP address ranges which should not be delivering unauthenticated SMTP email to any Internet mail server except those provided for specifically by an ISP for that customer's use.\",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38473,\n \"name\": \"dhunt\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T22:13:16.000Z\"\n },\n {\n \"id\": 1987412163,\n \"uuid\": \"D8BDCF3C-9CC3-4164-9BFA-757E8C1C118D.1\",\n \"address\": \"ben.hathaway@mailprotector.com\",\n \"recipients\": [\n \"ben.hathaway@mailprotector.com\"\n ],\n \"sender\": \"bounce-mc.us20_118362490.12124687-c421e14df4@mail180.suw12.mcsv.net\",\n \"to\": \"\",\n \"from\": \"=?utf-8?Q?10X=20Consulting=20Group?= \",\n \"cc\": \"\",\n \"subject\": \"Why Choose GIGA over a Traditional Data Center?\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 200\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 173,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38383,\n \"name\": \"ben.hathaway\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T22:10:18.000Z\"\n },\n {\n \"id\": 1987410386,\n \"uuid\": \"2CDAE67D-38AB-4030-801B-7711C99ACE2B.1\",\n \"address\": \"spam@mailprotector.com\",\n \"recipients\": [\n \"spam@mailprotector.com\"\n ],\n \"sender\": \"mark@mcnabolalaw.com\",\n \"to\": \"\\\"spam@emailservice.io\\\" \",\n \"from\": \"Mark McNabola \",\n \"cc\": \"\",\n \"subject\": \"FW: Your thoughts on the game of golf are important\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 320\n },\n \"results\": [\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 475236,\n \"name\": \"spam\"\n },\n \"user_group\": {\n \"id\": 9246,\n \"name\": \"CloudMail\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T22:06:28.000Z\"\n },\n {\n \"id\": 1987410389,\n \"uuid\": \"170E594C-768A-455A-84D4-640D719DC8F0.1\",\n \"address\": \"spam@mailprotector.com\",\n \"recipients\": [\n \"spam@mailprotector.com\"\n ],\n \"sender\": \"mark@mcnabolalaw.com\",\n \"to\": \"\\\"spam@emailservice.io\\\" \",\n \"from\": \"Mark McNabola \",\n \"cc\": \"\",\n \"subject\": \"FW: $3.1M Verdict: Animating Spinal Cord Injury After Premature Discharge\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 400\n },\n \"results\": [\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 475236,\n \"name\": \"spam\"\n },\n \"user_group\": {\n \"id\": 9246,\n \"name\": \"CloudMail\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T22:06:27.000Z\"\n },\n {\n \"id\": 1987407572,\n \"uuid\": \"21898B44-B96E-4A88-8457-8DB5D78E0453.1\",\n \"address\": \"kevin@milestonenetworks.com\",\n \"recipients\": [\n \"kevin@milestonenetworks.com\"\n ],\n \"sender\": \"JosephEllis@ertelecom.ru\",\n \"to\": \"\\\"Micah\\\" \",\n \"from\": \"\\\"Jordyn\\\" \",\n \"cc\": \"\",\n \"subject\": \"Male enhancement overnight delivery\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 615906,\n \"name\": \"kevin\"\n },\n \"user_group\": {\n \"id\": 12972,\n \"name\": \"Main\"\n },\n \"domain\": {\n \"id\": 14776,\n \"name\": \"milestonenetworks.com\"\n },\n \"customer\": {\n \"id\": 1987,\n \"name\": \"OCx Networks\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T22:01:15.000Z\"\n },\n {\n \"id\": 1987400868,\n \"uuid\": \"95E4ACEA-2DB8-4A29-9A12-0D91EB61BA89.3\",\n \"address\": \"ricky.hayes@mailprotector.com\",\n \"recipients\": [\n \"ricky.hayes@mailprotector.com\"\n ],\n \"sender\": \"DavidHall@tinamcmahancpa.com\",\n \"to\": \"\\\"Liana\\\" \",\n \"from\": \"\\\"Kassandra\\\" \",\n \"cc\": \"\",\n \"subject\": \"It's going to be pleasantful time! Choose Cialis Soft.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38445,\n \"name\": \"ricky.hayes\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T21:47:45.000Z\"\n },\n {\n \"id\": 1987396834,\n \"uuid\": \"D9A994F3-43F4-4E12-8B55-C29A993D9ABF.1\",\n \"address\": \"partners@mailprotector.com\",\n \"recipients\": [\n \"partners@mailprotector.com\"\n ],\n \"sender\": \"EricHenderson@rt.ru\",\n \"to\": \"\\\"Calliope\\\" \",\n \"from\": \"\\\"Kinslee\\\" \",\n \"cc\": \"\",\n \"subject\": \"The science of pleasure. Brand Viagra for real men.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 2,\n \"mode\": \"inbound\",\n \"title\": \"ISP Reverse DNS\",\n \"description\": \"The server that relayed the message was part of an ISP network which has a high frequency of spam.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 3,\n \"mode\": \"inbound\",\n \"title\": \"ISP Helo\",\n \"description\": \"The HELO value used was from an ISP.\",\n \"weight\": 40\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 710337,\n \"name\": \"partners\"\n },\n \"user_group\": {\n \"id\": 28330,\n \"name\": \"Office 365 - No Archive or Bracket\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T21:41:29.000Z\"\n },\n {\n \"id\": 1987396719,\n \"uuid\": \"E64C5946-32BB-477D-A6A8-B0D2F4FE9E74.1\",\n \"address\": \"partners@mailprotector.com.au\",\n \"recipients\": [\n \"partners@mailprotector.com.au\"\n ],\n \"sender\": \"ScottColeman@telenor.rs\",\n \"to\": \"\\\"Micah\\\" \",\n \"from\": \"\\\"Arianna\\\" \",\n \"cc\": \"\",\n \"subject\": \"Levitra - a new better you. Purchase now.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38483,\n \"name\": \"partners\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T21:41:14.000Z\"\n },\n {\n \"id\": 1987395076,\n \"uuid\": \"7091F33B-CC60-4694-AAA4-D76F1FD4B71A.1\",\n \"address\": \"david.setzer@mailprotector.com\",\n \"recipients\": [\n \"david.setzer@mailprotector.com\"\n ],\n \"sender\": \"return-aikens_a-aikens_a200106-9509014-0f5b36=2@mailer.prospectrmarketing.com\",\n \"to\": \"dsetzer@mailprotector.com\",\n \"from\": \"Pit Turenne \",\n \"cc\": \"\",\n \"subject\": \"canada fishing\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 700\n },\n \"results\": [\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 173,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 64,\n \"mode\": \"inbound\",\n \"title\": \"Spamware\",\n \"description\": \"Email marketing services, bullet proof hosting, email databases.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38403,\n \"name\": \"david.setzer\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T21:38:30.000Z\"\n },\n {\n \"id\": 1987393581,\n \"uuid\": \"D4A65117-F083-42AF-A481-94F67DF99195.1\",\n \"address\": \"feedback@mailprotector.com.au\",\n \"recipients\": [\n \"feedback@mailprotector.com.au\"\n ],\n \"sender\": \"JeffLee@tomcrewscpa.com\",\n \"to\": \"\\\"Juniper\\\" \",\n \"from\": \"\\\"Diana\\\" \",\n \"cc\": \"\",\n \"subject\": \"Don't know what ED med to chose? Viagra Super Force fits all!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38477,\n \"name\": \"feedback\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T21:35:49.000Z\"\n },\n {\n \"id\": 1987393497,\n \"uuid\": \"4CA36BDE-CF53-4156-AD91-997CBC817B4A.1\",\n \"address\": \"feedback@mailprotector.com.au\",\n \"recipients\": [\n \"feedback@mailprotector.com.au\"\n ],\n \"sender\": \"JimReed@psi.br\",\n \"to\": \"\\\"Vivian\\\" \",\n \"from\": \"\\\"Reagan\\\" \",\n \"cc\": \"\",\n \"subject\": \"Levitra Soft Tabs for boner to have and to hold!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 600\n },\n \"results\": [\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38477,\n \"name\": \"feedback\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T21:35:43.000Z\"\n },\n {\n \"id\": 1987390770,\n \"uuid\": \"539E80E3-014F-4726-BA1D-6805FCAAC33D.1\",\n \"address\": \"kevin@milestonenetworks.com\",\n \"recipients\": [\n \"kevin@milestonenetworks.com\"\n ],\n \"sender\": \"LarryCarter@aliennetwork.net.br\",\n \"to\": \"\\\"Arianna\\\" \",\n \"from\": \"\\\"Arianna\\\" \",\n \"cc\": \"\",\n \"subject\": \"could you meet me today?\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 62,\n \"mode\": \"inbound\",\n \"title\": \"Scam\",\n \"description\": \"Scam patterns - Nigerian and variants + others such as fake eBay account verification requests.\",\n \"weight\": 200\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 615906,\n \"name\": \"kevin\"\n },\n \"user_group\": {\n \"id\": 12972,\n \"name\": \"Main\"\n },\n \"domain\": {\n \"id\": 14776,\n \"name\": \"milestonenetworks.com\"\n },\n \"customer\": {\n \"id\": 1987,\n \"name\": \"OCx Networks\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T21:31:14.000Z\"\n },\n {\n \"id\": 1987389954,\n \"uuid\": \"BA21B9D4-DD99-4A39-A941-9DE4E3E1CA1C.1\",\n \"address\": \"info@mailprotector.com.au\",\n \"recipients\": [\n \"info@mailprotector.com.au\"\n ],\n \"sender\": \"LarryYoung@satcomm.pk\",\n \"to\": \"\\\"Matilda\\\" \",\n \"from\": \"\\\"Willa\\\" \",\n \"cc\": \"\",\n \"subject\": \"The pleasure is where Cialis Super Active takes place. Buy here.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 660\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 682800,\n \"name\": \"info\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T21:30:12.000Z\"\n },\n {\n \"id\": 1987389555,\n \"uuid\": \"6515D5D5-221A-48C5-8F33-C7AC7F19939A.1\",\n \"address\": \"info@mailprotector.com.au\",\n \"recipients\": [\n \"info@mailprotector.com.au\"\n ],\n \"sender\": \"KeithAnderson@une.net.co\",\n \"to\": \"\\\"Joslyn\\\" \",\n \"from\": \"\\\"Whitney\\\" \",\n \"cc\": \"\",\n \"subject\": \"Love knows no age. Kamagra Brand Oral Jelly helps to feel it.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 880\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 682800,\n \"name\": \"info\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T21:29:35.000Z\"\n },\n {\n \"id\": 1987383755,\n \"uuid\": \"6470A569-2282-4A2B-8907-71459FB2750A.1\",\n \"address\": \"dhunt@mailprotector.com.au\",\n \"recipients\": [\n \"dhunt@mailprotector.com.au\"\n ],\n \"sender\": \"GaryScott@expl.in\",\n \"to\": \"\\\"Courtney\\\" \",\n \"from\": \"\\\"Ivanna\\\" \",\n \"cc\": \"\",\n \"subject\": \"Forget about doctors. Enjoy better solution. Cialis Super Active.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 25,\n \"mode\": \"inbound\",\n \"title\": \"Policy Block List\",\n \"description\": \"This message came form an IP that is on the Policy Block List. The PBL is a DNSBL database of end-user IP address ranges which should not be delivering unauthenticated SMTP email to any Internet mail server except those provided for specifically by an ISP for that customer's use.\",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38473,\n \"name\": \"dhunt\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T21:20:25.000Z\"\n },\n {\n \"id\": 1987382057,\n \"uuid\": \"853BE1E0-8C79-4535-8986-8646FE7DBA40.1\",\n \"address\": \"partners@mailprotector.com\",\n \"recipients\": [\n \"partners@mailprotector.com\"\n ],\n \"sender\": \"JoshuaLewis@windx.com.br\",\n \"to\": \"\\\"Hadlee\\\" \",\n \"from\": \"\\\"Giselle\\\" \",\n \"cc\": \"\",\n \"subject\": \"Buy Levitra now! Prices gone mad!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 3,\n \"mode\": \"inbound\",\n \"title\": \"ISP Helo\",\n \"description\": \"The HELO value used was from an ISP.\",\n \"weight\": 40\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 710337,\n \"name\": \"partners\"\n },\n \"user_group\": {\n \"id\": 28330,\n \"name\": \"Office 365 - No Archive or Bracket\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T21:17:40.000Z\"\n },\n {\n \"id\": 1987382112,\n \"uuid\": \"D10628DF-EF5F-47EC-9324-DC21D92A79ED.1\",\n \"address\": \"partners@mailprotector.com.au\",\n \"recipients\": [\n \"partners@mailprotector.com.au\"\n ],\n \"sender\": \"JamesTaylor@tkcpa.com\",\n \"to\": \"\\\"Aubrey\\\" \",\n \"from\": \"\\\"Margot\\\" \",\n \"cc\": \"\",\n \"subject\": \"Wild adventures all night long. Viagra Super Active.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 173,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38483,\n \"name\": \"partners\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T21:17:40.000Z\"\n },\n {\n \"id\": 1987380713,\n \"uuid\": \"67ABDDFF-65CD-4039-8EFB-4CB6EDE31DAB.1\",\n \"address\": \"kevin@milestonenetworks.com\",\n \"recipients\": [\n \"kevin@milestonenetworks.com\"\n ],\n \"sender\": \"bs2@photoconductive.ok315.info\",\n \"to\": \"\",\n \"from\": \"\\\"Last Republican President\\\" \",\n \"cc\": \"\",\n \"subject\": \"Trump: Americaâ\\u0080\\u0099s Last Republican President?\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 440\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 67,\n \"mode\": \"inbound\",\n \"title\": \"Insurance\",\n \"description\": \"All kinds of insurance quotes & spam.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 615906,\n \"name\": \"kevin\"\n },\n \"user_group\": {\n \"id\": 12972,\n \"name\": \"Main\"\n },\n \"domain\": {\n \"id\": 14776,\n \"name\": \"milestonenetworks.com\"\n },\n \"customer\": {\n \"id\": 1987,\n \"name\": \"OCx Networks\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T21:15:31.000Z\"\n },\n {\n \"id\": 1987384155,\n \"uuid\": \"CBB4DB4A-C593-4371-8E9E-70DAFA7E2B2E.1\",\n \"address\": \"kevin@milestonenetworks.com\",\n \"recipients\": [\n \"kevin@milestonenetworks.com\"\n ],\n \"sender\": \"yasuo@audienceindex.best\",\n \"to\": null,\n \"from\": \"\\\"=?UTF-8?Q?Dat?==?UTF-8?Q?ing?==?UTF-8?Q?.Si?==?UTF-8?Q?lve?==?UTF-8?Q?rSi?==?UTF-8?Q?ngl?==?UTF-8?Q?es.?==?UTF-8?Q?com?==?UTF-8?Q?=20Ad?=\\\" \",\n \"cc\": \"\",\n \"subject\": \"love knows no age - meet compatible singles near you\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 760\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 61,\n \"mode\": \"inbound\",\n \"title\": \"Porn/Adult\",\n \"description\": \"Pornography, Dating, 'organ' augmentation.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 615906,\n \"name\": \"kevin\"\n },\n \"user_group\": {\n \"id\": 12972,\n \"name\": \"Main\"\n },\n \"domain\": {\n \"id\": 14776,\n \"name\": \"milestonenetworks.com\"\n },\n \"customer\": {\n \"id\": 1987,\n \"name\": \"OCx Networks\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T21:08:30.000Z\"\n },\n {\n \"id\": 1987370844,\n \"uuid\": \"FC675658-0522-4BE1-8CAD-0295B3E88B6D.1\",\n \"address\": \"ben.hathaway@mailprotector.com\",\n \"recipients\": [\n \"ben.hathaway@mailprotector.com\"\n ],\n \"sender\": \"A6Dz49PNwSEuQtdDcSOsjqg==_1102382247786_wH1/oLOCEee2fdSuUnU2zg==@in.constantcontact.com\",\n \"to\": \"ben.hathaway@mailprotector.com\",\n \"from\": \"\\\"Scott & Scott, LLP\\\" \",\n \"cc\": \"\",\n \"subject\": \"Technology Law Update January 2020\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 200\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38383,\n \"name\": \"ben.hathaway\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T21:00:31.000Z\"\n },\n {\n \"id\": 1987369886,\n \"uuid\": \"32B12A72-5316-4E00-A8FB-A08F22EEF530.1\",\n \"address\": \"dhunt@mailprotector.com.au\",\n \"recipients\": [\n \"dhunt@mailprotector.com.au\"\n ],\n \"sender\": \"FredBailey@tparkercpa.com\",\n \"to\": \"\\\"Scarlette\\\" \",\n \"from\": \"\\\"Ariel\\\" \",\n \"cc\": \"\",\n \"subject\": \"Time for immodest proposals. Buy Viagra Super Force now!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 173,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38473,\n \"name\": \"dhunt\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T20:58:55.000Z\"\n },\n {\n \"id\": 1987366114,\n \"uuid\": \"54FD8278-97F6-4187-8E33-E2C8A52C02CE.1\",\n \"address\": \"kevin@milestonenetworks.com\",\n \"recipients\": [\n \"kevin@milestonenetworks.com\"\n ],\n \"sender\": \"PeterWilson@tlh-cpa.com\",\n \"to\": \"\\\"Alaya\\\" \",\n \"from\": \"\\\"Sage\\\" \",\n \"cc\": \"\",\n \"subject\": \"Viagra Soft lives up it's reputation.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 615906,\n \"name\": \"kevin\"\n },\n \"user_group\": {\n \"id\": 12972,\n \"name\": \"Main\"\n },\n \"domain\": {\n \"id\": 14776,\n \"name\": \"milestonenetworks.com\"\n },\n \"customer\": {\n \"id\": 1987,\n \"name\": \"OCx Networks\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T20:52:20.000Z\"\n },\n {\n \"id\": 1987361044,\n \"uuid\": \"806B72D3-E403-4269-8A5B-17E18758024E.1\",\n \"address\": \"sales@mailprotector.com.au\",\n \"recipients\": [\n \"sales@mailprotector.com.au\"\n ],\n \"sender\": \"8a3dd3f03c261ae2d72c783722e1e065@ypclistmanager.com\",\n \"to\": \"sales@mailprotector.com.au\",\n \"from\": \"Contacts Database \",\n \"cc\": \"\",\n \"subject\": \"[WORLDWIDE E-MAILS DATABASE] limited offer: -40% discount\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38485,\n \"name\": \"sales\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T20:44:27.000Z\"\n },\n {\n \"id\": 1987358089,\n \"uuid\": \"F350EC67-FD06-4366-BE9E-0825AEC0E7B3.1\",\n \"address\": \"kevin@milestonenetworks.com\",\n \"recipients\": [\n \"kevin@milestonenetworks.com\"\n ],\n \"sender\": \"WalterScott@timwheatcpa.com\",\n \"to\": \"\\\"Aubrielle\\\" \",\n \"from\": \"\\\"Bethany\\\" \",\n \"cc\": \"\",\n \"subject\": \"Viagra Brand - your main equipment for love adventures.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 615906,\n \"name\": \"kevin\"\n },\n \"user_group\": {\n \"id\": 12972,\n \"name\": \"Main\"\n },\n \"domain\": {\n \"id\": 14776,\n \"name\": \"milestonenetworks.com\"\n },\n \"customer\": {\n \"id\": 1987,\n \"name\": \"OCx Networks\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T20:39:54.000Z\"\n },\n {\n \"id\": 1987358654,\n \"uuid\": \"050139FA-6F91-4E1E-BFD4-73F26BDE9466.1\",\n \"address\": \"brett.hathaway@mailprotector.com\",\n \"recipients\": [\n \"brett.hathaway@mailprotector.com\"\n ],\n \"sender\": \"admin@electronicmailvouchers.com\",\n \"to\": \"brett.hathaway@mailprotector.com\",\n \"from\": \"\\\"Rachael Hamilton\\\" \",\n \"cc\": \"\",\n \"subject\": \"Bitcoins are driving people out of 9-5 Jobs - Here's Why!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 36,\n \"mode\": \"inbound\",\n \"title\": \"Junk URL\",\n \"description\": \"This message contained content matching our junk URL heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 13,\n \"mode\": \"inbound\",\n \"title\": \"Spam Domain\",\n \"description\": \"The message contained a link to a spam domain.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38389,\n \"name\": \"brett.hathaway\"\n },\n \"user_group\": {\n \"id\": 16148,\n \"name\": \"Exchange 2016\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T20:39:44.000Z\"\n },\n {\n \"id\": 1987356076,\n \"uuid\": \"9315D89E-904E-4C28-BDA5-722ED1AB6A72.1\",\n \"address\": \"partners@mailprotector.co.uk\",\n \"recipients\": [\n \"partners@mailprotector.co.uk\"\n ],\n \"sender\": \"DavidLee@tjuna.com\",\n \"to\": \"\\\"Catalina\\\" \",\n \"from\": \"\\\"Bridget\\\" \",\n \"cc\": \"\",\n \"subject\": \"can you meet me\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 173,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 62,\n \"mode\": \"inbound\",\n \"title\": \"Scam\",\n \"description\": \"Scam patterns - Nigerian and variants + others such as fake eBay account verification requests.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38505,\n \"name\": \"partners\"\n },\n \"user_group\": {\n \"id\": 1073,\n \"name\": \"mailprotector.co.uk user group\"\n },\n \"domain\": {\n \"id\": 1481,\n \"name\": \"mailprotector.co.uk\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T20:36:39.000Z\"\n },\n {\n \"id\": 1987355344,\n \"uuid\": \"621BCCC2-4EB2-4DFE-A0EB-AD0140412228.1\",\n \"address\": \"brandy.hancock@mailprotector.com\",\n \"recipients\": [\n \"brandy.hancock@mailprotector.com\"\n ],\n \"sender\": \"honors@h1.hilton.com\",\n \"to\": \"\\\"BRANDY.HANCOCK@MAILPROTECTOR.COM\\\" \",\n \"from\": \"\\\"Hilton Honors\\\" \",\n \"cc\": \"\",\n \"subject\": \"See how fast you can earn a free night with Points Unlimited!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 68,\n \"mode\": \"inbound\",\n \"title\": \"Travel\",\n \"description\": \"All kinds of travel / vacation spam.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 827259,\n \"name\": \"brandy.hancock\"\n },\n \"user_group\": {\n \"id\": 16148,\n \"name\": \"Exchange 2016\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T20:35:34.000Z\"\n },\n {\n \"id\": 1987353575,\n \"uuid\": \"56F3F24D-2AE7-4CC5-A935-ED48848DCDD5.1\",\n \"address\": \"support@mailprotector.com\",\n \"recipients\": [\n \"support@mailprotector.com\"\n ],\n \"sender\": \"GeorgeSanchez@toniportercpa.com\",\n \"to\": \"\\\"Leia\\\" \",\n \"from\": \"\\\"Lara\\\" \",\n \"cc\": \"\",\n \"subject\": \"The energy of bright feelings. Cialis Soft.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 147,\n \"mode\": \"inbound\",\n \"title\": \"SPF Neutral\",\n \"description\": \"The SPF record specifies explicitly that nothing can be said about validity.\",\n \"weight\": 0\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38457,\n \"name\": \"support\"\n },\n \"user_group\": {\n \"id\": 28330,\n \"name\": \"Office 365 - No Archive or Bracket\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T20:32:40.000Z\"\n },\n {\n \"id\": 1987353070,\n \"uuid\": \"4F13524D-0396-41BC-AF15-4FD1B439B196.1\",\n \"address\": \"support@mailprotector.com.au\",\n \"recipients\": [\n \"support@mailprotector.com.au\"\n ],\n \"sender\": \"DennisLee@advance.com.ar\",\n \"to\": \"\\\"Bailee\\\" \",\n \"from\": \"\\\"Charleigh\\\" \",\n \"cc\": \"\",\n \"subject\": \"AU Viagra Super Force you won't wish to share a pill.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38489,\n \"name\": \"support\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T20:32:00.000Z\"\n },\n {\n \"id\": 1987351737,\n \"uuid\": \"AB0739C8-4565-4B80-883B-B17A20D847BC.1\",\n \"address\": \"kevin@milestonenetworks.com\",\n \"recipients\": [\n \"kevin@milestonenetworks.com\"\n ],\n \"sender\": \"bs2@pawnshop.ok314.info\",\n \"to\": \"\",\n \"from\": \"\\\"Canvas Prints Advertisement\\\" \",\n \"cc\": \"\",\n \"subject\": \"Get UNLIMITED 16 x 20 Custom Canvas Prints for $14.99\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 560\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 615906,\n \"name\": \"kevin\"\n },\n \"user_group\": {\n \"id\": 12972,\n \"name\": \"Main\"\n },\n \"domain\": {\n \"id\": 14776,\n \"name\": \"milestonenetworks.com\"\n },\n \"customer\": {\n \"id\": 1987,\n \"name\": \"OCx Networks\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T20:30:14.000Z\"\n },\n {\n \"id\": 1987350405,\n \"uuid\": \"26A1F95E-62F3-424C-BE62-CF5255A2C58A.1\",\n \"address\": \"partners@mailprotector.co.uk\",\n \"recipients\": [\n \"partners@mailprotector.co.uk\"\n ],\n \"sender\": \"AndrewFlores@privatnet.cz\",\n \"to\": \"\\\"Nia\\\" \",\n \"from\": \"\\\"Ryan\\\" \",\n \"cc\": \"\",\n \"subject\": \"4 Ways to Make Easy Money\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 3,\n \"mode\": \"inbound\",\n \"title\": \"ISP Helo\",\n \"description\": \"The HELO value used was from an ISP.\",\n \"weight\": 40\n },\n {\n \"id\": 147,\n \"mode\": \"inbound\",\n \"title\": \"SPF Neutral\",\n \"description\": \"The SPF record specifies explicitly that nothing can be said about validity.\",\n \"weight\": 0\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38505,\n \"name\": \"partners\"\n },\n \"user_group\": {\n \"id\": 1073,\n \"name\": \"mailprotector.co.uk user group\"\n },\n \"domain\": {\n \"id\": 1481,\n \"name\": \"mailprotector.co.uk\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T20:27:54.000Z\"\n },\n {\n \"id\": 1987346985,\n \"uuid\": \"7DBA87AE-38E8-483E-8E0F-6986A625D136.1\",\n \"address\": \"kevin@milestonenetworks.com\",\n \"recipients\": [\n \"kevin@milestonenetworks.com\"\n ],\n \"sender\": \"MarkHenderson@tm-cpa.com\",\n \"to\": \"\\\"Kiana\\\" \",\n \"from\": \"\\\"Kiana\\\" \",\n \"cc\": \"\",\n \"subject\": \"I look at you and I cannot resist!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 62,\n \"mode\": \"inbound\",\n \"title\": \"Scam\",\n \"description\": \"Scam patterns - Nigerian and variants + others such as fake eBay account verification requests.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 615906,\n \"name\": \"kevin\"\n },\n \"user_group\": {\n \"id\": 12972,\n \"name\": \"Main\"\n },\n \"domain\": {\n \"id\": 14776,\n \"name\": \"milestonenetworks.com\"\n },\n \"customer\": {\n \"id\": 1987,\n \"name\": \"OCx Networks\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T20:22:21.000Z\"\n },\n {\n \"id\": 1987346864,\n \"uuid\": \"BE38EA52-3A1E-4DAE-B008-556B12D04B04.1\",\n \"address\": \"kevin@milestonenetworks.com\",\n \"recipients\": [\n \"kevin@milestonenetworks.com\"\n ],\n \"sender\": \"bs2@papillate.ok318.info\",\n \"to\": \"\",\n \"from\": \"\\\"Tinnitus911 Now\\\" \",\n \"cc\": \"\",\n \"subject\": \"Sleep easy once again, end tinnitus now!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 740\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 67,\n \"mode\": \"inbound\",\n \"title\": \"Insurance\",\n \"description\": \"All kinds of insurance quotes & spam.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 615906,\n \"name\": \"kevin\"\n },\n \"user_group\": {\n \"id\": 12972,\n \"name\": \"Main\"\n },\n \"domain\": {\n \"id\": 14776,\n \"name\": \"milestonenetworks.com\"\n },\n \"customer\": {\n \"id\": 1987,\n \"name\": \"OCx Networks\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T20:22:07.000Z\"\n },\n {\n \"id\": 1987343787,\n \"uuid\": \"9942CCAC-BFDB-4F9A-8A6D-1215C04300C1.1\",\n \"address\": \"noreply@mailprotector.com\",\n \"recipients\": [\n \"noreply@mailprotector.com\"\n ],\n \"sender\": \"\",\n \"to\": \"\",\n \"from\": \"\",\n \"cc\": \"\",\n \"subject\": \"Undeliverable: Inbound Virus Quarantine Notification\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 220\n },\n \"results\": [\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 60,\n \"mode\": \"inbound\",\n \"title\": \"Malware\",\n \"description\": \"The message contains potentially dangerous message content or known virii.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 56347,\n \"name\": \"noreply\"\n },\n \"user_group\": {\n \"id\": 25995,\n \"name\": \"CloudMail - No Bracket\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T20:17:30.000Z\"\n },\n {\n \"id\": 1987339938,\n \"uuid\": \"671683FE-9C41-421B-9975-2FF93D9BC8C7.1\",\n \"address\": \"feedback@mailprotector.com.au\",\n \"recipients\": [\n \"feedback@mailprotector.com.au\"\n ],\n \"sender\": \"BrianKing@tjscpa.com\",\n \"to\": \"\\\"Brianna\\\" \",\n \"from\": \"\\\"Melania\\\" \",\n \"cc\": \"\",\n \"subject\": \"Viagra Super Force - your main equipment for love adventures.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38477,\n \"name\": \"feedback\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T20:11:41.000Z\"\n },\n {\n \"id\": 1987335282,\n \"uuid\": \"70485C3D-BD07-4DFC-AF29-3BC1D6B6381A.1\",\n \"address\": \"kevin@milestonenetworks.com\",\n \"recipients\": [\n \"kevin@milestonenetworks.com\"\n ],\n \"sender\": \"5311-53-121532-1231-kevin=milestonenetworks.com@mail.montoirnglogd.xyz\",\n \"to\": \"\",\n \"from\": \"\\\"Curafen\\\" \",\n \"cc\": \"\",\n \"subject\": \"The REAL reason why eye supplements donâ\\u0080\\u0099t work\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 940\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 36,\n \"mode\": \"inbound\",\n \"title\": \"Junk URL\",\n \"description\": \"This message contained content matching our junk URL heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 62,\n \"mode\": \"inbound\",\n \"title\": \"Scam\",\n \"description\": \"Scam patterns - Nigerian and variants + others such as fake eBay account verification requests.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 615906,\n \"name\": \"kevin\"\n },\n \"user_group\": {\n \"id\": 12972,\n \"name\": \"Main\"\n },\n \"domain\": {\n \"id\": 14776,\n \"name\": \"milestonenetworks.com\"\n },\n \"customer\": {\n \"id\": 1987,\n \"name\": \"OCx Networks\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T20:05:23.000Z\"\n },\n {\n \"id\": 1987312409,\n \"uuid\": \"F08D0AEC-CC42-412D-9DE4-D30ECEFF9459.1\",\n \"address\": \"feedback@mailprotector.com.au\",\n \"recipients\": [\n \"feedback@mailprotector.com.au\"\n ],\n \"sender\": \"carry@esuch.net\",\n \"to\": \"\",\n \"from\": \"\",\n \"cc\": \"\",\n \"subject\": \"Hígh dåňgěř. Yøuř åccøuňt wås åttåckěd.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"virus\",\n \"decision\": \"quarantine_virus\",\n \"score\": {\n \"score\": 940\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 25,\n \"mode\": \"inbound\",\n \"title\": \"Policy Block List\",\n \"description\": \"This message came form an IP that is on the Policy Block List. The PBL is a DNSBL database of end-user IP address ranges which should not be delivering unauthenticated SMTP email to any Internet mail server except those provided for specifically by an ISP for that customer's use.\",\n \"weight\": 200\n },\n {\n \"id\": 143,\n \"mode\": \"inbound\",\n \"title\": \"Virus\",\n \"description\": \"This message contained a virus payload or characteristics of a message carrying a virus.\",\n \"weight\": 0\n },\n {\n \"id\": 62,\n \"mode\": \"inbound\",\n \"title\": \"Scam\",\n \"description\": \"Scam patterns - Nigerian and variants + others such as fake eBay account verification requests.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38477,\n \"name\": \"feedback\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T20:02:45.000Z\"\n },\n {\n \"id\": 1987330888,\n \"uuid\": \"02C2D0D1-AF92-4D5C-80A5-A72BF675C557.1\",\n \"address\": \"abigail.thompson@mailprotector.com\",\n \"recipients\": [\n \"abigail.thompson@mailprotector.com\"\n ],\n \"sender\": \"bounce-mc.us11_44738489.3568859-9c61c046bb@mail87.suw131.mcsv.net\",\n \"to\": \"\",\n \"from\": \"=?utf-8?Q?Justine=20=E2=80=A2=20We=20Work=20Remotely?= \",\n \"cc\": \"\",\n \"subject\": \"Save 15% on job postings all January long 🕺\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 280\n },\n \"results\": [\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 883326,\n \"name\": \"abigail.thompson\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T19:59:28.000Z\"\n },\n {\n \"id\": 1987328441,\n \"uuid\": \"0E3A5DD7-2F6A-4B7C-AA79-65E32E9997FA.1\",\n \"address\": \"ben.hathaway@mailprotector.com\",\n \"recipients\": [\n \"ben.hathaway@mailprotector.com\"\n ],\n \"sender\": \"bounce-131_HTML-105339659-3307476-10959666-44@bounce.email.slackhq.com\",\n \"to\": \"\",\n \"from\": \"\\\"Slack\\\" \",\n \"cc\": \"\",\n \"subject\": \"Slack API changelog: December-January 2019\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 340\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38383,\n \"name\": \"ben.hathaway\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T19:55:51.000Z\"\n },\n {\n \"id\": 1987324690,\n \"uuid\": \"246641A0-443E-41D3-8C8A-2F0FE370D7AD.1\",\n \"address\": \"billing@mailprotector.com\",\n \"recipients\": [\n \"billing@mailprotector.com\"\n ],\n \"sender\": \"admin@electronicmailvouchers.com\",\n \"to\": \"amy.wright@mailprotector.com\",\n \"from\": \"\\\"Rachael Hamilton\\\" \",\n \"cc\": \"\",\n \"subject\": \"Bitcoins are driving people out of 9-5 Jobs - Here's Why!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 36,\n \"mode\": \"inbound\",\n \"title\": \"Junk URL\",\n \"description\": \"This message contained content matching our junk URL heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 13,\n \"mode\": \"inbound\",\n \"title\": \"Spam Domain\",\n \"description\": \"The message contained a link to a spam domain.\",\n \"weight\": 200\n },\n {\n \"id\": 55,\n \"mode\": \"inbound\",\n \"title\": \"Ungrouped\",\n \"description\": \"Rules that have not yet been categorized or that don't fit in a category.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38387,\n \"name\": \"billing\"\n },\n \"user_group\": {\n \"id\": 25307,\n \"name\": \"Office 365 - No Bracket\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T19:49:14.000Z\"\n },\n {\n \"id\": 1987323883,\n \"uuid\": \"80404D23-3F42-4CDB-A284-B2AFAA693E74.1\",\n \"address\": \"support@mailprotector.com.au\",\n \"recipients\": [\n \"support@mailprotector.com.au\"\n ],\n \"sender\": \"JoseCampbell@klfree.cz\",\n \"to\": \"\\\"Helena\\\" \",\n \"from\": \"\\\"Macy\\\" \",\n \"cc\": \"\",\n \"subject\": \"AU Be ahead with progressive ED medications! Order Cialis Soft.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38489,\n \"name\": \"support\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T19:48:46.000Z\"\n },\n {\n \"id\": 1987323847,\n \"uuid\": \"B7A523AE-5E1C-4617-9FEA-CCAE75EB4293.1\",\n \"address\": \"support@mailprotector.com\",\n \"recipients\": [\n \"support@mailprotector.com\"\n ],\n \"sender\": \"DavidJohnson@tomwalshcpa.com\",\n \"to\": \"\\\"Kallie\\\" \",\n \"from\": \"\\\"Adelyn\\\" \",\n \"cc\": \"\",\n \"subject\": \"High quality for low price. It's not a trick, it's Cialis Brand!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38457,\n \"name\": \"support\"\n },\n \"user_group\": {\n \"id\": 28330,\n \"name\": \"Office 365 - No Archive or Bracket\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T19:48:43.000Z\"\n },\n {\n \"id\": 1987323690,\n \"uuid\": \"DB0F926D-AFEC-42AC-BAE3-828CD5AA011F.1\",\n \"address\": \"kevin@milestonenetworks.com\",\n \"recipients\": [\n \"kevin@milestonenetworks.com\"\n ],\n \"sender\": \"MarkBrown@torneriavisona.com\",\n \"to\": \"\\\"Aleah\\\" \",\n \"from\": \"\\\"Leona\\\" \",\n \"cc\": \"\",\n \"subject\": \"Viagra Soft Tabs for your desire. Buy now and get discount!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 615906,\n \"name\": \"kevin\"\n },\n \"user_group\": {\n \"id\": 12972,\n \"name\": \"Main\"\n },\n \"domain\": {\n \"id\": 14776,\n \"name\": \"milestonenetworks.com\"\n },\n \"customer\": {\n \"id\": 1987,\n \"name\": \"OCx Networks\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-07T19:48:33.000Z\"\n }\n]"}],"_postman_id":"e22b5b00-461a-4a2b-955a-48cf3684af27"},{"name":"Release Message","id":"f851e602-6142-4da6-9bb2-53d2a41d7689","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"Authorization","value":"Bearer {{your_api_key_here}}","type":"text"},{"key":"Content-Type","name":"Content-Type","value":"application/json","type":"text"}],"body":{"mode":"raw","raw":"{\n\t\"include_original_recipients\": 1,\n\t\"recipients\": \"address1@domain.com, address2@domain.com\"\n}"},"url":"emailservice.io/api/v1/messages/{{message_id}}/deliver","description":"

Release a message from the quarantine. The recipients field is optional and can be provided a comma separated string of email addresses to additionally deliver messages to.

Release more than one message from the quarantine at a time. Will return the ID's of the messages that were released. Providing all_selected: true will release all currently held messages from a reseller's quarantine.

Note: Message ID's provided in the payload that do not belong to a user under the reseller defined in the URL path will not be released, which will be evident in the request response.

Get a list of resellers belonging to a provider. This is only available if the token provided has access to the provider whose resellers are being requested.

Retrieve the information for a reseller account. Note that most API tokens will only have permission to pull their own reseller account.

Create a new reseller account. Only API tokens with provider-level permission may create a new reseller.

Edit an existing reseller.

Deletes a reseller account and all account, domains, and users under it.

Create, read, update, and delete reseller accounts.

\n","event":[{"listen":"prerequest","script":{"id":"291029ae-fedf-43bd-9626-702a32c914f4","type":"text/javascript","exec":[""]}},{"listen":"test","script":{"id":"fc5d6ba2-77ca-4b30-b6ca-4eb5abbe2224","type":"text/javascript","exec":[""]}}],"_postman_id":"f91c87d2-5132-4479-8ba9-97cc593e3571","auth":{"type":"bearer","bearer":{"token":"{{your_api_key_here}}"},"isInherited":true,"source":{"_postman_id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","name":"Mailprotector API","type":"collection"}}},{"name":"Customers","item":[{"name":"Domains","item":[{"name":"Customer Domains","id":"c8a51893-27bf-44c9-aa63-65046b6309ae","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"GET","header":[{"key":"Authorization","value":"Bearer {{your_api_key_here}}","type":"text"}],"url":"emailservice.io/api/v1/customers/{{customer_id}}/domains","description":"

Get all domains under a customer.

Create a domain under a customer.

Get all users belonging to a customer.

Get the managers belonging to a customer account. Managers that belong to the reseller above a customer are not returned in this request.

Create a new manager for a customer account.

Get Allow/Block rules belonging to a customer. This does not include rules belonging to domains, user groups, or users under the customer. The rules belonging to the reseller above it are also omitted from the response.

Create an allow or block rule belonging to a customer account.

Delete an allow or block rule.

Get the configuration for a customer account.

Edit the configuration for a customer account.

Retrieve statements belonging to a customer.

Retrieve the logs for all users under a customer. Refer to the \"Filtering Logs\" section at the top of the page for more information on filtering the results.

Retrieve quarantined messages for users under a customer.

\n","auth":{"type":"bearer","bearer":{"token":"{{your_api_key_here}}"},"isInherited":true,"source":{"_postman_id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","name":"Mailprotector API","type":"collection"}},"urlObject":{"path":["api","v1","customers","{{customer_id}}","messages"],"host":["emailservice.io"],"query":[],"variable":[]}},"response":[{"id":"e306515c-9886-4f74-8f33-4b788c00a890","name":"Customer Messages","originalRequest":{"method":"GET","header":[{"key":"Authorization","value":"Bearer {{your_api_key_here}}","type":"text"}],"url":"emailservice.io/api/v1/customers/{{customer_id}}/messages"},"status":"OK","code":200,"_postman_previewlanguage":"json","header":[{"key":"X-Frame-Options","value":"SAMEORIGIN"},{"key":"X-XSS-Protection","value":"1; mode=block"},{"key":"X-Content-Type-Options","value":"nosniff"},{"key":"X-Download-Options","value":"noopen"},{"key":"X-Permitted-Cross-Domain-Policies","value":"none"},{"key":"Referrer-Policy","value":"strict-origin-when-cross-origin"},{"key":"Content-Type","value":"application/json; charset=utf-8"},{"key":"ETag","value":"W/\"ca473c962d661b7a2a62d5a198e3d9d9\""},{"key":"Cache-Control","value":"max-age=0, private, must-revalidate"},{"key":"X-Request-Id","value":"b16f4d7c-311c-4737-ab6d-e383ed718a87"},{"key":"X-Runtime","value":"47.739132"},{"key":"Transfer-Encoding","value":"chunked"}],"cookie":[],"responseTime":null,"body":"[\n {\n \"id\": 1985056110,\n \"uuid\": \"4F03A4FF-7E36-489E-9F14-D7F95BB0EA2B.1\",\n \"address\": \"sales@mailprotector.com.au\",\n \"recipients\": [\n \"sales@mailprotector.com.au\"\n ],\n \"sender\": \"lanxifa02@163.com\",\n \"to\": \"\\\"sales\\\" \",\n \"from\": \"\\\"Keans Group Corp.\\\" \",\n \"cc\": \"\",\n \"subject\": \"Re;Luminous collect\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38485,\n \"name\": \"sales\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T20:50:11.000Z\"\n },\n {\n \"id\": 1987720038,\n \"uuid\": \"8ED07A77-D3F5-4DD9-9F41-8DBDF2A89A78.1\",\n \"address\": \"sales@mailprotector.com.au\",\n \"recipients\": [\n \"sales@mailprotector.com.au\"\n ],\n \"sender\": \"info@ignitevisibility.online\",\n \"to\": \"\\\"sales\\\" \",\n \"from\": \"Crystal Grey \",\n \"cc\": \"\",\n \"subject\": \"Website enquiries\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 300\n },\n \"results\": [\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 173,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 55,\n \"mode\": \"inbound\",\n \"title\": \"Ungrouped\",\n \"description\": \"Rules that have not yet been categorized or that don't fit in a category.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38485,\n \"name\": \"sales\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T18:23:32.000Z\"\n },\n {\n \"id\": 1985012921,\n \"uuid\": \"4CEEA828-38FB-44CF-A86B-8451E5D556E5.1\",\n \"address\": \"info@mailprotector.com.au\",\n \"recipients\": [\n \"info@mailprotector.com.au\"\n ],\n \"sender\": \"lanxifa02@163.com\",\n \"to\": \"\\\"info\\\" \",\n \"from\": \"\\\"Keans Group Corp.\\\" \",\n \"cc\": \"\",\n \"subject\": \"Re;Luminous collect\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 740\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 55,\n \"mode\": \"inbound\",\n \"title\": \"Ungrouped\",\n \"description\": \"Rules that have not yet been categorized or that don't fit in a category.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 682800,\n \"name\": \"info\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T18:18:14.000Z\"\n },\n {\n \"id\": 1988097219,\n \"uuid\": \"3DDFD497-25DA-4A60-917B-8B137FF6C112.1\",\n \"address\": \"support@mailprotector.com.au\",\n \"recipients\": [\n \"support@mailprotector.com.au\"\n ],\n \"sender\": \"WalterWilson@toscanapa.com\",\n \"to\": \"\\\"Skylar\\\" \",\n \"from\": \"\\\"Alexandra\\\" \",\n \"cc\": \"\",\n \"subject\": \"AU Stronger action - brighter emotions. Kamagra Oral Jelly from our pharmacy.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38489,\n \"name\": \"support\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T17:27:13.000Z\"\n },\n {\n \"id\": 1988097188,\n \"uuid\": \"7A2C9FCA-7478-4470-ACA2-18D7BF7A374C.1\",\n \"address\": \"spam@mailprotector.com\",\n \"recipients\": [\n \"spam@mailprotector.com\"\n ],\n \"sender\": \"simm@caperadiology.com\",\n \"to\": \"\\\"spam@mailprotector.com\\\" \",\n \"from\": \"Simsouda Mahathath \",\n \"cc\": \"\",\n \"subject\": \"FW: ZipRad Automates Image Ordering\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 212\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 73,\n \"mode\": \"inbound\",\n \"title\": \"SA\",\n \"description\": \"In some cases we will use Spam Assassin to supplement other filtering conditions. This score is multiplied by 40 to translate to the Mailprotector scoring system.\",\n \"weight\": 40\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 475236,\n \"name\": \"spam\"\n },\n \"user_group\": {\n \"id\": 9246,\n \"name\": \"CloudMail\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T17:27:12.000Z\"\n },\n {\n \"id\": 1988084340,\n \"uuid\": \"647F200F-6213-4B22-9DA1-5D733147699A.1\",\n \"address\": \"partners@mailprotector.com.au\",\n \"recipients\": [\n \"partners@mailprotector.com.au\"\n ],\n \"sender\": \"HenryMoore@timthomascpa.com\",\n \"to\": \"\\\"Elke\\\" \",\n \"from\": \"\\\"Maria\\\" \",\n \"cc\": \"\",\n \"subject\": \"All you need is love. Cialis Professional will give you long action.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 147,\n \"mode\": \"inbound\",\n \"title\": \"SPF Neutral\",\n \"description\": \"The SPF record specifies explicitly that nothing can be said about validity.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38483,\n \"name\": \"partners\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T17:14:46.000Z\"\n },\n {\n \"id\": 1988080213,\n \"uuid\": \"4DA2AD25-214D-476C-ADE7-BD32D2F91256.1\",\n \"address\": \"partners@mailprotector.com\",\n \"recipients\": [\n \"partners@mailprotector.com\"\n ],\n \"sender\": \"JohnWoods@trailwoodshoa.com\",\n \"to\": \"\\\"Katharina\\\" \",\n \"from\": \"\\\"Sophia\\\" \",\n \"cc\": \"\",\n \"subject\": \"Kamagra Oral Jelly inspires! Strengthen your love power now!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 960\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 710337,\n \"name\": \"partners\"\n },\n \"user_group\": {\n \"id\": 28330,\n \"name\": \"Office 365 - No Archive or Bracket\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T17:10:45.000Z\"\n },\n {\n \"id\": 1988079634,\n \"uuid\": \"E40B3CC4-3FB5-42C8-829F-0BF204F99D82.1\",\n \"address\": \"billing@mailprotector.com\",\n \"recipients\": [\n \"billing@mailprotector.com\",\n \"marketing@mailprotector.com\"\n ],\n \"sender\": \"KennethHicks@titangroupna.com\",\n \"to\": \"\\\"Ellison\\\" ,\\n\\t\\\"Kristina\\\" \",\n \"from\": \"\\\"Briella\\\" \",\n \"cc\": \"\",\n \"subject\": \"Get the best quality of Cialis Soft Tabs! Best price ever!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38387,\n \"name\": \"billing\"\n },\n \"user_group\": {\n \"id\": 25307,\n \"name\": \"Office 365 - No Bracket\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T17:09:55.000Z\"\n },\n {\n \"id\": 1988079635,\n \"uuid\": \"E40B3CC4-3FB5-42C8-829F-0BF204F99D82.1\",\n \"address\": \"marketing@mailprotector.com\",\n \"recipients\": [\n \"billing@mailprotector.com\",\n \"marketing@mailprotector.com\"\n ],\n \"sender\": \"KennethHicks@titangroupna.com\",\n \"to\": \"\\\"Ellison\\\" ,\\n\\t\\\"Kristina\\\" \",\n \"from\": \"\\\"Briella\\\" \",\n \"cc\": \"\",\n \"subject\": \"Get the best quality of Cialis Soft Tabs! Best price ever!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38437,\n \"name\": \"marketing\"\n },\n \"user_group\": {\n \"id\": 25307,\n \"name\": \"Office 365 - No Bracket\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T17:09:55.000Z\"\n },\n {\n \"id\": 1988077799,\n \"uuid\": \"6439C6BA-3DBF-43E9-A3E0-F5CF011AE072.1\",\n \"address\": \"spam@mailprotector.com\",\n \"recipients\": [\n \"spam@mailprotector.com\"\n ],\n \"sender\": \"dpeters@calvarychurch.com\",\n \"to\": \"\\\"spam@emailservice.io\\\" \",\n \"from\": \"Donna Peters \",\n \"cc\": \"\",\n \"subject\": \"FW: [Possible spam] It's the New Year and a new church budget. Now is the time to plan your next outreach events. CMG can help!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 450\n },\n \"results\": [\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 7,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 20 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 50\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 475236,\n \"name\": \"spam\"\n },\n \"user_group\": {\n \"id\": 9246,\n \"name\": \"CloudMail\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T17:08:02.000Z\"\n },\n {\n \"id\": 1988075168,\n \"uuid\": \"BA2AD34F-C172-4CB9-BB3B-11BE167B05AA.1\",\n \"address\": \"partners@mailprotector.co.uk\",\n \"recipients\": [\n \"partners@mailprotector.co.uk\"\n ],\n \"sender\": \"AdamWest@upcbroadband.cz\",\n \"to\": \"\\\"Gisela\\\" \",\n \"from\": \"\\\"Heike\\\" \",\n \"cc\": \"\",\n \"subject\": \"Realize your dormant temper. Kamagra Oral Jelly.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 2,\n \"mode\": \"inbound\",\n \"title\": \"ISP Reverse DNS\",\n \"description\": \"The server that relayed the message was part of an ISP network which has a high frequency of spam.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 3,\n \"mode\": \"inbound\",\n \"title\": \"ISP Helo\",\n \"description\": \"The HELO value used was from an ISP.\",\n \"weight\": 40\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38505,\n \"name\": \"partners\"\n },\n \"user_group\": {\n \"id\": 1073,\n \"name\": \"mailprotector.co.uk user group\"\n },\n \"domain\": {\n \"id\": 1481,\n \"name\": \"mailprotector.co.uk\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T17:06:50.000Z\"\n },\n {\n \"id\": 1988082915,\n \"uuid\": \"A98F39CA-FF49-4088-9215-772579A0DB09.1\",\n \"address\": \"jeremy.nigh@mailprotector.com\",\n \"recipients\": [\n \"jeremy.nigh@mailprotector.com\"\n ],\n \"sender\": \"new-roofing-deals-jeremy.nigh=mailprotector.com@goodsdepartment.com\",\n \"to\": \"\",\n \"from\": \"\\\"New Roofing Deals\\\" \",\n \"cc\": \"\",\n \"subject\": \"Save Hundreds on your Energy Bills\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 300\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38425,\n \"name\": \"jeremy.nigh\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T17:06:44.000Z\"\n },\n {\n \"id\": 1988073923,\n \"uuid\": \"E8D83B1F-1405-42E5-B978-9FC830BDEE5B.1\",\n \"address\": \"feedback@mailprotector.com.au\",\n \"recipients\": [\n \"feedback@mailprotector.com.au\"\n ],\n \"sender\": \"BillyBaker@tkcpa.com\",\n \"to\": \"\\\"Myah\\\" \",\n \"from\": \"\\\"Julianna\\\" \",\n \"cc\": \"\",\n \"subject\": \"Feel the call of your body with Viagra Professional. The best price here!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 173,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38477,\n \"name\": \"feedback\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T17:05:59.000Z\"\n },\n {\n \"id\": 1988073718,\n \"uuid\": \"6E2B4EFB-D3BD-4170-9384-C48ACB119CB6.1\",\n \"address\": \"haleigh.kump@mailprotector.com\",\n \"recipients\": [\n \"haleigh.kump@mailprotector.com\"\n ],\n \"sender\": \"order.procurement.8357129047@aviationminingsolutoins.com\",\n \"to\": \"haleigh.kump@mailprotector.com\",\n \"from\": \"Order Procurement \",\n \"cc\": \"\",\n \"subject\": \"Request For Quotation # 8357129047\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 640\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 32,\n \"mode\": \"inbound\",\n \"title\": \"Phishing\",\n \"description\": \"This message contained content matching our phishing heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 62,\n \"mode\": \"inbound\",\n \"title\": \"Scam\",\n \"description\": \"Scam patterns - Nigerian and variants + others such as fake eBay account verification requests.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 993175,\n \"name\": \"haleigh.kump\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T17:05:12.000Z\"\n },\n {\n \"id\": 1988041226,\n \"uuid\": \"A6799461-93C3-4BCE-9621-8D18E2398A50.1\",\n \"address\": \"ben.hathaway@mailprotector.com\",\n \"recipients\": [\n \"ben.hathaway@mailprotector.com\"\n ],\n \"sender\": \"jk@deskware-app.com\",\n \"to\": \"Ben Hathaway \",\n \"from\": \"John Kampas \",\n \"cc\": \"\",\n \"subject\": \"Re: Introductory Call\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 200\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 62,\n \"mode\": \"inbound\",\n \"title\": \"Scam\",\n \"description\": \"Scam patterns - Nigerian and variants + others such as fake eBay account verification requests.\",\n \"weight\": 200\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38383,\n \"name\": \"ben.hathaway\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T16:44:37.000Z\"\n },\n {\n \"id\": 1988034691,\n \"uuid\": \"6CD475B2-0C22-4DA0-A926-0EC8725CB3B1.1\",\n \"address\": \"david.setzer@mailprotector.com\",\n \"recipients\": [\n \"david.setzer@mailprotector.com\"\n ],\n \"sender\": \"salesdev.louannek@gmail.com\",\n \"to\": \"david.setzer@mailprotector.com\",\n \"from\": \"Louanne Knott \",\n \"cc\": \"\",\n \"subject\": \"Strategy discussion on Thursday at 1:00 pm - David?\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 220\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 55,\n \"mode\": \"inbound\",\n \"title\": \"Ungrouped\",\n \"description\": \"Rules that have not yet been categorized or that don't fit in a category.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38403,\n \"name\": \"david.setzer\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T16:37:41.000Z\"\n },\n {\n \"id\": 1988028346,\n \"uuid\": \"D6826CC9-D377-4EC9-AD58-62672320E180.1\",\n \"address\": \"support@mailprotector.com.au\",\n \"recipients\": [\n \"support@mailprotector.com.au\"\n ],\n \"sender\": \"ChristopherMorris@intercable.net.co\",\n \"to\": \"\\\"Heaven\\\" \",\n \"from\": \"\\\"Mary\\\" \",\n \"cc\": \"\",\n \"subject\": \"AU Viagra Super Active - your main equipment for love adventures.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 860\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38489,\n \"name\": \"support\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T16:31:06.000Z\"\n },\n {\n \"id\": 1988029459,\n \"uuid\": \"09687D2F-22C2-4602-BE96-30A5375E50C6.1\",\n \"address\": \"support@mailprotector.com.au\",\n \"recipients\": [\n \"support@mailprotector.com.au\"\n ],\n \"sender\": \"SamuelReed@timallencpa.com\",\n \"to\": \"\\\"Julianna\\\" \",\n \"from\": \"\\\"Vivienne\\\" \",\n \"cc\": \"\",\n \"subject\": \"AU Qualitative drugs for lowest price here! Choose Cialis Brand.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38489,\n \"name\": \"support\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T16:30:30.000Z\"\n },\n {\n \"id\": 1988027419,\n \"uuid\": \"EE7808DD-2FE3-413A-97F7-960BD31F3659.1\",\n \"address\": \"support@mailprotector.com\",\n \"recipients\": [\n \"support@mailprotector.com\"\n ],\n \"sender\": \"JustinWalker@titangroupna.com\",\n \"to\": \"\\\"Harleigh\\\" \",\n \"from\": \"\\\"Mary\\\" \",\n \"cc\": \"\",\n \"subject\": \"Get strong erection for sure! Levitra.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38457,\n \"name\": \"support\"\n },\n \"user_group\": {\n \"id\": 28330,\n \"name\": \"Office 365 - No Archive or Bracket\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T16:30:08.000Z\"\n },\n {\n \"id\": 1988015145,\n \"uuid\": \"1532DBAA-E414-4782-B342-92E8C220A42A.1\",\n \"address\": \"spam@mailprotector.com\",\n \"recipients\": [\n \"spam@mailprotector.com\"\n ],\n \"sender\": \"mark@mcnabolalaw.com\",\n \"to\": \"\\\"spam@emailservice.io\\\" \",\n \"from\": \"Mark McNabola \",\n \"cc\": \"\",\n \"subject\": \"FW: Working capital exclusively endorsed by NTL\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 300\n },\n \"results\": [\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 475236,\n \"name\": \"spam\"\n },\n \"user_group\": {\n \"id\": 9246,\n \"name\": \"CloudMail\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T16:17:54.000Z\"\n },\n {\n \"id\": 1988012318,\n \"uuid\": \"AF8AC3A3-AC6D-424D-9818-0543C2830CF9.1\",\n \"address\": \"billing@mailprotector.com\",\n \"recipients\": [\n \"billing@mailprotector.com\"\n ],\n \"sender\": \"v-bngeokh_eblijdapch_gamdeape_gamdeape_a@bounce.spectrumbusiness.spectrum.com\",\n \"to\": \"amy.wright@mailprotector.com\",\n \"from\": \"Spectrum Business \",\n \"cc\": \"\",\n \"subject\": \"[Insights] Thinking About Gigabit Internet?\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 280\n },\n \"results\": [\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38387,\n \"name\": \"billing\"\n },\n \"user_group\": {\n \"id\": 25307,\n \"name\": \"Office 365 - No Bracket\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T16:14:40.000Z\"\n },\n {\n \"id\": 1988012326,\n \"uuid\": \"B7A9277F-2EB7-4208-AA5D-A974C6217BCF.1\",\n \"address\": \"andy.barringer@mailprotector.com\",\n \"recipients\": [\n \"andy.barringer@mailprotector.com\"\n ],\n \"sender\": \"v-bngeokh_eblijjnnji_gamdeape_gamdeape_a@bounce.spectrumbusiness.spectrum.com\",\n \"to\": \"andy@mailprotector.com\",\n \"from\": \"Spectrum Business \",\n \"cc\": \"\",\n \"subject\": \"[Insights] Thinking About Gigabit Internet?\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 400\n },\n \"results\": [\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 728356,\n \"name\": \"andy.barringer\"\n },\n \"user_group\": {\n \"id\": 16148,\n \"name\": \"Exchange 2016\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T16:13:11.000Z\"\n },\n {\n \"id\": 1988020203,\n \"uuid\": \"82D72264-8798-4FBE-82BF-093338F9201E.1\",\n \"address\": \"jeremy.nigh@mailprotector.com\",\n \"recipients\": [\n \"jeremy.nigh@mailprotector.com\"\n ],\n \"sender\": \"v-bngeokh_eblijipnkm_gamdeape_gamdeape_a@bounce.spectrumbusiness.spectrum.com\",\n \"to\": \"jeremy.nigh@mailprotector.com\",\n \"from\": \"Spectrum Business \",\n \"cc\": \"\",\n \"subject\": \"[Insights] Thinking About Gigabit Internet?\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 280\n },\n \"results\": [\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38425,\n \"name\": \"jeremy.nigh\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T16:13:01.000Z\"\n },\n {\n \"id\": 1988004383,\n \"uuid\": \"C3ACBF69-1C59-4B37-80A9-CCF9069657C5.1\",\n \"address\": \"ben.hathaway@mailprotector.com\",\n \"recipients\": [\n \"ben.hathaway@mailprotector.com\"\n ],\n \"sender\": \"bounce-131_HTML-105339659-3312717-10959666-53@bounce.email.slackhq.com\",\n \"to\": \"\",\n \"from\": \"\\\"Slack\\\" \",\n \"cc\": \"\",\n \"subject\": \"January admin update\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 340\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38383,\n \"name\": \"ben.hathaway\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T16:10:17.000Z\"\n },\n {\n \"id\": 1988003731,\n \"uuid\": \"9F4439A4-098B-46E6-93C3-6170B272C2B4.1\",\n \"address\": \"feedback@mailprotector.com.au\",\n \"recipients\": [\n \"feedback@mailprotector.com.au\"\n ],\n \"sender\": \"JerryGray@toscanapa.com\",\n \"to\": \"\\\"Rylie\\\" \",\n \"from\": \"\\\"Eleanor\\\" \",\n \"cc\": \"\",\n \"subject\": \"Extend the active years of life. Choose Cialis Daily.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 173,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38477,\n \"name\": \"feedback\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T16:09:50.000Z\"\n },\n {\n \"id\": 1988002165,\n \"uuid\": \"F7F00B4B-8374-4C7D-BA0F-6AFFD8BCA9FD.1\",\n \"address\": \"weston.gaskill@mailprotector.com\",\n \"recipients\": [\n \"weston.gaskill@mailprotector.com\"\n ],\n \"sender\": \"v-bngeokh_eblijigkaf_gamdeape_gamdeape_a@bounce.spectrumbusiness.spectrum.com\",\n \"to\": \"weston.gaskill@mailprotector.com\",\n \"from\": \"Spectrum Business \",\n \"cc\": \"\",\n \"subject\": \"[Insights] Thinking About Gigabit Internet?\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 280\n },\n \"results\": [\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 724133,\n \"name\": \"weston.gaskill\"\n },\n \"user_group\": {\n \"id\": 16148,\n \"name\": \"Exchange 2016\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T16:08:42.000Z\"\n },\n {\n \"id\": 1988001399,\n \"uuid\": \"A98B2A6E-16C5-4A80-8D8D-B01DDBED514B.1\",\n \"address\": \"david.setzer@mailprotector.com\",\n \"recipients\": [\n \"david.setzer@mailprotector.com\"\n ],\n \"sender\": \"1axbh2k111fa0n3gqbh4lz409rm7saxtjj7cj6@bf02b.hubspotemail.net\",\n \"to\": \"david.setzer@mailprotector.com\",\n \"from\": \"Kendra Hart \",\n \"cc\": \"\",\n \"subject\": \"Your Commercial Cleaning Needs\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 200\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 62,\n \"mode\": \"inbound\",\n \"title\": \"Scam\",\n \"description\": \"Scam patterns - Nigerian and variants + others such as fake eBay account verification requests.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38403,\n \"name\": \"david.setzer\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T16:08:16.000Z\"\n },\n {\n \"id\": 1988000818,\n \"uuid\": \"692B0CB2-327B-4DD3-BA0C-738E99F09C7B.1\",\n \"address\": \"spam@mailprotector.com\",\n \"recipients\": [\n \"spam@mailprotector.com\"\n ],\n \"sender\": \"hsteuer@refaxinc.com\",\n \"to\": \"\\\"spam@emailservice.io\\\" \",\n \"from\": \"Hansel Steuer \",\n \"cc\": \"\",\n \"subject\": \"FW: CNC Plasma Cutter, Press Brakes, Shears, Turret & Engine Lathes, ( 45+) Welders, Large Steel Inventory\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 420\n },\n \"results\": [\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 475236,\n \"name\": \"spam\"\n },\n \"user_group\": {\n \"id\": 9246,\n \"name\": \"CloudMail\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T16:07:34.000Z\"\n },\n {\n \"id\": 1988008615,\n \"uuid\": \"0EE3C756-4841-4E49-A480-CB33780D072C.1\",\n \"address\": \"jeremy.nigh@mailprotector.com\",\n \"recipients\": [\n \"jeremy.nigh@mailprotector.com\"\n ],\n \"sender\": \"canvasprints-promo-jeremy.nigh=mailprotector.com@itemsandbackup.com\",\n \"to\": \"\",\n \"from\": \"\\\"CanvasPrints Promo\\\" \",\n \"cc\": \"\",\n \"subject\": \"Up to 93% off Custom Prints\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 500\n },\n \"results\": [\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38425,\n \"name\": \"jeremy.nigh\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T16:05:32.000Z\"\n },\n {\n \"id\": 1988004084,\n \"uuid\": \"5EE9A474-4E52-4B4F-92B4-E550212C13FB.1\",\n \"address\": \"jeremy.nigh@mailprotector.com\",\n \"recipients\": [\n \"jeremy.nigh@mailprotector.com\"\n ],\n \"sender\": \"snore.fix-jeremy.nigh=mailprotector.com@lumaslim.rest\",\n \"to\": \"\",\n \"from\": \"\\\"Snore Fix\\\" \",\n \"cc\": \"\",\n \"subject\": \"Are You Tired of Hearing Your Partner Snore Every Day?\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 220\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 62,\n \"mode\": \"inbound\",\n \"title\": \"Scam\",\n \"description\": \"Scam patterns - Nigerian and variants + others such as fake eBay account verification requests.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38425,\n \"name\": \"jeremy.nigh\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T16:04:33.000Z\"\n },\n {\n \"id\": 1987990759,\n \"uuid\": \"D87238B8-4337-416F-8E9F-3221AFC5440A.1\",\n \"address\": \"sales@mailprotector.com.au\",\n \"recipients\": [\n \"sales@mailprotector.com.au\"\n ],\n \"sender\": \"323280@@bigpond.net.au\",\n \"to\": \"sales@mailprotector.com.au\",\n \"from\": \"\\\"william\\\" <323280@@bigpond.net.au>\",\n \"cc\": \"\",\n \"subject\": \"metal pen price\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 980\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 3,\n \"mode\": \"inbound\",\n \"title\": \"ISP Helo\",\n \"description\": \"The HELO value used was from an ISP.\",\n \"weight\": 40\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 55,\n \"mode\": \"inbound\",\n \"title\": \"Ungrouped\",\n \"description\": \"Rules that have not yet been categorized or that don't fit in a category.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38485,\n \"name\": \"sales\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T16:00:52.000Z\"\n },\n {\n \"id\": 1988020542,\n \"uuid\": \"85312A4F-C813-440D-9F76-4D702F45F2B4.1\",\n \"address\": \"david.setzer@mailprotector.com\",\n \"recipients\": [\n \"david.setzer@mailprotector.com\"\n ],\n \"sender\": \"6067-2594-16926-1625-dsetzer=mailprotector.net@mail.sqribplus.bid\",\n \"to\": \"\",\n \"from\": \"\\\"Sqribble\\\" \",\n \"cc\": \"\",\n \"subject\": \"Sqribble Is The ONLY eBook Creator Youâ\\u0080\\u0099ll Ever Needâ\\u0080¦\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 61,\n \"mode\": \"inbound\",\n \"title\": \"Porn/Adult\",\n \"description\": \"Pornography, Dating, 'organ' augmentation.\",\n \"weight\": 200\n },\n {\n \"id\": 13,\n \"mode\": \"inbound\",\n \"title\": \"Spam Domain\",\n \"description\": \"The message contained a link to a spam domain.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38403,\n \"name\": \"david.setzer\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T16:00:25.000Z\"\n },\n {\n \"id\": 1988044960,\n \"uuid\": \"0496CAB2-6898-43C9-A2D1-9028D9E9A3DC.1\",\n \"address\": \"ben.hathaway@mailprotector.com\",\n \"recipients\": [\n \"ben.hathaway@mailprotector.com\"\n ],\n \"sender\": \"6067-2594-23437-1625-ben.hathaway=mailprotector.com@mail.sqribplus.bid\",\n \"to\": \"\",\n \"from\": \"\\\"Sqribble\\\" \",\n \"cc\": \"\",\n \"subject\": \"No installation required. Sqribble is compatible on all computers.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 960\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 61,\n \"mode\": \"inbound\",\n \"title\": \"Porn/Adult\",\n \"description\": \"Pornography, Dating, 'organ' augmentation.\",\n \"weight\": 200\n },\n {\n \"id\": 13,\n \"mode\": \"inbound\",\n \"title\": \"Spam Domain\",\n \"description\": \"The message contained a link to a spam domain.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38383,\n \"name\": \"ben.hathaway\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T15:59:25.000Z\"\n },\n {\n \"id\": 1987988358,\n \"uuid\": \"84956ED3-95AC-42AB-8E53-B471D793F986.1\",\n \"address\": \"kurin.quintavalle@mailprotector.com\",\n \"recipients\": [\n \"kurin.quintavalle@mailprotector.com\"\n ],\n \"sender\": \"bounces+864718-5d61-kurin.quintavalle=mailprotector.com@delivery.customeriomail.com\",\n \"to\": \"kurin.quintavalle@mailprotector.com\",\n \"from\": \"DataValidation Support \",\n \"cc\": \"\",\n \"subject\": \"Start the new year right!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 276\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 73,\n \"mode\": \"inbound\",\n \"title\": \"SA\",\n \"description\": \"In some cases we will use Spam Assassin to supplement other filtering conditions. This score is multiplied by 40 to translate to the Mailprotector scoring system.\",\n \"weight\": 40\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 846641,\n \"name\": \"kurin.quintavalle\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T15:58:21.000Z\"\n },\n {\n \"id\": 1987986471,\n \"uuid\": \"C7D18765-78CE-4666-BD49-2E2ED8FC7329.1\",\n \"address\": \"ben.hathaway@mailprotector.com\",\n \"recipients\": [\n \"ben.hathaway@mailprotector.com\"\n ],\n \"sender\": \"bounces+140056-9737-ben.hathaway=mailprotector.com@emails.mangoapps.com\",\n \"to\": \"ben.hathaway@mailprotector.com\",\n \"from\": \"\\\"Patrick Allman\\\" \",\n \"cc\": \"\",\n \"subject\": \"RE: 2020 Digital Employee Initiatives at Mailprotector\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 220\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38383,\n \"name\": \"ben.hathaway\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T15:56:08.000Z\"\n },\n {\n \"id\": 1987981341,\n \"uuid\": \"AFA319EC-6DDE-4435-ACBB-C4F10BA58DF0.1\",\n \"address\": \"jeremy.nigh@mailprotector.com\",\n \"recipients\": [\n \"jeremy.nigh@mailprotector.com\"\n ],\n \"sender\": \"6067-2594-23416-1625-jeremy.nigh=mailprotector.com@mail.sqribplus.bid\",\n \"to\": \"\",\n \"from\": \"\\\"Sqribble\\\" \",\n \"cc\": \"\",\n \"subject\": \"No installation required. Sqribble is compatible on all computers.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 960\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 61,\n \"mode\": \"inbound\",\n \"title\": \"Porn/Adult\",\n \"description\": \"Pornography, Dating, 'organ' augmentation.\",\n \"weight\": 200\n },\n {\n \"id\": 13,\n \"mode\": \"inbound\",\n \"title\": \"Spam Domain\",\n \"description\": \"The message contained a link to a spam domain.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38425,\n \"name\": \"jeremy.nigh\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T15:48:02.000Z\"\n },\n {\n \"id\": 1987970948,\n \"uuid\": \"C41DC0EB-20BE-471F-87AF-0B44B9027D3A.1\",\n \"address\": \"spam@mailprotector.com\",\n \"recipients\": [\n \"spam@mailprotector.com\"\n ],\n \"sender\": \"swasko@refaxinc.com\",\n \"to\": \"\\\"spam@emailservice.io\\\" \",\n \"from\": \"Sharon Wasko \",\n \"cc\": \"\",\n \"subject\": \"FW: So you probably know how much your roof repair costs\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 400\n },\n \"results\": [\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 475236,\n \"name\": \"spam\"\n },\n \"user_group\": {\n \"id\": 9246,\n \"name\": \"CloudMail\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T15:36:35.000Z\"\n },\n {\n \"id\": 1987969909,\n \"uuid\": \"68E711E4-5757-4D93-8603-F2F1A13DBAE1.1\",\n \"address\": \"ricky.hayes@mailprotector.com\",\n \"recipients\": [\n \"ricky.hayes@mailprotector.com\"\n ],\n \"sender\": \"JuanParker@novotelecom.ru\",\n \"to\": \"\\\"Magnolia\\\" \",\n \"from\": \"\\\"Marley\\\" \",\n \"cc\": \"\",\n \"subject\": \"what are your plans for the weekend?\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 33,\n \"mode\": \"inbound\",\n \"title\": \"Junk\",\n \"description\": \"This message contained content matching our junk email heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 62,\n \"mode\": \"inbound\",\n \"title\": \"Scam\",\n \"description\": \"Scam patterns - Nigerian and variants + others such as fake eBay account verification requests.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38445,\n \"name\": \"ricky.hayes\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T15:36:10.000Z\"\n },\n {\n \"id\": 1987969472,\n \"uuid\": \"DC23E383-016B-439D-8C5D-1A95E291FA45.1\",\n \"address\": \"kurin.quintavalle@mailprotector.com\",\n \"recipients\": [\n \"kurin.quintavalle@mailprotector.com\"\n ],\n \"sender\": \"bounces+864718-5d61-kurin.quintavalle=mailprotector.com@delivery.customeriomail.com\",\n \"to\": \"kurin.quintavalle@mailprotector.com\",\n \"from\": \"DataValidation \",\n \"cc\": \"\",\n \"subject\": \"Your email list needs attention\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 276\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 73,\n \"mode\": \"inbound\",\n \"title\": \"SA\",\n \"description\": \"In some cases we will use Spam Assassin to supplement other filtering conditions. This score is multiplied by 40 to translate to the Mailprotector scoring system.\",\n \"weight\": 40\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 846641,\n \"name\": \"kurin.quintavalle\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T15:35:43.000Z\"\n },\n {\n \"id\": 1987968638,\n \"uuid\": \"D4EE06E6-3599-4102-9B36-12A881CCDD6D.1\",\n \"address\": \"spam@mailprotector.com\",\n \"recipients\": [\n \"spam@mailprotector.com\"\n ],\n \"sender\": \"clawrence@kubikmaltbie.com\",\n \"to\": \"\\\"spam@emailservice.io\\\" \",\n \"from\": \"Chanda Lawrence \",\n \"cc\": \"\",\n \"subject\": \"FW: CONTACT me via this email { WUMTD.AGNENT@outlook.com) FOR YOUR FUND\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 320\n },\n \"results\": [\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 475236,\n \"name\": \"spam\"\n },\n \"user_group\": {\n \"id\": 9246,\n \"name\": \"CloudMail\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T15:34:46.000Z\"\n },\n {\n \"id\": 1987956465,\n \"uuid\": \"11A4EA1C-A1D1-4472-9627-724F4C1CC62A.1\",\n \"address\": \"jeremy.nigh@mailprotector.com\",\n \"recipients\": [\n \"jeremy.nigh@mailprotector.com\"\n ],\n \"sender\": \"Sqribble@riblehal.us\",\n \"to\": \"\",\n \"from\": \"\\\"Sqribble\\\" \",\n \"cc\": \"\",\n \"subject\": \"Sqribble Is The ONLY eBook Creator Youâ\\u0080\\u0099ll Ever Needâ\\u0080¦\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 660\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 54,\n \"mode\": \"inbound\",\n \"title\": \"Experimental\",\n \"description\": \"Abstract patterns for spam structures.\",\n \"weight\": 200\n },\n {\n \"id\": 13,\n \"mode\": \"inbound\",\n \"title\": \"Spam Domain\",\n \"description\": \"The message contained a link to a spam domain.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38425,\n \"name\": \"jeremy.nigh\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T15:22:54.000Z\"\n },\n {\n \"id\": 1987949817,\n \"uuid\": \"4063640E-BBDB-4BB2-BC6C-AB1AA576A59C.1\",\n \"address\": \"partners@mailprotector.com\",\n \"recipients\": [\n \"partners@mailprotector.com\"\n ],\n \"sender\": \"e7d37442d38a36719d0e1bd9f47492f0@ypclistmanager.com\",\n \"to\": \"partners@mailprotector.com\",\n \"from\": \"Contacts Database \",\n \"cc\": \"\",\n \"subject\": \"Worldwide E-mail Marketing Database [LIMITED OFFER: -40% DISCOUNT]:\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 620\n },\n \"results\": [\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 55,\n \"mode\": \"inbound\",\n \"title\": \"Ungrouped\",\n \"description\": \"Rules that have not yet been categorized or that don't fit in a category.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 710337,\n \"name\": \"partners\"\n },\n \"user_group\": {\n \"id\": 28330,\n \"name\": \"Office 365 - No Archive or Bracket\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T15:16:26.000Z\"\n },\n {\n \"id\": 1987947570,\n \"uuid\": \"E7CDB7DB-E00C-4DA4-B334-A8338214478F.1\",\n \"address\": \"jeremy.nigh@mailprotector.com\",\n \"recipients\": [\n \"jeremy.nigh@mailprotector.com\"\n ],\n \"sender\": \"kill.my.taxes-jeremy.nigh=mailprotector.com@preparationitems.com\",\n \"to\": \"\",\n \"from\": \"\\\"Kill My Taxes\\\" \",\n \"cc\": \"\",\n \"subject\": \"Stop IRS collections\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 700\n },\n \"results\": [\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 13,\n \"mode\": \"inbound\",\n \"title\": \"Spam Domain\",\n \"description\": \"The message contained a link to a spam domain.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38425,\n \"name\": \"jeremy.nigh\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T15:07:42.000Z\"\n },\n {\n \"id\": 1987930561,\n \"uuid\": \"921E6A0D-EFD8-4B0C-AD44-1A5CDE156074.1\",\n \"address\": \"billing@mailprotector.com\",\n \"recipients\": [\n \"billing@mailprotector.com\"\n ],\n \"sender\": \"BryanWilson@ucom.am\",\n \"to\": \"\\\"Isabelle\\\" \",\n \"from\": \"\\\"Ilse\\\" \",\n \"cc\": \"\",\n \"subject\": \"Choose Viagra Super Force. Choose maximum pleasure.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 3,\n \"mode\": \"inbound\",\n \"title\": \"ISP Helo\",\n \"description\": \"The HELO value used was from an ISP.\",\n \"weight\": 40\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38387,\n \"name\": \"billing\"\n },\n \"user_group\": {\n \"id\": 25307,\n \"name\": \"Office 365 - No Bracket\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T14:59:42.000Z\"\n },\n {\n \"id\": 1987927999,\n \"uuid\": \"EF173F91-8029-4347-A2CD-66417FCEBEC5.1\",\n \"address\": \"partners@mailprotector.com.au\",\n \"recipients\": [\n \"partners@mailprotector.com.au\"\n ],\n \"sender\": \"DalePrice@totsona.com\",\n \"to\": \"\\\"Christina\\\" \",\n \"from\": \"\\\"Esperanza\\\" \",\n \"cc\": \"\",\n \"subject\": \"could you meet me today?\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 940\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 62,\n \"mode\": \"inbound\",\n \"title\": \"Scam\",\n \"description\": \"Scam patterns - Nigerian and variants + others such as fake eBay account verification requests.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38483,\n \"name\": \"partners\"\n },\n \"user_group\": {\n \"id\": 1071,\n \"name\": \"mailprotector.com.au user group\"\n },\n \"domain\": {\n \"id\": 1477,\n \"name\": \"mailprotector.com.au\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T14:57:04.000Z\"\n },\n {\n \"id\": 1987927990,\n \"uuid\": \"E845930D-576C-40DF-866C-932539A402E8.1\",\n \"address\": \"partners@mailprotector.com\",\n \"recipients\": [\n \"partners@mailprotector.com\"\n ],\n \"sender\": \"JesseReed@nnt.net.br\",\n \"to\": \"\\\"Brynn\\\" \",\n \"from\": \"\\\"Avalyn\\\" \",\n \"cc\": \"\",\n \"subject\": \"If all men were the same as you...\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 710337,\n \"name\": \"partners\"\n },\n \"user_group\": {\n \"id\": 28330,\n \"name\": \"Office 365 - No Archive or Bracket\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T14:57:03.000Z\"\n },\n {\n \"id\": 1987922956,\n \"uuid\": \"A68B53F2-A33C-440C-9C41-E3D73B4A1659.1\",\n \"address\": \"billing@mailprotector.com\",\n \"recipients\": [\n \"billing@mailprotector.com\"\n ],\n \"sender\": \"bounces+3633940-b389-billing=mailprotector.com@em.app.postmates.com\",\n \"to\": \"billing@mailprotector.com\",\n \"from\": \"\\\"Postmates\\\" \",\n \"cc\": \"\",\n \"subject\": \"$100 delivery credit to warm up.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 280\n },\n \"results\": [\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38387,\n \"name\": \"billing\"\n },\n \"user_group\": {\n \"id\": 25307,\n \"name\": \"Office 365 - No Bracket\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T14:51:24.000Z\"\n },\n {\n \"id\": 1987919333,\n \"uuid\": \"09AA6A64-D5A7-420C-BE25-D1173C190FE8.1\",\n \"address\": \"ben.hathaway@mailprotector.com\",\n \"recipients\": [\n \"ben.hathaway@mailprotector.com\"\n ],\n \"sender\": \"return-path@boardjoin.com\",\n \"to\": \"\\\"ben.hathaway@mailprotector.com\\\" \",\n \"from\": \"Research Team \",\n \"cc\": \"\",\n \"subject\": \"Update: New Board Positions Available\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 640\n },\n \"results\": [\n {\n \"id\": 2,\n \"mode\": \"inbound\",\n \"title\": \"ISP Reverse DNS\",\n \"description\": \"The server that relayed the message was part of an ISP network which has a high frequency of spam.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38383,\n \"name\": \"ben.hathaway\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T14:47:03.000Z\"\n },\n {\n \"id\": 1987930248,\n \"uuid\": \"E0E2F5FE-E72D-49FE-9196-EF3679AE1B69.1\",\n \"address\": \"jeremy.nigh@mailprotector.com\",\n \"recipients\": [\n \"jeremy.nigh@mailprotector.com\"\n ],\n \"sender\": \"6063-985-18841-1623-jeremy.nigh=mailprotector.com@mail.sqribplus.bid\",\n \"to\": \"\",\n \"from\": \"\\\"Hearing Aids Special\\\" \",\n \"cc\": \"\",\n \"subject\": \"These Hearing Aids Will Change Your Life!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 13,\n \"mode\": \"inbound\",\n \"title\": \"Spam Domain\",\n \"description\": \"The message contained a link to a spam domain.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38425,\n \"name\": \"jeremy.nigh\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T14:46:52.000Z\"\n },\n {\n \"id\": 1987915073,\n \"uuid\": \"7CC963C2-35E5-4D74-B9A3-B58BE7C65842.1\",\n \"address\": \"ben.hathaway@mailprotector.com\",\n \"recipients\": [\n \"ben.hathaway@mailprotector.com\"\n ],\n \"sender\": \"Kevan.Grice@netapp.com\",\n \"to\": \"\\\"ben.hathaway@mailprotector.com\\\" \",\n \"from\": \"\\\"Grice, Kevan\\\" \",\n \"cc\": \"\",\n \"subject\": \"Re: Missed call Ben\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 0\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 38383,\n \"name\": \"ben.hathaway\"\n },\n \"user_group\": {\n \"id\": 25212,\n \"name\": \"Office 365\"\n },\n \"domain\": {\n \"id\": 1473,\n \"name\": \"mailprotector.com\"\n },\n \"customer\": {\n \"id\": 329,\n \"name\": \"Different Customer Name\"\n },\n \"reseller\": {\n \"id\": 188,\n \"name\": \"Mailprotector Direct (old)\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T14:41:39.000Z\"\n }\n]"}],"_postman_id":"c3deffda-468f-4e8f-9a55-5e939228a1f5"},{"name":"Release Message","id":"9955ba7b-4e91-4bcf-8ba9-4c4cf02c2443","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"Authorization","value":"Bearer {{your_api_key_here}}","type":"text"},{"key":"Content-Type","name":"Content-Type","value":"application/json","type":"text"}],"body":{"mode":"raw","raw":"{\n\t\"include_original_recipients\": 1,\n\t\"recipients\": \"address1@domain.com, address2@domain.com\"\n}"},"url":"emailservice.io/api/v1/messages/{{message_id}}/deliver","description":"

Release a message from the quarantine. The recipients field is optional and can be provided a comma separated string of email addresses to additionally deliver messages to.

Note: Message ID's provided in the payload that do not belong to a user under the customer specified in the URL path will not be released, which will be evident in the request response.

Retrieve a list of customers belonging to a reseller account.

Retrieve a single customer using its ID.

Create a new customer under a reseller.

Edit an existing customer.

Delete a customer account. All domains and users under the customer account will also be removed.

Retrieve, create, update, or delete customer accounts.

\n","_postman_id":"ff879d8b-2a18-429d-844e-ec790b36a709","auth":{"type":"bearer","bearer":{"token":"{{your_api_key_here}}"},"isInherited":true,"source":{"_postman_id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","name":"Mailprotector API","type":"collection"}}},{"name":"Domains","item":[{"name":"User Groups","item":[{"name":"Domain User Groups","id":"4f66c1de-2c17-4c3b-8cbd-f471ac868aa6","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"GET","header":[{"key":"Authorization","value":"Bearer {{your_api_key_here}}","type":"text"}],"url":"emailservice.io/api/v1/domains/{{domain_id}}/user_groups","description":"

Get user groups under a domain.

Create a user group under a domain.

Get the aliases for a domain.

Create a new domain alias.

Retrieve the allow and block rules for a domain. Allow and block rules belonging to the user groups and users under the domain are not returned.

Delete an allow or block rule.

Get the configuration for a domain.

Edit the configuration of a domain.

Get the Email Destinations for a domain.

Create an email destination for a domain. Address can be either a domain or IP address.

Get the email sources for a domain.

Create an email source for a domain.

Get the logs for a domain's users. Refer to the \"Filtering Logs\" section at the top of the page for more information on filtering the results.

Get the messages from the quarantine of users on a domain.

\n","auth":{"type":"bearer","bearer":{"token":"{{your_api_key_here}}"},"isInherited":true,"source":{"_postman_id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","name":"Mailprotector API","type":"collection"}},"urlObject":{"path":["api","v1","domains","{{domain_id}}","messages"],"host":["emailservice.io"],"query":[],"variable":[]}},"response":[{"id":"ac686589-e46a-4567-98b4-914d73c4d6ae","name":"Domain Messages","originalRequest":{"method":"GET","header":[{"key":"Authorization","value":"Bearer {{your_api_key_here}}","type":"text"}],"url":"emailservice.io/api/v1/domains/{{domain_id}}/messages"},"status":"OK","code":200,"_postman_previewlanguage":"json","header":[{"key":"X-Frame-Options","value":"SAMEORIGIN"},{"key":"X-XSS-Protection","value":"1; mode=block"},{"key":"X-Content-Type-Options","value":"nosniff"},{"key":"X-Download-Options","value":"noopen"},{"key":"X-Permitted-Cross-Domain-Policies","value":"none"},{"key":"Referrer-Policy","value":"strict-origin-when-cross-origin"},{"key":"Content-Type","value":"application/json; charset=utf-8"},{"key":"ETag","value":"W/\"15cd9ac1c7ae9f9a5e92e1a24326332e\""},{"key":"Cache-Control","value":"max-age=0, private, must-revalidate"},{"key":"X-Request-Id","value":"c03a01ec-404e-417c-9fbf-be7e4d8a6aa9"},{"key":"X-Runtime","value":"14.264853"},{"key":"Transfer-Encoding","value":"chunked"}],"cookie":[],"responseTime":null,"body":"[\n {\n \"id\": 1989091611,\n \"uuid\": \"7340C1A1-F2B1-4707-8DB3-D04036ACB3ED.1\",\n \"address\": \"brett@mpdemo.net\",\n \"recipients\": [\n \"brett@mpdemo.net\"\n ],\n \"sender\": \"EraseMyBackPain@memoryhacksplus.bid\",\n \"to\": \"\",\n \"from\": \"\\\"Erase My Back Pain\\\" \",\n \"cc\": \"\",\n \"subject\": \"1 Weird Stretch DESTROYS Back Pain & Sciatica\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 940\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1139911,\n \"name\": \"*\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T18:02:14.000Z\"\n },\n {\n \"id\": 1989056539,\n \"uuid\": \"CEF2590F-E55F-4238-A900-1E07B7730FAA.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0100016f8b5eee4b-f21c8cb8-6a52-4102-b053-d7f3f59f5ea7-000000@email.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"News Alert: 'Somebody could have made a mistake,' Trump says about crash of Ukraine jet that U.S. now believes was brought down by Iran\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 270\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 7,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 20 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 50\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T17:34:12.000Z\"\n },\n {\n \"id\": 1989046094,\n \"uuid\": \"8BB711A6-97EA-439D-B749-AB687633A4A1.1\",\n \"address\": \"brett@mpdemo.net\",\n \"recipients\": [\n \"brett@mpdemo.net\"\n ],\n \"sender\": \"SqribbleReviewWITHDemo@sqribbles.bid\",\n \"to\": \"\",\n \"from\": \"\\\"Sqribble Review WITH Demo\\\" \",\n \"cc\": \"\",\n \"subject\": \"WATCH THIS: Create a product in 60 seconds!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 840\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 62,\n \"mode\": \"inbound\",\n \"title\": \"Scam\",\n \"description\": \"Scam patterns - Nigerian and variants + others such as fake eBay account verification requests.\",\n \"weight\": 200\n },\n {\n \"id\": 13,\n \"mode\": \"inbound\",\n \"title\": \"Spam Domain\",\n \"description\": \"The message contained a link to a spam domain.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1139911,\n \"name\": \"*\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T17:26:26.000Z\"\n },\n {\n \"id\": 1989010262,\n \"uuid\": \"9C93945F-8FA5-4BA4-A418-685210585D3A.1\",\n \"address\": \"brett@mpdemo.net\",\n \"recipients\": [\n \"brett@mpdemo.net\"\n ],\n \"sender\": \"KennethFreeman@megared.net.mx\",\n \"to\": \"\\\"Delaney\\\" \",\n \"from\": \"\\\"Brenna\\\" \",\n \"cc\": \"\",\n \"subject\": \"How To Start Make $950 daily Online?\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 3,\n \"mode\": \"inbound\",\n \"title\": \"ISP Helo\",\n \"description\": \"The HELO value used was from an ISP.\",\n \"weight\": 40\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1139911,\n \"name\": \"*\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T16:54:27.000Z\"\n },\n {\n \"id\": 1989007134,\n \"uuid\": \"EA0FB6CE-D797-420C-8418-9AD35BED7FE3.1\",\n \"address\": \"brett@mpdemo.net\",\n \"recipients\": [\n \"brett@mpdemo.net\"\n ],\n \"sender\": \"HotNewOffer:BackyardRevolution@sugarbalances.bid\",\n \"to\": \"\",\n \"from\": \"\\\"Hot New Offer : Backyard Revolution\\\" \",\n \"cc\": \"\",\n \"subject\": \"Orlando Carpenter Saves $975 a Year On Power. [SEE HOW]\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 860\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 13,\n \"mode\": \"inbound\",\n \"title\": \"Spam Domain\",\n \"description\": \"The message contained a link to a spam domain.\",\n \"weight\": 200\n },\n {\n \"id\": 62,\n \"mode\": \"inbound\",\n \"title\": \"Scam\",\n \"description\": \"Scam patterns - Nigerian and variants + others such as fake eBay account verification requests.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1139911,\n \"name\": \"*\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T16:51:01.000Z\"\n },\n {\n \"id\": 1988994661,\n \"uuid\": \"DEE15E84-2B79-4F35-8D22-7720BA1E23C8.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"v-bfkdnep_fjcackpmfo_gcpjfffj_gcpjfffj_a@bounce.e.theatlantic.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Atlantic \",\n \"cc\": \"\",\n \"subject\": \"Essential journalism for the year ahead\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 340\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 173,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T16:39:22.000Z\"\n },\n {\n \"id\": 1988986249,\n \"uuid\": \"A5B8D224-A83F-4C13-A934-8FC6D3D02142.1\",\n \"address\": \"charles@mpdemo.net\",\n \"recipients\": [\n \"charles@mpdemo.net\"\n ],\n \"sender\": \"bounce@tech.channelfutures.com\",\n \"to\": \"charles@mpdemo.net\",\n \"from\": \"\\\"Channel Futures\\\" \",\n \"cc\": \"\",\n \"subject\": \"MSP eBook - Growing & Sustaining Your Business\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 300\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 865693,\n \"name\": \"charles\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T16:32:42.000Z\"\n },\n {\n \"id\": 1988976799,\n \"uuid\": \"BF26C8D5-6D3D-4142-8CAD-4CE8F13ED71F.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0101016f8b1ee466-711e8f2d-9678-4082-b865-8bc83b5b308a-000000@us-west-2.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"The Daily 202: The ghosts of 1979 still haunt U.S. policy toward Iran and shadow Trump’s response to missile strikes\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 40\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T16:24:15.000Z\"\n },\n {\n \"id\": 1988964229,\n \"uuid\": \"60700622-624B-4BCD-B341-E00F86F88DFC.1\",\n \"address\": \"brett@mpdemo.net\",\n \"recipients\": [\n \"brett@mpdemo.net\"\n ],\n \"sender\": \"GregoryWalker@tonywhoa.com\",\n \"to\": \"\\\"Laurel\\\" \",\n \"from\": \"\\\"Jaylee\\\" \",\n \"cc\": \"\",\n \"subject\": \"Viagra Super Force. Oh, yes...\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 640\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1139911,\n \"name\": \"*\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T16:13:59.000Z\"\n },\n {\n \"id\": 1988962470,\n \"uuid\": \"99F454C8-893F-4A3A-81F9-5B236875F4FA.1\",\n \"address\": \"brett@mpdemo.net\",\n \"recipients\": [\n \"brett@mpdemo.net\"\n ],\n \"sender\": \"iShopChargers@virtualpilotgames.bid\",\n \"to\": \"\",\n \"from\": \"\\\"iShop Chargers\\\" \",\n \"cc\": \"\",\n \"subject\": \"The Last Charging Cable You'll Ever Buy. Guaranteed.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 960\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 13,\n \"mode\": \"inbound\",\n \"title\": \"Spam Domain\",\n \"description\": \"The message contained a link to a spam domain.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1139911,\n \"name\": \"*\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T16:13:03.000Z\"\n },\n {\n \"id\": 1988928134,\n \"uuid\": \"115FFC21-5BD8-45F4-A29F-B8EB821E6153.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"bounces+6692116-dc2e-carnegie=mpdemo.net@abmail.mailings.ncaa.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"\\\"NCAA.com\\\" \",\n \"cc\": \"\",\n \"subject\": \"The Journey to Detroit Continues!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 340\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 173,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T15:45:59.000Z\"\n },\n {\n \"id\": 1988920101,\n \"uuid\": \"4C154493-1D75-42F3-939D-804C437BBCE2.2\",\n \"address\": \"brett@mpdemo.net\",\n \"recipients\": [\n \"brett@mpdemo.net\"\n ],\n \"sender\": \"Prostate911@prostate911plus.bid\",\n \"to\": \"\",\n \"from\": \"\\\"Prostate 911\\\" \",\n \"cc\": \"\",\n \"subject\": \"Your Prostate Is the Size Of A Lemon\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 740\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1139911,\n \"name\": \"*\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T15:39:19.000Z\"\n },\n {\n \"id\": 1988909229,\n \"uuid\": \"BB29034B-4132-4DB7-B5FA-06D7C9842164.1\",\n \"address\": \"brett@mpdemo.net\",\n \"recipients\": [\n \"brett@mpdemo.net\"\n ],\n \"sender\": \"JamesKennedy@intelnet.net.gt\",\n \"to\": \"\\\"Morgan\\\" \",\n \"from\": \"\\\"Johanna\\\" \",\n \"cc\": \"\",\n \"subject\": \"Earn $500 daily - its easy!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 58,\n \"mode\": \"inbound\",\n \"title\": \"Get Rich\",\n \"description\": \"Business opportunities, work at home offers, mlm, get rich on eBay, etc.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1139911,\n \"name\": \"*\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T15:28:25.000Z\"\n },\n {\n \"id\": 1988872203,\n \"uuid\": \"4D05BB49-4FBE-4F77-8A07-65D850560B5B.1\",\n \"address\": \"charles@mpdemo.net\",\n \"recipients\": [\n \"charles@mpdemo.net\"\n ],\n \"sender\": \"bounces+9360667-c4fa-charles=mpdemo.net@em8737.fastcompany.com\",\n \"to\": \"charles@mpdemo.net\",\n \"from\": \"Fast Company Compass \",\n \"cc\": \"\",\n \"subject\": \"7 books to help you be a better leader in 2020\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 200\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 865693,\n \"name\": \"charles\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T14:49:22.000Z\"\n },\n {\n \"id\": 1988872469,\n \"uuid\": \"7575CF14-8901-4173-8505-2AFBA01A5488.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"bounces+9360667-be88-carnegie=mpdemo.net@em8737.fastcompany.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"Fast Company Compass \",\n \"cc\": \"\",\n \"subject\": \"7 books to help you be a better leader in 2020\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 200\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T14:49:22.000Z\"\n },\n {\n \"id\": 1988825679,\n \"uuid\": \"06F1C5B0-ED91-4D44-84BE-782E1FBEC39F.1\",\n \"address\": \"david@mpdemo.net\",\n \"recipients\": [\n \"david@mpdemo.net\"\n ],\n \"sender\": \"mail.jvwlcewiysdqkeyypyfob@edt.computerworld.com\",\n \"to\": \"david@mpdemo.net\",\n \"from\": \"Computerworld Online Resources \",\n \"cc\": \"\",\n \"subject\": \"Why you should be using low-code for app dev and how to get started.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 9635,\n \"name\": \"david\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T14:02:06.000Z\"\n },\n {\n \"id\": 1988804164,\n \"uuid\": \"4E45D1FC-215B-4A57-9330-BE624EE92497.1\",\n \"address\": \"brett@mpdemo.net\",\n \"recipients\": [\n \"brett@mpdemo.net\"\n ],\n \"sender\": \"CharlesBailey@fiberlink.net.br\",\n \"to\": \"\\\"Patricia\\\" \",\n \"from\": \"\\\"Kaitlyn\\\" \",\n \"cc\": \"\",\n \"subject\": \"Viagra Brand inspires! Strengther your love power now!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 3,\n \"mode\": \"inbound\",\n \"title\": \"ISP Helo\",\n \"description\": \"The HELO value used was from an ISP.\",\n \"weight\": 40\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1139911,\n \"name\": \"*\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T13:40:23.000Z\"\n },\n {\n \"id\": 1988799167,\n \"uuid\": \"CD8C9762-2333-434E-BA52-A1F7382A67B4.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"bounce-alkppymmlhphndmtpypnmhtshtplyhnlhpvvhcy@srnemail.com\",\n \"to\": \"\\\"192.88.135.9 SRNNews.com Newsletter Popup\\\" \",\n \"from\": \"Bill Bennett's American Patriot's Daily Almanac\\n \",\n \"cc\": \"\",\n \"subject\": \"Thomas Paine Publishes Common Sense\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 540\n },\n \"results\": [\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T13:36:29.000Z\"\n },\n {\n \"id\": 1988791616,\n \"uuid\": \"BB1A2080-29BC-4CAD-9DBD-F0502584362A.1\",\n \"address\": \"brett@mpdemo.net\",\n \"recipients\": [\n \"brett@mpdemo.net\"\n ],\n \"sender\": \"AdamMorgan@tinsethcpa.com\",\n \"to\": \"\\\"Everlee\\\" \",\n \"from\": \"\\\"Regina\\\" \",\n \"cc\": \"\",\n \"subject\": \"Cialis Soft Tabs - the best friend of man. Try it, you like it!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 980\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 25,\n \"mode\": \"inbound\",\n \"title\": \"Policy Block List\",\n \"description\": \"This message came form an IP that is on the Policy Block List. The PBL is a DNSBL database of end-user IP address ranges which should not be delivering unauthenticated SMTP email to any Internet mail server except those provided for specifically by an ISP for that customer's use.\",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 173,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1139911,\n \"name\": \"*\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T13:30:29.000Z\"\n },\n {\n \"id\": 1988758174,\n \"uuid\": \"870BED74-D173-4A12-9D0E-35111C68ED37.1\",\n \"address\": \"porn@mpdemo.net\",\n \"recipients\": [\n \"porn@mpdemo.net\"\n ],\n \"sender\": \"CarlMoore@tinamcmahancpa.com\",\n \"to\": \"\\\"Ashlynn\\\" \",\n \"from\": \"\\\"Leanna\\\" \",\n \"cc\": \"\",\n \"subject\": \"can you be free tomorrow\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 62,\n \"mode\": \"inbound\",\n \"title\": \"Scam\",\n \"description\": \"Scam patterns - Nigerian and variants + others such as fake eBay account verification requests.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1185169,\n \"name\": \"porn\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T12:59:18.000Z\"\n },\n {\n \"id\": 1988752392,\n \"uuid\": \"7E0C11C6-287E-4EF2-A117-CF99984ECE0E.1\",\n \"address\": \"brett@mpdemo.net\",\n \"recipients\": [\n \"brett@mpdemo.net\"\n ],\n \"sender\": \"mifjinformative@valleylanesmidland.com\",\n \"to\": \"Brett \",\n \"from\": \"Celestine B. \",\n \"cc\": \"\",\n \"subject\": \"Hi, my name is Anna, I am an engineer.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 33,\n \"mode\": \"inbound\",\n \"title\": \"Junk\",\n \"description\": \"This message contained content matching our junk email heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 17,\n \"mode\": \"inbound\",\n \"title\": \"Abused Legit Spam Domain\",\n \"description\": \"The message contained a link to an abused domain reported with abused legit spam.\",\n \"weight\": 200\n },\n {\n \"id\": 61,\n \"mode\": \"inbound\",\n \"title\": \"Porn/Adult\",\n \"description\": \"Pornography, Dating, 'organ' augmentation.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1139911,\n \"name\": \"*\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T12:54:07.000Z\"\n },\n {\n \"id\": 1988712980,\n \"uuid\": \"3E748884-0EB9-404F-BE85-64877C9F558B.1\",\n \"address\": \"charles@mpdemo.net\",\n \"recipients\": [\n \"charles@mpdemo.net\"\n ],\n \"sender\": \"bounce-vhfvmfvykjgnkyyyvknfhjmhjfhrrnbfctkbbj@townhallmail.com\",\n \"to\": \"\\\"Friend\\\" \",\n \"from\": \"Jonathan Garthwaite \",\n \"cc\": \"\",\n \"subject\": \"Townhall Daily - Jan 09 - Kurt Schlichter,Victor Davis Hanson,Derek Hunter,John Stossel,Todd Starnes and More\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 340\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 55,\n \"mode\": \"inbound\",\n \"title\": \"Ungrouped\",\n \"description\": \"Rules that have not yet been categorized or that don't fit in a category.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 865693,\n \"name\": \"charles\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T12:12:55.000Z\"\n },\n {\n \"id\": 1988704856,\n \"uuid\": \"96997535-BE66-4015-8254-4F5AFDAC1FF5.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"NatIvesWSJ-xurtkiy1yhtjkjkulu1d@cmail19.com\",\n \"to\": \"\\\"carnegie@mpdemo.net\\\" \",\n \"from\": \"\\\"Nat Ives, WSJ\\\" \",\n \"cc\": \"\",\n \"subject\": \"CMO Today: Teen Vogue’s Facebook Ad\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 340\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T12:03:31.000Z\"\n },\n {\n \"id\": 1988672581,\n \"uuid\": \"1BDE0031-2FA5-490B-AE18-2E571C4961D6.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0101016f8a155aca-1176c4c5-d477-4cb9-a806-e990165274ba-000000@us-west-2.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"News Alert: Trump to move to exempt some major pipeline, drilling and other projects from environmental review\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T11:34:12.000Z\"\n },\n {\n \"id\": 1988669207,\n \"uuid\": \"B09DD187-79F8-41B9-ABF4-EFA3F78759FB.1\",\n \"address\": \"codye.test@mpdemo.net\",\n \"recipients\": [\n \"codye.test@mpdemo.net\"\n ],\n \"sender\": \"delivery_20200109063141.19112781.3470502@bounce.theskimm.com\",\n \"to\": \"codye.test@mpdemo.net\",\n \"from\": \"theSkimm \",\n \"cc\": \"\",\n \"subject\": \"Daily Skimm: And we'll never be royals\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 200\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1187359,\n \"name\": \"codye.test\"\n },\n \"user_group\": null,\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": null,\n \"provider\": null,\n \"message_date\": \"2020-01-09T11:31:41.000Z\"\n },\n {\n \"id\": 1988656267,\n \"uuid\": \"32E5D4DC-C018-4EFE-ABA9-C071CEF4B591.1\",\n \"address\": \"brett@mpdemo.net\",\n \"recipients\": [\n \"brett@mpdemo.net\"\n ],\n \"sender\": \"JerrySmith@opensvit.ua\",\n \"to\": \"\\\"Laila\\\" \",\n \"from\": \"\\\"Itzel\\\" \",\n \"cc\": \"\",\n \"subject\": \"Wild adventures all night long. Kamagra Oral Jelly.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 3,\n \"mode\": \"inbound\",\n \"title\": \"ISP Helo\",\n \"description\": \"The HELO value used was from an ISP.\",\n \"weight\": 40\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1139911,\n \"name\": \"*\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T11:18:52.000Z\"\n },\n {\n \"id\": 1988641078,\n \"uuid\": \"5229D5CE-F9EA-4D30-A48C-6D438AD1F452.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0101016f89f9d206-4a814a3d-9ab8-4645-9a46-6426d7c1bff8-000000@us-west-2.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"News Alert: Facebook won’t limit how politicians target ads or lie to voters under new rules\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T11:04:08.000Z\"\n },\n {\n \"id\": 1988639171,\n \"uuid\": \"9ECF91AB-F033-403C-814D-69487FE19D5D.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"bounce-63_HTML-328761131-3155861-7219217-238@bounce.aaas.sciencepubs.org\",\n \"to\": \"\",\n \"from\": \"\\\"News from Science\\\" \",\n \"cc\": \"\",\n \"subject\": \"How many of our comets come from alien solar systems?\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 360\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T11:01:45.000Z\"\n },\n {\n \"id\": 1988632253,\n \"uuid\": \"E12D3F6D-9B3F-4791-A97C-EC6B8836D965.1\",\n \"address\": \"brett@mpdemo.net\",\n \"recipients\": [\n \"brett@mpdemo.net\"\n ],\n \"sender\": \"BobbyPerkins@tomwalshcpa.com\",\n \"to\": \"\\\"Veronique\\\" \",\n \"from\": \"\\\"Barbara\\\" \",\n \"cc\": \"\",\n \"subject\": \"Cialis Professional. More than effectual medication!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 960\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1139911,\n \"name\": \"*\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T10:51:52.000Z\"\n },\n {\n \"id\": 1988605152,\n \"uuid\": \"6BA215C4-F0AB-4587-A337-265D175BDF24.1\",\n \"address\": \"brett@mpdemo.net\",\n \"recipients\": [\n \"brett@mpdemo.net\"\n ],\n \"sender\": \"ruifcontrol@woodley.org\",\n \"to\": \"Brett \",\n \"from\": \"Gilbertina I. Newsham \",\n \"cc\": \"\",\n \"subject\": \"I am an interesting and not boring girl\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 25,\n \"mode\": \"inbound\",\n \"title\": \"Policy Block List\",\n \"description\": \"This message came form an IP that is on the Policy Block List. The PBL is a DNSBL database of end-user IP address ranges which should not be delivering unauthenticated SMTP email to any Internet mail server except those provided for specifically by an ISP for that customer's use.\",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 36,\n \"mode\": \"inbound\",\n \"title\": \"Junk URL\",\n \"description\": \"This message contained content matching our junk URL heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 17,\n \"mode\": \"inbound\",\n \"title\": \"Abused Legit Spam Domain\",\n \"description\": \"The message contained a link to an abused domain reported with abused legit spam.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1139911,\n \"name\": \"*\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T10:10:38.000Z\"\n },\n {\n \"id\": 1988604236,\n \"uuid\": \"D318C6EC-E0E6-405F-AC22-F6986A771C94.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"bounce-dpsmmrttjcmcfhtdmrcftcdscmrgggfjcmllcbr@srnemail.com\",\n \"to\": \"\\\"192.88.135.9 SRNNews.com Newsletter Popup\\\" \",\n \"from\": \"Daybreak Insider \",\n \"cc\": \"\",\n \"subject\": \"States Seek to Stop Boys from Competing as Girls\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 540\n },\n \"results\": [\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T10:09:05.000Z\"\n },\n {\n \"id\": 1988597277,\n \"uuid\": \"CB6ED0DC-351B-4DB3-8DD2-25E0E0A3A8A8.1\",\n \"address\": \"brett@mpdemo.net\",\n \"recipients\": [\n \"brett@mpdemo.net\"\n ],\n \"sender\": \"AlbertCooper@tihcpa.com\",\n \"to\": \"\\\"Everly\\\" \",\n \"from\": \"\\\"Angie\\\" \",\n \"cc\": \"\",\n \"subject\": \"Get pure enjoyment. Use Cialis.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1139911,\n \"name\": \"*\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T09:54:56.000Z\"\n },\n {\n \"id\": 1988579308,\n \"uuid\": \"6CA0D516-BB56-487C-9090-2F3BEBDE5574.1\",\n \"address\": \"ben@mpdemo.net\",\n \"recipients\": [\n \"ben@mpdemo.net\"\n ],\n \"sender\": \"bounces+20995-d3ee-ben=mpdemo.net@em954.selling-greenville.com\",\n \"to\": \"ben@mpdemo.net\",\n \"from\": \"Marcus Wondracek \",\n \"cc\": \"\",\n \"subject\": \"433 Hilburn Way, Simpsonville, SC\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 200\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 9634,\n \"name\": \"ben\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T09:16:55.000Z\"\n },\n {\n \"id\": 1988576032,\n \"uuid\": \"C09A4282-BAAB-41D8-9530-7FFB04A47B6E.1\",\n \"address\": \"porn@mpdemo.net\",\n \"recipients\": [\n \"porn@mpdemo.net\"\n ],\n \"sender\": \"WillieMoore@totsona.com\",\n \"to\": \"\\\"Angie\\\" \",\n \"from\": \"\\\"Yareli\\\" \",\n \"cc\": \"\",\n \"subject\": \"It's incredibly confusing and drives me on simultaneously. Watch until I removed it from the access.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 980\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 173,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 62,\n \"mode\": \"inbound\",\n \"title\": \"Scam\",\n \"description\": \"Scam patterns - Nigerian and variants + others such as fake eBay account verification requests.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1185169,\n \"name\": \"porn\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T09:09:48.000Z\"\n },\n {\n \"id\": 1988570094,\n \"uuid\": \"E7F1C478-3164-453D-9C34-CEC5DF41CF9D.1\",\n \"address\": \"brett@mpdemo.net\",\n \"recipients\": [\n \"brett@mpdemo.net\"\n ],\n \"sender\": \"tddewdrop@aero-data.com\",\n \"to\": \"Brett \",\n \"from\": \"Mrs. Carmita Preast \",\n \"cc\": \"\",\n \"subject\": \"Let’s make our life beautiful and adore it together.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n },\n {\n \"id\": 3,\n \"mode\": \"inbound\",\n \"title\": \"ISP Helo\",\n \"description\": \"The HELO value used was from an ISP.\",\n \"weight\": 40\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 36,\n \"mode\": \"inbound\",\n \"title\": \"Junk URL\",\n \"description\": \"This message contained content matching our junk URL heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 13,\n \"mode\": \"inbound\",\n \"title\": \"Spam Domain\",\n \"description\": \"The message contained a link to a spam domain.\",\n \"weight\": 200\n },\n {\n \"id\": 61,\n \"mode\": \"inbound\",\n \"title\": \"Porn/Adult\",\n \"description\": \"Pornography, Dating, 'organ' augmentation.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1139911,\n \"name\": \"*\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T08:59:04.000Z\"\n },\n {\n \"id\": 1988469746,\n \"uuid\": \"8437E6DB-EC79-4272-ACE7-049B2A5D9E1C.1\",\n \"address\": \"brett@mpdemo.net\",\n \"recipients\": [\n \"brett@mpdemo.net\"\n ],\n \"sender\": \"PeterBrown@toftnesscpa.com\",\n \"to\": \"\\\"Madison\\\" \",\n \"from\": \"\\\"Jennifer\\\" \",\n \"cc\": \"\",\n \"subject\": \"It's incredibly confusing and drives me on simultaneously. Watch until I removed it from the access.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1139911,\n \"name\": \"*\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T04:15:07.000Z\"\n },\n {\n \"id\": 1988411187,\n \"uuid\": \"DA4F5B9B-5760-410F-9564-7AA41951C612.1\",\n \"address\": \"porn@mpdemo.net\",\n \"recipients\": [\n \"porn@mpdemo.net\"\n ],\n \"sender\": \"HenryJohnson@timoneillcpa.com\",\n \"to\": \"\\\"Julia\\\" \",\n \"from\": \"\\\"Dahlia\\\" \",\n \"cc\": \"\",\n \"subject\": \"You can make it all! Levitra Soft.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1185169,\n \"name\": \"porn\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T01:31:24.000Z\"\n },\n {\n \"id\": 1988405709,\n \"uuid\": \"CBA20042-CE3B-4381-87C0-C1D01D08D01E.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"v-bfkcnog_fjcackpmfo_gcpinabi_gcpinabi_a@bounce.e.theatlantic.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Atlantic \",\n \"cc\": \"\",\n \"subject\": \"Americans still aren't rallying behind Trump on Iran\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 360\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T01:16:59.000Z\"\n },\n {\n \"id\": 1988381908,\n \"uuid\": \"D8AE728D-33BD-407E-A842-04A59828F5AB.1\",\n \"address\": \"porn@mpdemo.net\",\n \"recipients\": [\n \"porn@mpdemo.net\"\n ],\n \"sender\": \"PaulRobinson@triolan.net\",\n \"to\": \"\\\"Grace\\\" \",\n \"from\": \"\\\"Tiffany\\\" \",\n \"cc\": \"\",\n \"subject\": \"Get your fantastic pleasures. Buy Levitra.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 63,\n \"mode\": \"inbound\",\n \"title\": \"Snake Oil\",\n \"description\": \"Online pharmacies, hgh, viagra, weight loss, no prescription needed.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1185169,\n \"name\": \"porn\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T00:21:50.000Z\"\n },\n {\n \"id\": 1988377354,\n \"uuid\": \"02C31EA4-A692-4A26-AC55-68AB73927FCB.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"v-bfkcnip_fjcackpmfo_gcpillab_gcpillab_a@bounce.e.theatlantic.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Atlantic Politics \",\n \"cc\": \"\",\n \"subject\": \"Will Trump take the high road?\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 200\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-09T00:11:48.000Z\"\n },\n {\n \"id\": 1988313403,\n \"uuid\": \"C5AA67BF-07E6-47EE-B391-99F8B1050E27.1\",\n \"address\": \"porn@mpdemo.net\",\n \"recipients\": [\n \"porn@mpdemo.net\"\n ],\n \"sender\": \"MikeSmith@vnstr.net\",\n \"to\": \"\\\"Laura\\\" \",\n \"from\": \"\\\"Olivia\\\" \",\n \"cc\": \"\",\n \"subject\": \"There's a lot of bright stripes in life with Viagra Super Force.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 24,\n \"mode\": \"inbound\",\n \"title\": \"Exploits Block List\",\n \"description\": \"This message came from an IP that is on the Exploits Block List. The XBL is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits.\",\n \"weight\": 200\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 23,\n \"mode\": \"inbound\",\n \"title\": \"Spamhaus Block List\",\n \"description\": \"This message came from an IP that is on the Spamhaus Block List.\",\n \"weight\": 200\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1185169,\n \"name\": \"porn\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T22:03:10.000Z\"\n },\n {\n \"id\": 1988295023,\n \"uuid\": \"9733A427-1D0C-4340-8481-A83E7A3BD8F1.1\",\n \"address\": \"porn@mpdemo.net\",\n \"recipients\": [\n \"porn@mpdemo.net\"\n ],\n \"sender\": \"HenryMorgan@tommyscateringpa.com\",\n \"to\": \"\\\"Zaria\\\" \",\n \"from\": \"\\\"Juniper\\\" \",\n \"cc\": \"\",\n \"subject\": \"Kamagra Brand Oral Jelly - best ED medication. Cheaper now!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1185169,\n \"name\": \"porn\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T21:29:33.000Z\"\n },\n {\n \"id\": 1988285415,\n \"uuid\": \"B9C468A0-C89B-40C3-9BBA-F613C22C65BE.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0101016f87011e46-cc24048e-f310-44c7-9893-e4974f6256f5-000000@us-west-2.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"News Alert: Pelosi says House will vote Thursday on measure to limit Trump's military actions regarding Iran\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T21:13:15.000Z\"\n },\n {\n \"id\": 1988281473,\n \"uuid\": \"BA8095BA-95A3-4542-8F1D-A63BCA9C17DE.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"WSJcomEditors-xurtkll1jlddjdhka1d@cmail20.com\",\n \"to\": \"\\\"carnegie@mpdemo.net\\\" \",\n \"from\": \"\\\"WSJ.com Editors\\\" \",\n \"cc\": \"\",\n \"subject\": \"Opinion: Best of the Web - A Reagan Revival in Trump’s Foreign Policy?\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T21:07:18.000Z\"\n },\n {\n \"id\": 1988280486,\n \"uuid\": \"48BDDBF5-94DC-4CA9-8110-A6070781307C.1\",\n \"address\": \"brett@mpdemo.net\",\n \"recipients\": [\n \"brett@mpdemo.net\"\n ],\n \"sender\": \"AlanScott@ufanet.ru\",\n \"to\": \"\\\"Sunny\\\" \",\n \"from\": \"\\\"Avah\\\" \",\n \"cc\": \"\",\n \"subject\": \"can we schedule an appointment for the weekend?\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1139911,\n \"name\": \"*\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T21:06:10.000Z\"\n },\n {\n \"id\": 1988279850,\n \"uuid\": \"DEC2CE14-F1CA-4355-9575-4CB6C42636C4.1\",\n \"address\": \"charles@mpdemo.net\",\n \"recipients\": [\n \"charles@mpdemo.net\"\n ],\n \"sender\": \"bounceback@e.media.bloomberg.com\",\n \"to\": \"charles@mpdemo.net\",\n \"from\": \"\\\"Bloomberg\\\" \",\n \"cc\": \"\",\n \"subject\": \"New Year, new deal: Subscribe for just $1.99\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 300\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 865693,\n \"name\": \"charles\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T21:05:12.000Z\"\n },\n {\n \"id\": 1988275241,\n \"uuid\": \"8BE01A59-DC69-47F5-B46C-DFA2E7F1E18A.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"bounce-mc.us2_6180498.1359255-292075e50a@mail1.davenetics.com\",\n \"to\": \"\",\n \"from\": \"=?utf-8?Q?NextDraft?= \",\n \"cc\": \"\",\n \"subject\": \"Flame War\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 200\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T20:57:31.000Z\"\n },\n {\n \"id\": 1988264493,\n \"uuid\": \"55A73FDF-B408-4582-9546-7622C34BBD60.1\",\n \"address\": \"porn@mpdemo.net\",\n \"recipients\": [\n \"porn@mpdemo.net\"\n ],\n \"sender\": \"BrianPeterson@toscanapa.com\",\n \"to\": \"\\\"Isla\\\" \",\n \"from\": \"\\\"Addison\\\" \",\n \"cc\": \"\",\n \"subject\": \"remember the weekend?\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 1000\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 11,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send but is in transition\\t.\",\n \"weight\": 100\n },\n {\n \"id\": 173,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 170,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 34,\n \"mode\": \"inbound\",\n \"title\": \"Spam\",\n \"description\": \"This message contained content matching our spam heuristics.\",\n \"weight\": 200\n },\n {\n \"id\": 70,\n \"mode\": \"inbound\",\n \"title\": \"Truncate\",\n \"description\": \"The statistics indicate that it is virtually certain any messages coming from this IP are spam or malware.\",\n \"weight\": 300\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 1185169,\n \"name\": \"porn\"\n },\n \"user_group\": {\n \"id\": 20350,\n \"name\": \"CloudFilter\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T20:43:19.000Z\"\n },\n {\n \"id\": 1988250964,\n \"uuid\": \"C5E16916-10E3-44A5-9274-A38ECB8DA2E8.1\",\n \"address\": \"charles@mpdemo.net\",\n \"recipients\": [\n \"charles@mpdemo.net\"\n ],\n \"sender\": \"bounce-dpgpstpjrdmfrjjjghftcdsctrcpjfktbnrkkd@townhallmail.com\",\n \"to\": \"\\\"Friend\\\" \",\n \"from\": \"Jonathan Garthwaite \",\n \"cc\": \"\",\n \"subject\": \"Trump Declares Victory Over Iran\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 300\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 55,\n \"mode\": \"inbound\",\n \"title\": \"Ungrouped\",\n \"description\": \"Rules that have not yet been categorized or that don't fit in a category.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 865693,\n \"name\": \"charles\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T20:22:26.000Z\"\n },\n {\n \"id\": 1988184786,\n \"uuid\": \"4DC0CC28-78F7-4C6A-9907-E100018B97D0.1\",\n \"address\": \"charles@mpdemo.net\",\n \"recipients\": [\n \"charles@mpdemo.net\"\n ],\n \"sender\": \"bounce@tech.channelfutures.com\",\n \"to\": \"charles@mpdemo.net\",\n \"from\": \"\\\"Tara Pollak\\\" \",\n \"cc\": \"\",\n \"subject\": \"Your 2020 Security Checklist\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 300\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 865693,\n \"name\": \"charles\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"Different User Group Name\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-08T19:01:03.000Z\"\n }\n]"}],"_postman_id":"a59feed9-5b4d-49f0-af20-e4e10746d783"},{"name":"Release Message","id":"0c4d9f61-3fb8-4da1-bfc7-5fb4b7eb3923","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"Authorization","value":"Bearer {{your_api_key_here}}","type":"text"},{"key":"Content-Type","name":"Content-Type","value":"application/json","type":"text"}],"body":{"mode":"raw","raw":"{\n\t\"include_original_recipients\": 1,\n\t\"recipients\": \"address1@domain.com, address2@domain.com\"\n}"},"url":"emailservice.io/api/v1/messages/{{message_id}}/deliver","description":"

Release a message from the quarantine. The recipients field is optional and can be provided a comma separated string of email addresses to additionally deliver messages to.

Note: Message ID's provided in the payload that do not belong to a user under the domain specified in the URL path will not be released, which will be evident in the request response.

Get a user sync schedule for a domain.

Update a domain's user sync schedule. The interval is used to calculate the minutes between user syncs.

Get a list of user sync filters belonging to a particular user sync.

Get a user sync filter by its ID

Create a user sync filter.

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Comparison Type ID	Description
1	Equals
2	Does not equal
3	Greater than
4	Less Than
5	Contains
6	Does not contain
7	Matches
8	Does not match

Remove a user sync filter from a user sync.

Get a list of user syncs belonging to a domain.

Get a single user sync using its ID.

Create a new user sync for a domain. When creating a user sync, the user sync's source should be supplied. New user syncs are disabled by default unless enabled: \"true\" is passed in the payload.

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Source Type	Description
UserSync::LdapSource	Ldap source.
UserSync::GoogleSource	GSuite source. Not available through the API. Must be provisioned through the web console.
UserSync::MicrosoftGraphSource	Microsoft Office365 source. Not available through the API. Must be provisioned through the web console.

","auth":{"type":"bearer","bearer":{"token":"{{your_api_key_here}}"},"isInherited":true,"source":{"_postman_id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","name":"Mailprotector API","type":"collection"}},"urlObject":{"path":["api","v1","domains","{{domain_id}}","user_syncs"],"host":["emailservice.io"],"query":[],"variable":[]}},"response":[{"id":"f8db0707-8f02-4674-b8bf-3161c2af4f48","name":"Create User Sync","originalRequest":{"method":"POST","header":[{"key":"Authorization","value":"Bearer {{your_api_key_here}}","type":"text"},{"key":"Content-Type","name":"Content-Type","value":"application/json","type":"text"}],"body":{"mode":"raw","raw":"{\n\t\"destination_user_group_id\": 109,\n\t\"source_type\": \"UserSync::LdapSource\",\n\t\"enabled\": \"true\",\n\t\"source\": {\n\t\t\"host\": \"host.com\",\n\t\t\"port\": \"389\",\n\t\t\"use_ssl\": \"false\",\n\t\t\"username\": \"username\",\n\t\t\"password\": \"password\",\n\t\t\"search_base\": \"dc=MAILPROTECTOR,dc=local, OU=OrgUnit\"\n\t}\n}","options":{"raw":{"language":"json"}}},"url":"emailservice.io/api/v1/domains/{{domain_id}}/user_syncs"},"status":"Created","code":201,"_postman_previewlanguage":"json","header":[{"key":"X-Frame-Options","value":"SAMEORIGIN"},{"key":"X-XSS-Protection","value":"1; mode=block"},{"key":"X-Content-Type-Options","value":"nosniff"},{"key":"X-Download-Options","value":"noopen"},{"key":"X-Permitted-Cross-Domain-Policies","value":"none"},{"key":"Referrer-Policy","value":"strict-origin-when-cross-origin"},{"key":"Location","value":"/api/v1/user_syncs/3279"},{"key":"Content-Type","value":"application/json; charset=utf-8"},{"key":"ETag","value":"W/\"f52a7209bdffd2a64232ba4465f36f19\""},{"key":"Cache-Control","value":"max-age=0, private, must-revalidate"},{"key":"X-Request-Id","value":"21526cc1-b52a-4f68-b008-a0cd642640c3"},{"key":"X-Runtime","value":"0.732769"},{"key":"Transfer-Encoding","value":"chunked"}],"cookie":[],"responseTime":null,"body":"{\n \"id\": 3279,\n \"name\": \"Active Directory\",\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"destination_user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"source_type\": \"UserSync::LdapSource\",\n \"source\": {\n \"id\": 1156,\n \"host\": \"host.com\",\n \"port\": \"389\",\n \"usersname\": \"username\",\n \"password\": \"password\",\n \"search_base\": \"dc=MAILPROTECTOR,dc=local, OU=OrgUnit\",\n \"use_ssl\": false\n },\n \"filters\": [],\n \"alive\": true,\n \"priority\": null,\n \"enabled\": true\n}"}],"_postman_id":"7e4fe0a5-98da-43cd-afca-8b2c8022e946"},{"name":"Update User Sync","id":"45c3ecc5-8f48-4886-9476-1a638eeee4bb","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"PUT","header":[{"key":"Authorization","value":"Bearer {{your_api_key_here}}","type":"text"},{"key":"Content-Type","name":"Content-Type","value":"application/json","type":"text"}],"body":{"mode":"raw","raw":"{\n\t\"destination_user_group_id\": 19543,\n\t\"source_type\": \"UserSync::LdapSource\",\n\t\"enabled\": true,\n\t\"source\": {\n\t\t\"host\": \"new-host.com\",\n\t\t\"port\": \"389\",\n\t\t\"use_ssl\": \"false\",\n\t\t\"username\": \"username\",\n\t\t\"password\": \"password\",\n\t\t\"search_base\": \"dc=MAILPROTECTOR,dc=local, OU=OrgUnit\"\n\t}\n}"},"url":"emailservice.io/api/v1/user_syncs/{{user_sync_id}}","description":"

Update an existing user sync. Accepts the same parameters as creating a user sync.

Delete a user sync.

Get information about many domains at once.

Get information about a single domain.

Create a new domain under a customer account. The new domain will automatically be put in a \"pending\" state which will require verification before mail is filtered for that domain.

Create a new domain alias for a domain.

Move a domain from one customer to another within the same reseller.

Update a domain.

Delete a domain.

Get, create, update, and delete domains from Mailprotector.

\n","_postman_id":"66e09bc3-cf36-47f3-9bc6-be71cdf8e607","auth":{"type":"bearer","bearer":{"token":"{{your_api_key_here}}"},"isInherited":true,"source":{"_postman_id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","name":"Mailprotector API","type":"collection"}}},{"name":"User Groups","item":[{"name":"Users","item":[{"name":"User Group Users","id":"774ebd09-64ba-4b94-9a82-cc2df0ff5e87","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"GET","header":[{"key":"Authorization","value":"Bearer {{your_api_key_here}}","type":"text"}],"url":"emailservice.io/api/v1/user_groups/{{user_group_id}}/users","description":"

Get users belonging to a user group.

Create a single user under a user group.

Create multiple users under a user group at once.

Get the configuration for a user group.

Edit the configuration for a user group. Fields not supplied will not be overwritten.

Get the email destinations belonging to a user group.

Create a new email destination for a user group.

Get all email sources for a user group.

Create a new email source for a user group

Get the active services for a user group.

Provision new services or remove active services by updating the services for a user group.

Services are separated into two categories: \"Hosting\" and \"Addons\". Any number of \"addons\" can be supplied, but only one \"hosting\" option may exist. See the various services below for optional parameters in the request.

The full product names, as listed in the \"product\" column of the tables below, can be passed to the API to provision the new services. Any services that are not included in the body of the request will be deactivated if they were activated previously.

Hosting

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Product	Description
Other	You are supplying your own mail server.
GSuite	Same as \"other\", but implies the mail server is hosted on GSuite.
Office365	Same as \"other\", but implies the mail server is hosted on Office 365.
CloudMail	Mailprotector's basic mail hosting option. Users can manage email via secure webmail console or email client via (POP3 or IMAP syncing).
Exchange	Mailprotector's hosted Exchange 2016.

Addons

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Product	Description
SafeSend	Enhanced Outbound Protection
Bracket	Encrypted Email
SecureStore	Email Archiving
XtraMail	Email Continuity

Note:

CloudFilter cannot be added/removed as a service as it is mandatory for all user groups. If supplied as an addon in the request, it will be ignored.
SafeSend must be provisioned with Bracket. If it is not supplied in the request, it will be automatically provisioned when Bracket is activated.
The API will remove any services that are not listed in the body of the request. Ex: A user group with SafeSend enabled will have SafeSend deactivated if only \"securestore\" is provided as an addon.
Hosting can only be changed if the user group does not have any currently active users. The recommended way to provision hosting for existing users is to move them from one user group to another which has the desired hosting option activated.

Get the messages from the quarantines of users under a user group.

\n","auth":{"type":"bearer","bearer":{"token":"{{your_api_key_here}}"},"isInherited":true,"source":{"_postman_id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","name":"Mailprotector API","type":"collection"}},"urlObject":{"path":["api","v1","user_groups","{{user_group_id}}","messages"],"host":["emailservice.io"],"query":[],"variable":[]}},"response":[{"id":"85792705-9bda-4d90-b630-e2637fd45166","name":"User Group Messages","originalRequest":{"method":"GET","header":[{"key":"Authorization","value":"Bearer {{your_api_key_here}}","type":"text"}],"url":"emailservice.io/api/v1/user_groups/{{user_group_id}}/messages"},"status":"OK","code":200,"_postman_previewlanguage":"json","header":[{"key":"X-Frame-Options","value":"SAMEORIGIN"},{"key":"X-XSS-Protection","value":"1; mode=block"},{"key":"X-Content-Type-Options","value":"nosniff"},{"key":"X-Download-Options","value":"noopen"},{"key":"X-Permitted-Cross-Domain-Policies","value":"none"},{"key":"Referrer-Policy","value":"strict-origin-when-cross-origin"},{"key":"Content-Type","value":"application/json; charset=utf-8"},{"key":"ETag","value":"W/\"0c7c1ff7eec2b031a5c66b8ed7f3b6fa\""},{"key":"Cache-Control","value":"max-age=0, private, must-revalidate"},{"key":"X-Request-Id","value":"022581a7-758e-4f2e-8818-e1712f1ef988"},{"key":"X-Runtime","value":"13.646537"},{"key":"Transfer-Encoding","value":"chunked"}],"cookie":[],"responseTime":null,"body":"[\n {\n \"id\": 1994268904,\n \"uuid\": \"1B93DF58-63E7-4CD0-BB80-89A70F7A3E50.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0101016fa9f24269-7833c710-d055-49ac-b0b2-2ab4ffbcf625-000000@us-west-2.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"Environment Alert: The past decade was the hottest ever recorded, driven by spiking temperatures in the past five years\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T16:03:43.000Z\"\n },\n {\n \"id\": 1994268473,\n \"uuid\": \"04A72C3F-B930-4C59-8588-4B49F62471D6.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"bounce-lqddwmmjzrknmdnrmjwhmzdzzzrfkqgqkhp@email.fastcompany.com\",\n \"to\": \"\\\"\\\" \",\n \"from\": \"Fast Company Events \",\n \"cc\": \"\",\n \"subject\": \"RSVP Now! Join us in Austin at the Fast Company Grill\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 220\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T16:01:53.000Z\"\n },\n {\n \"id\": 1994268556,\n \"uuid\": \"7377EA8D-FFE1-4BE5-88A2-28B20D72FA17.1\",\n \"address\": \"charles@mpdemo.net\",\n \"recipients\": [\n \"charles@mpdemo.net\"\n ],\n \"sender\": \"bounce-myytbccnclqdctdlcnbpcwtwwwlzqsysqpg@email.fastcompany.com\",\n \"to\": \"\\\"\\\" \",\n \"from\": \"Fast Company Events \",\n \"cc\": \"\",\n \"subject\": \"RSVP Now! Join us in Austin at the Fast Company Grill\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 220\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 865693,\n \"name\": \"charles\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T16:01:53.000Z\"\n },\n {\n \"id\": 1994216861,\n \"uuid\": \"035BF8F2-E632-4034-A7E4-0E3D7B665B92.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0101016fa9c71747-98e4dd43-546c-4667-86c7-c7a9654f2829-000000@us-west-2.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"News Alert: Schiff, Nadler are among the House members named as impeachment managers who will prosecute the case against Trump\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T15:16:34.000Z\"\n },\n {\n \"id\": 1994213189,\n \"uuid\": \"9F4B926A-EA3F-4669-998D-415E4D592012.1\",\n \"address\": \"charles@mpdemo.net\",\n \"recipients\": [\n \"charles@mpdemo.net\"\n ],\n \"sender\": \"bounces+9360667-c4fa-charles=mpdemo.net@em8737.fastcompany.com\",\n \"to\": \"charles@mpdemo.net\",\n \"from\": \"Fast Company Compass \",\n \"cc\": \"\",\n \"subject\": \"The perfect ergonomic keyboard is here\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 200\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": \"2020-01-15T15:24:18.000Z\",\n \"user\": {\n \"id\": 865693,\n \"name\": \"charles\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T15:13:28.000Z\"\n },\n {\n \"id\": 1994213191,\n \"uuid\": \"68F681F0-1587-421A-A2C0-9D59A132CE1B.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"bounces+9360667-be88-carnegie=mpdemo.net@em8737.fastcompany.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"Fast Company Compass \",\n \"cc\": \"\",\n \"subject\": \"The perfect ergonomic keyboard is here\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 200\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T15:13:27.000Z\"\n },\n {\n \"id\": 1994184714,\n \"uuid\": \"3B03D365-B95F-48E9-A78F-626434CB5C83.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0100016fa9aaad0e-f89267f9-514e-4572-96b0-f1c920cece30-000000@email.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"News Alert: Speaker Pelosi expected to name team of House managers who will prosecute the case against Trump. Watch live coverage and analysis.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 270\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 7,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 20 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 50\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T14:45:32.000Z\"\n },\n {\n \"id\": 1994150424,\n \"uuid\": \"37BB6DEC-4058-4182-87F4-C3097BB658A9.3\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0101016fa98bd8cc-cc0fefc8-c0f0-4017-879c-d0b18fe4a688-000000@us-west-2.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"News Alert: Russian cabinet resigns after Putin calls for constitutional change that could give him significant influence after term finishes\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T14:11:52.000Z\"\n },\n {\n \"id\": 1994114526,\n \"uuid\": \"D01EC168-1D65-42F5-96B2-C20B7166D8FB.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"bounce-otlllkttqwlwdjtrrzldtwrqfqwjkwdqwlccwpk@srnemail.com\",\n \"to\": \"\\\"192.88.135.9 SRNNews.com Newsletter Popup\\\" \",\n \"from\": \"Bill Bennett's American Patriot's Daily Almanac\\n \",\n \"cc\": \"\",\n \"subject\": \"Remembering Martin Luther King Jr.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 540\n },\n \"results\": [\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T13:36:49.000Z\"\n },\n {\n \"id\": 1994050917,\n \"uuid\": \"31611E0E-228A-445C-9CAD-1BBA17982A03.1\",\n \"address\": \"charles@mpdemo.net\",\n \"recipients\": [\n \"charles@mpdemo.net\"\n ],\n \"sender\": \"bounce-uyhqmhqcgpfsnyyhmgshnpcymccyysbhjdgbbp@townhallmail.com\",\n \"to\": \"\\\"Friend\\\" \",\n \"from\": \"Jonathan Garthwaite \",\n \"cc\": \"\",\n \"subject\": \"Townhall Daily - Jan 15 - Kurt Schlichter,Ben Shapiro,Walter E. Williams,John Stossel,Sean Spicer and More\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 340\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 55,\n \"mode\": \"inbound\",\n \"title\": \"Ungrouped\",\n \"description\": \"Rules that have not yet been categorized or that don't fit in a category.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 865693,\n \"name\": \"charles\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T12:12:50.000Z\"\n },\n {\n \"id\": 1993986685,\n \"uuid\": \"A5284607-E015-41AA-9B1E-B5719E9CFA92.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"bounce-63_HTML-328761131-3163769-7219217-238@bounce.aaas.sciencepubs.org\",\n \"to\": \"\",\n \"from\": \"\\\"News from Science\\\" \",\n \"cc\": \"\",\n \"subject\": \"World on alert for potential spread of new SARS-like virus found in China\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 380\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T11:01:36.000Z\"\n },\n {\n \"id\": 1993973605,\n \"uuid\": \"0A670970-82A3-4D54-A583-450DEFEC0FA8.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"bounce-rrcvvkcclgvgpncttrnpcgtljwrkjjplgvhhgsk@srnemail.com\",\n \"to\": \"\\\"192.88.135.9 SRNNews.com Newsletter Popup\\\" \",\n \"from\": \"Daybreak Insider \",\n \"cc\": \"\",\n \"subject\": \"CNN Takes Sides in Dem Debate\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 540\n },\n \"results\": [\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T10:08:48.000Z\"\n },\n {\n \"id\": 1993995201,\n \"uuid\": \"C32C1254-08DF-4C42-9636-546A62D957B6.1\",\n \"address\": \"ben@mpdemo.net\",\n \"recipients\": [\n \"ben@mpdemo.net\"\n ],\n \"sender\": \"bounces+20995-d3ee-ben=mpdemo.net@em954.selling-greenville.com\",\n \"to\": \"ben@mpdemo.net\",\n \"from\": \"Marcus Wondracek \",\n \"cc\": \"\",\n \"subject\": \"428 Hilburn Way, Simpsonville, SC + 1 Other New Property\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 420\n },\n \"results\": [\n {\n \"id\": 30,\n \"mode\": \"inbound\",\n \"title\": \"Spamcop\",\n \"description\": \"This message came from an IP on the Spamcop DNS-based Blocking List. \",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 9634,\n \"name\": \"ben\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T09:10:51.000Z\"\n },\n {\n \"id\": 1994004621,\n \"uuid\": \"8A5F4746-AA7A-4DF2-B458-6BD1A46A24EF.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0100016fa76fddf5-1b0da981-fa9a-4c4c-84ec-f5510114d469-000000@email.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"News Alert: Warren and Sanders managed their growing tensions well. One candidate was a surprising bystander. Read our full debate analysis.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T04:22:04.000Z\"\n },\n {\n \"id\": 1994057771,\n \"uuid\": \"C2F8A4FA-AB88-4C42-BE8E-FB3358F9B900.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0101016fa746b1a7-9d060edb-631c-4843-b5f9-47addbe3da19-000000@us-west-2.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"News Alert: Ukraine prosecutor offered information related to Biden in exchange for U.S. ambassador’s ouster, newly released materials show\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T03:37:05.000Z\"\n },\n {\n \"id\": 1994035035,\n \"uuid\": \"1644AAA4-176C-458B-9445-BDCDAC2548A2.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0100016fa742ee73-2c28032d-2dcb-46df-9481-026d119bdef0-000000@email.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"Local Politics Alert: Northam to announce temporary ban on firearms on the grounds of Va. state Capitol, according to two people briefed on his plans\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 270\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 7,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 20 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 50\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T03:32:59.000Z\"\n },\n {\n \"id\": 1993990654,\n \"uuid\": \"342DA022-9906-461D-BD3D-2A4BAAE498C2.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0101016fa723a4b8-c47aabec-5509-4c0f-9ccc-7fdf549d4ea2-000000@us-west-2.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"News Alert: Warren and Sanders spar onstage over whether Sanders said a woman couldn't win the presidency\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T02:58:48.000Z\"\n },\n {\n \"id\": 1993986094,\n \"uuid\": \"24536E49-7A05-403E-9F35-4B2926A020B7.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0100016fa701ff85-cbf5a944-ffa1-4625-8e53-798c706294c3-000000@email.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"News Alert: Michael Flynn moves to withdraw guilty plea, in reversal for former Trump national security adviser\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T02:22:03.000Z\"\n },\n {\n \"id\": 1993998265,\n \"uuid\": \"F2A38BA1-4D74-4A7F-B44B-49E82D46A622.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0100016fa6fe1e72-e163fb18-0522-4394-8fef-19999af1009e-000000@email.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"News Alert: Tonight's Democratic debate opens with discussion of Iran, war and commander-in-chief credentials. Follow The Post's live coverage.\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T02:17:49.000Z\"\n },\n {\n \"id\": 1993971787,\n \"uuid\": \"337CB572-CE89-4233-9BD3-1ED03A5E56D6.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"v-bfkjlcd_fjcackpmfo_gcpoahnc_gcpoahnc_a@bounce.e.theatlantic.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Atlantic Politics \",\n \"cc\": \"\",\n \"subject\": \"Getting out the (Latino) vote\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 200\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T00:55:53.000Z\"\n },\n {\n \"id\": 1994055440,\n \"uuid\": \"C21B0210-F377-4E24-A0D3-5A827032A71B.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0101016fa6ad9eb0-19159be3-9391-453d-9075-c48c94eb6f35-000000@us-west-2.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"News Alert: Boston Red Sox 'part ways' with manager Alex Cora, who was implicated in MLB sign-stealing scandal\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T00:49:53.000Z\"\n },\n {\n \"id\": 1993970416,\n \"uuid\": \"FBA4F4E2-0745-4CE9-AE01-3EC679A040F6.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"v-bfkjlbe_fjcackpmfo_gcpoacfd_gcpoacfd_a@bounce.e.theatlantic.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Atlantic \",\n \"cc\": \"\",\n \"subject\": \"The small rebellion of reading fiction\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 340\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T00:29:06.000Z\"\n },\n {\n \"id\": 1993993858,\n \"uuid\": \"8FC50E31-8C6F-4375-B2AF-B9E503627E96.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0100016fa68ecb15-9042c6b0-f9f0-420b-8bc7-0d4f12ff4398-000000@email.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"Post Exclusive: More than 100 billion pain pills were shipped nationwide over nine years, newly disclosed data shows\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-15T00:16:13.000Z\"\n },\n {\n \"id\": 1993659797,\n \"uuid\": \"DE46197A-5AE0-41FF-8879-B7174AEE583B.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"v-bfkjilh_fjcackpmfo_gcpnoapi_gcpnoapi_a@bounce.e.theatlantic.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Atlantic \",\n \"cc\": \"\",\n \"subject\": \"The Atlantic Photo - Winners of the 2019 Ocean Art Underwater Photo Contest\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 380\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 173,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T21:04:40.000Z\"\n },\n {\n \"id\": 1993656279,\n \"uuid\": \"F8D84D99-2216-4272-816F-61091ECC4501.1\",\n \"address\": \"charles@mpdemo.net\",\n \"recipients\": [\n \"charles@mpdemo.net\"\n ],\n \"sender\": \"bounceback@e.media.bloomberg.com\",\n \"to\": \"charles@mpdemo.net\",\n \"from\": \"\\\"Bloomberg\\\" \",\n \"cc\": \"\",\n \"subject\": \"2020 is a big deal - and so is this\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 300\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 865693,\n \"name\": \"charles\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T21:02:43.000Z\"\n },\n {\n \"id\": 1993655835,\n \"uuid\": \"18354311-500D-4044-8B9D-57A31363FACF.1\",\n \"address\": \"charles@mpdemo.net\",\n \"recipients\": [\n \"charles@mpdemo.net\"\n ],\n \"sender\": \"bounce-ivbhzyhcbndwmggydbwymncgvmhgnwkyrfbkkn@townhallmail.com\",\n \"to\": \"\\\"Friend\\\" \",\n \"from\": \"Jonathan Garthwaite \",\n \"cc\": \"\",\n \"subject\": \"Pelosi Had a Dirty Little Secret for Withholding Impeachment Articles\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 320\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 55,\n \"mode\": \"inbound\",\n \"title\": \"Ungrouped\",\n \"description\": \"Rules that have not yet been categorized or that don't fit in a category.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 865693,\n \"name\": \"charles\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T20:59:47.000Z\"\n },\n {\n \"id\": 1993679595,\n \"uuid\": \"8DA55367-D1E3-4A1B-941C-5E8C231AAAB6.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"bounce-mc.us2_6180498.1359271-292075e50a@mail1.davenetics.com\",\n \"to\": \"\",\n \"from\": \"=?utf-8?Q?NextDraft?= \",\n \"cc\": \"\",\n \"subject\": \"SAD!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 200\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T20:32:26.000Z\"\n },\n {\n \"id\": 1993658447,\n \"uuid\": \"B931BD1E-DB7B-44C3-AB58-F5BC1E5A8C87.1\",\n \"address\": \"charles@mpdemo.net\",\n \"recipients\": [\n \"charles@mpdemo.net\"\n ],\n \"sender\": \"bounce@tech.channelfutures.com\",\n \"to\": \"charles@mpdemo.net\",\n \"from\": \"\\\"Channel Futures\\\" \",\n \"cc\": \"\",\n \"subject\": \"Guide to Setting Hourly Rates for Field Service Technicians\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 320\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 865693,\n \"name\": \"charles\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T20:31:19.000Z\"\n },\n {\n \"id\": 1993576997,\n \"uuid\": \"83DEFEDA-A0FA-4897-A719-25B9C2B94DE0.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0101016fa5bc523d-84bc7be7-011e-4fea-9f32-e3e466792b01-000000@us-west-2.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"News Alert: Senate resolution to limit Trump's military authority on Iran has enough Republican votes to pass, key Democrat says\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T20:26:20.000Z\"\n },\n {\n \"id\": 1993668763,\n \"uuid\": \"91FB47C5-2718-4B75-B68B-5E5E97679B92.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0101016fa4fad264-e4cfce96-010d-4880-99fa-81bef8148ddb-000000@us-west-2.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"The Daily 202: 10 questions after Pelosi announces a Wednesday vote on transmitting the articles of impeachment\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 40\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T16:54:58.000Z\"\n },\n {\n \"id\": 1993380671,\n \"uuid\": \"9B4E2AAE-990E-445B-8559-6149091BC11A.1\",\n \"address\": \"ben@mpdemo.net\",\n \"recipients\": [\n \"ben@mpdemo.net\"\n ],\n \"sender\": \"ben.hathaway@mailprotector.com\",\n \"to\": \"ben@mpdemo.net\",\n \"from\": \"ben.hathaway@mailprotector.com\",\n \"cc\": \"\",\n \"subject\": \"test Tue, 14 Jan 2020 11:44:51 -0500\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 440\n },\n \"results\": [\n {\n \"id\": 1,\n \"mode\": \"inbound\",\n \"title\": \"No Reverse DNS\",\n \"description\": \"The server that relayed the message did not have a reverse DNS record.\",\n \"weight\": 40\n },\n {\n \"id\": 25,\n \"mode\": \"inbound\",\n \"title\": \"Policy Block List\",\n \"description\": \"This message came form an IP that is on the Policy Block List. The PBL is a DNSBL database of end-user IP address ranges which should not be delivering unauthenticated SMTP email to any Internet mail server except those provided for specifically by an ISP for that customer's use.\",\n \"weight\": 200\n },\n {\n \"id\": 10,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send.\",\n \"weight\": 300\n },\n {\n \"id\": 169,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (From)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the from header.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 9634,\n \"name\": \"ben\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T16:44:51.000Z\"\n },\n {\n \"id\": 1993367346,\n \"uuid\": \"E610F239-8CC2-4BDB-BE8F-81309756746F.1\",\n \"address\": \"charles@mpdemo.net\",\n \"recipients\": [\n \"charles@mpdemo.net\"\n ],\n \"sender\": \"bounce@tech.channelfutures.com\",\n \"to\": \"charles@mpdemo.net\",\n \"from\": \"\\\"Channel Futures\\\" \",\n \"cc\": \"\",\n \"subject\": \"🎣 Hook, Line & Sinker: Phishing Report\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 300\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 865693,\n \"name\": \"charles\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T16:32:05.000Z\"\n },\n {\n \"id\": 1993356114,\n \"uuid\": \"61C9F31F-7176-4473-8E18-739E6D4E4B8D.1\",\n \"address\": \"charles@mpdemo.net\",\n \"recipients\": [\n \"charles@mpdemo.net\"\n ],\n \"sender\": \"return-a7-28292-28295-c8e22162=1054480=8@mailer.iphonelife.com\",\n \"to\": \"charles@mpdemo.net\",\n \"from\": \"\\\"iPhone Life\\\" \",\n \"cc\": \"\",\n \"subject\": \"STM Goods: Charge into the New Year with 20% Off Wireless Powerbank\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 865693,\n \"name\": \"charles\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T16:23:17.000Z\"\n },\n {\n \"id\": 1993278651,\n \"uuid\": \"70839F9B-4E39-4A4D-811D-E0A40F6C831C.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0100016fa49d74dd-e2b16abd-eacf-428e-93ed-e04513a25b87-000000@email.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"News Alert: NSA found a dangerous Microsoft software flaw and alerted the firm — rather than weaponize it\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T15:13:00.000Z\"\n },\n {\n \"id\": 1993264045,\n \"uuid\": \"20D07D09-E673-4DD2-BC0D-70E65DDEF908.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"bounces+9360667-be88-carnegie=mpdemo.net@em8737.fastcompany.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"Fast Company Compass \",\n \"cc\": \"\",\n \"subject\": \"It’s official: Data visualization has gone mainstream\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 220\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T15:01:45.000Z\"\n },\n {\n \"id\": 1993264097,\n \"uuid\": \"027AF2A2-8B5C-4F79-885D-AF22A597E264.1\",\n \"address\": \"charles@mpdemo.net\",\n \"recipients\": [\n \"charles@mpdemo.net\"\n ],\n \"sender\": \"bounces+9360667-c4fa-charles=mpdemo.net@em8737.fastcompany.com\",\n \"to\": \"charles@mpdemo.net\",\n \"from\": \"Fast Company Compass \",\n \"cc\": \"\",\n \"subject\": \"It’s official: Data visualization has gone mainstream\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 220\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 865693,\n \"name\": \"charles\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T15:01:45.000Z\"\n },\n {\n \"id\": 1993261772,\n \"uuid\": \"82821312-C5A7-42D0-B76C-BFE3045C0F17.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"bounces+6692116-dc2e-carnegie=mpdemo.net@abmail.mailings.ncaa.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"\\\"NCAA.com\\\" \",\n \"cc\": \"\",\n \"subject\": \"The Journey to Detroit Continues!\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 340\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 173,\n \"mode\": \"inbound\",\n \"title\": \"SPF Soft Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header but is in transition\\t.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T15:00:16.000Z\"\n },\n {\n \"id\": 1993244610,\n \"uuid\": \"80E1CD32-CD39-42BC-AC56-6C16F5493506.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0100016fa48211d2-05eda1c9-13b7-437a-97ec-4edb131a87fa-000000@email.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"News Alert: House to vote Wednesday to send impeachment articles against Trump to the Senate\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T14:43:05.000Z\"\n },\n {\n \"id\": 1993194920,\n \"uuid\": \"E4DB7CE2-1146-4EE1-9E20-1E6AC0F5DE57.1\",\n \"address\": \"charles@mpdemo.net\",\n \"recipients\": [\n \"charles@mpdemo.net\"\n ],\n \"sender\": \"bounce@tech.channelfutures.com\",\n \"to\": \"charles@mpdemo.net\",\n \"from\": \"\\\"Channel Futures\\\" \",\n \"cc\": \"\",\n \"subject\": \"Digging into Cloud, Microsoft Growth | Dell Technologies Leans in on Channel | JEDI Update\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 140\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 172,\n \"mode\": \"inbound\",\n \"title\": \"SPF Hard Fail (Reply-To)\",\n \"description\": \"The SPF record has designated the host as NOT being allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 865693,\n \"name\": \"charles\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T14:01:18.000Z\"\n },\n {\n \"id\": 1993169204,\n \"uuid\": \"BAE742B4-768E-419D-8CF1-A2DF1BE6BCBA.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"bounce-upyffghhcnfnswhpphhshnpcyymcgnscnfzznjg@srnemail.com\",\n \"to\": \"\\\"192.88.135.9 SRNNews.com Newsletter Popup\\\" \",\n \"from\": \"Bill Bennett's American Patriot's Daily Almanac\\n \",\n \"cc\": \"\",\n \"subject\": \"A Prayer at Valley Forge\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 540\n },\n \"results\": [\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T13:36:04.000Z\"\n },\n {\n \"id\": 1993141384,\n \"uuid\": \"56BE65BA-D79C-4639-816A-ECF49B8E4040.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"bounce-mntddtccpndnlycbbcwlcnbpwwbtwslpndzznjt@srnnewsemail.com\",\n \"to\": \"\\\"192.88.135.9 SRNNews.com Newsletter Popup\\\" \",\n \"from\": \"SRN News Editorial Cartoons \",\n \"cc\": \"\",\n \"subject\": \"New Editorial Cartoons from SRNNews.com\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 340\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T13:11:02.000Z\"\n },\n {\n \"id\": 1993089135,\n \"uuid\": \"337A1488-A4BF-4899-908C-CF53EA29155A.1\",\n \"address\": \"charles@mpdemo.net\",\n \"recipients\": [\n \"charles@mpdemo.net\"\n ],\n \"sender\": \"bounce-tmzzjlzpbmckvwwlzvklvmpwwhvwwkfltgbffm@townhallmail.com\",\n \"to\": \"\\\"Friend\\\" \",\n \"from\": \"Jonathan Garthwaite \",\n \"cc\": \"\",\n \"subject\": \"Townhall Daily - Jan 14 - Derek Hunter,Dennis Prager,Sheriff David Clarke, Ret.,Salena Zito,Ken Blackwell and More\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 340\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 55,\n \"mode\": \"inbound\",\n \"title\": \"Ungrouped\",\n \"description\": \"Rules that have not yet been categorized or that don't fit in a category.\",\n \"weight\": 200\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 865693,\n \"name\": \"charles\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T12:11:44.000Z\"\n },\n {\n \"id\": 1993064081,\n \"uuid\": \"66FF41C4-13C6-4AD9-8581-73761F13DE0A.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0101016fa3d6f3c3-fd413edd-f813-407a-a082-a0b07dc6b967-000000@us-west-2.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"News Alert: France, Britain and Germany launch process to hold Iran accountable for violating nuclear deal, opening way for sanctions\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T11:36:10.000Z\"\n },\n {\n \"id\": 1993043690,\n \"uuid\": \"BAB3AC1A-B570-4F4F-B7FD-3291A83D1225.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"bounce-63_HTML-328761131-3162276-7219217-238@bounce.aaas.sciencepubs.org\",\n \"to\": \"\",\n \"from\": \"\\\"News from Science\\\" \",\n \"cc\": \"\",\n \"subject\": \"FDA and NIH let clinical trial sponsors keep results secret and break the law\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 380\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T11:01:31.000Z\"\n },\n {\n \"id\": 1993017190,\n \"uuid\": \"E796E4A2-7971-4816-BF96-FED878EF151B.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"bounce-jjjmmtbbnvmvwjbqqsfwbvqfnnmssswnvmzzvpt@srnemail.com\",\n \"to\": \"\\\"192.88.135.9 SRNNews.com Newsletter Popup\\\" \",\n \"from\": \"Daybreak Insider \",\n \"cc\": \"\",\n \"subject\": \"Warren and Sanders Spar Over Female President\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 540\n },\n \"results\": [\n {\n \"id\": 29,\n \"mode\": \"inbound\",\n \"title\": \"Barracuda Reputation Block List\",\n \"description\": \"This message came from an IP on the Barracuda RBL. This list includes IP addresses that are known to send spam.\",\n \"weight\": 200\n },\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T10:12:01.000Z\"\n },\n {\n \"id\": 1992989257,\n \"uuid\": \"0F2971A2-B6D7-4DEB-9A6E-C57C64E2B4A2.1\",\n \"address\": \"ben@mpdemo.net\",\n \"recipients\": [\n \"ben@mpdemo.net\"\n ],\n \"sender\": \"bounces+20995-d3ee-ben=mpdemo.net@em954.selling-greenville.com\",\n \"to\": \"ben@mpdemo.net\",\n \"from\": \"Marcus Wondracek \",\n \"cc\": \"\",\n \"subject\": \"331 Kelsey Glen Lane, Simpsonville, SC + 4 Other New Properties this week\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 9634,\n \"name\": \"ben\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T09:15:51.000Z\"\n },\n {\n \"id\": 1992880468,\n \"uuid\": \"9F77F5D0-36D1-45F0-BE8B-AA26C12CC11B.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0101016fa27c3d17-dc1ef609-659e-451c-8884-8d2015bbd9ef-000000@us-west-2.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"News Alert: LSU beats Clemson in college football's national championship game, completing dream season\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T05:17:28.000Z\"\n },\n {\n \"id\": 1992812718,\n \"uuid\": \"1F17EA85-5F7F-4B25-B934-46E2C538CDB6.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0101016fa1e91b3d-df0e200c-7022-4d3d-bc17-b0d05e645331-000000@us-west-2.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"News Alert: Russian spies hacked Ukrainian gas company at heart of Trump impeachment trial, again entangling Moscow in domestic U.S. politics\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T02:36:46.000Z\"\n },\n {\n \"id\": 1992756644,\n \"uuid\": \"97C99FAF-0B7D-4649-808D-C2178DD6946B.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"v-bfkieim_fjcackpmfo_gcpncehe_gcpncehe_a@bounce.e.theatlantic.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Atlantic \",\n \"cc\": \"\",\n \"subject\": \"'Joker' laughs its way to the top of the Oscar pack\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"spam\",\n \"decision\": \"quarantine_spam\",\n \"score\": {\n \"score\": 360\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 135,\n \"mode\": \"inbound\",\n \"title\": \"Multiple From/Reply\",\n \"description\": \"This message had headers from multiple addresses.\",\n \"weight\": 0\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T00:38:17.000Z\"\n },\n {\n \"id\": 1992756515,\n \"uuid\": \"E625104C-1DC3-44F5-B166-C1FFCE4BCAE9.1\",\n \"address\": \"carnegie@mpdemo.net\",\n \"recipients\": [\n \"carnegie@mpdemo.net\"\n ],\n \"sender\": \"0101016fa17c6507-1cb0a470-583e-4dab-8a7f-75a3478933a0-000000@us-west-2.washingtonpost.com\",\n \"to\": \"carnegie@mpdemo.net\",\n \"from\": \"The Washington Post \",\n \"cc\": \"\",\n \"subject\": \"News Alert: Trump planning to divert additional $7.2 billion in Pentagon funds for border wall\",\n \"direction\": \"inbound\",\n \"quarantine_type\": \"policy\",\n \"decision\": \"quarantine_policy\",\n \"score\": {\n \"score\": 240\n },\n \"results\": [\n {\n \"id\": 12,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass\",\n \"description\": \"The SPF record designates the host to be allowed to send.\",\n \"weight\": 0\n },\n {\n \"id\": 171,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (From)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the from header.\",\n \"weight\": 0\n },\n {\n \"id\": 174,\n \"mode\": \"inbound\",\n \"title\": \"SPF Pass (Reply-To)\",\n \"description\": \"The SPF record designates the host to be allowed to send for an address in the reply-to header.\",\n \"weight\": 0\n },\n {\n \"id\": 6,\n \"mode\": \"inbound\",\n \"title\": \"Subject Length\",\n \"description\": \"The length of the subject exceeded 50 characters.\",\n \"weight\": 20\n },\n {\n \"id\": 8,\n \"mode\": \"inbound\",\n \"title\": \"Subject Spaces\",\n \"description\": \"The subject contained 10 or more spaces. This can be a tactic used by spammers to stuff content into a subject.\",\n \"weight\": 20\n },\n {\n \"id\": 72,\n \"mode\": \"inbound\",\n \"title\": \"Promotions\",\n \"description\": \"Advertisements, newsletters, and other types of marketing email that isn't necessarily spam.\",\n \"weight\": 75\n },\n {\n \"id\": 138,\n \"mode\": \"inbound\",\n \"title\": \"Block\",\n \"description\": \"A block rule triggered on the sender or from address for this message causing it to be quarantined.\",\n \"weight\": 0\n }\n ],\n \"released_at\": null,\n \"user\": {\n \"id\": 871139,\n \"name\": \"carnegie\"\n },\n \"user_group\": {\n \"id\": 109,\n \"name\": \"CloudMail with Bracket\"\n },\n \"domain\": {\n \"id\": 102,\n \"name\": \"mpdemo.net\"\n },\n \"customer\": {\n \"id\": 7114,\n \"name\": \"Mailprotector Demo Customer\"\n },\n \"reseller\": {\n \"id\": 343,\n \"name\": \"Mailprotector Demos Reseller\"\n },\n \"provider\": {\n \"id\": 65,\n \"name\": \"United States\"\n },\n \"message_date\": \"2020-01-14T00:38:01.000Z\"\n }\n]"}],"_postman_id":"0413e931-dc02-4095-9a28-ed665e90fb06"},{"name":"Release Message","id":"5d47aa1e-d3c9-43db-bb01-3f593947c1f6","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"Authorization","value":"Bearer {{your_api_key_here}}","type":"text"},{"key":"Content-Type","name":"Content-Type","value":"application/json","type":"text"}],"body":{"mode":"raw","raw":"{\n\t\"include_original_recipients\": 1,\n\t\"recipients\": \"address1@domain.com, address2@domain.com\"\n}"},"url":"emailservice.io/api/v1/messages/{{message_id}}/deliver","description":"

Release a message from the quarantine. The recipients field is optional and can be provided a comma separated string of email addresses to additionally deliver messages to.

Note: Message ID's provided in the payload that do not belong to a user under the user group in the URL path will not be released, which will be evident in the request response.

Get the logs for users under a user group. Refer to the \"Filtering Logs\" section at the top of the page for more information on filtering the results.

Get the allow and block rules for a user group.

Create an allow or block rule for a user group.

Delete an allow or block rule.

Retrieve a list of user groups belonging to a domain.

Get a single user group.

Create a new user group under a domain.

Edit an existing user group.

Remove a User Group. This will also remove all users that are active under that group. To preserve users, move them to another group before deleting.

Get, create, update, and delete user groups.

\n","_postman_id":"00b52d3a-39be-439d-9494-64006cf33ab6","auth":{"type":"bearer","bearer":{"token":"{{your_api_key_here}}"},"isInherited":true,"source":{"_postman_id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","name":"Mailprotector API","type":"collection"}}},{"name":"Users","item":[{"name":"Aliases","item":[{"name":"User Aliases","id":"f93401e4-d79c-4a87-869c-adfd223efce3","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"GET","header":[{"key":"Authorization","value":"Bearer {{your_api_key_here}}","type":"text"}],"url":"emailservice.io/api/v1/users/{{user_id}}/aliases","description":"

Get all aliases belonging to a user.

Create an alias for a user. Creating a user alias will also create a new alias address for each of the user's domain's aliases. The parent user must be of type \"User\" before an alias can be created for them. Eg. Mailing lists, equipment users, and other non-\"user\" accounts cannot have aliases added to them.

Get the notification destinations for a user.

Create a new notification destination for a user.

Remove a notification destination.

Get, create, and remove the destinations for notifications to be sent for users. To control the intervals that they are sent, manage the \"configuration\" for the appropriate entity.

Level ID

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Level	Description
1	Normal
2	Urgent

Destination Type ID

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Type	Description
1	Email
2	SMS

","event":[{"listen":"prerequest","script":{"id":"95b27853-ac05-4708-9a53-24693e381234","type":"text/javascript","exec":[""]}},{"listen":"test","script":{"id":"4fb40283-35f1-4ee1-a14b-64e87300c3fc","type":"text/javascript","exec":[""]}}],"_postman_id":"7dcae53a-95e3-4841-8ee3-dba7e4a674e3","auth":{"type":"bearer","bearer":{"token":"{{your_api_key_here}}"},"isInherited":true,"source":{"_postman_id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","name":"Mailprotector API","type":"collection"}}},{"name":"Messages","item":[{"name":"User Messages","id":"d09e74b4-8da7-43d2-8509-d05b9dbac4bc","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"GET","header":[{"key":"Authorization","value":"Bearer {{your_api_key_here}}","type":"text"}],"url":"emailservice.io/api/v1/users/{{user_id}}/messages","description":"

Get a user's messages quarantined messages.

Release a message from the quarantine. The recipients field is optional and can be provided a comma separated string of email addresses to additionally deliver messages to.

Note: Message ID's provided in the payload that do not belong to the user in the URL path will not be released, which will be evident in the request response.

Get the logs for a user. Refer to the \"Filtering Logs\" section at the top of the page for more information on filtering the results.

Get the allow and block rules for a user.

Create an allow or block rule for a user.

Delete an allow or block rule.

Get all users belonging to an entity.

Get a single user using its ID.

Create a User under a User Group.

Note: Each user created will have a new address generated for the domain and each of its aliases. For example, domain \"domain.com\" with alias \"domain-alias.com\" will produce two new addresses for all users created under it. Adding a user with username \"test\" to a user group under \"domain.com\" will allow that user to accept mail at both \"test@domain.com\" and \"test@domain-alias.com\".

Create multiple users at once.

Update a user's first and last name.

Search for a user or user alias by its address. If the user being requested is an alias, the root user will be returned.

Resets the user's password to the designated value

Delete a user.

View and manage users belonging to a reseller, customer, domain, or user group.

\n","event":[{"listen":"prerequest","script":{"id":"bdb67dce-6938-49fc-afc7-fdc2046edf72","type":"text/javascript","exec":[""]}},{"listen":"test","script":{"id":"59842b16-5798-4d1f-819e-0510835ea5fe","type":"text/javascript","exec":[""]}}],"_postman_id":"a21cef77-98b4-4d16-8aa2-e663747b80ac","auth":{"type":"bearer","bearer":{"token":"{{your_api_key_here}}"},"isInherited":true,"source":{"_postman_id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","name":"Mailprotector API","type":"collection"}}},{"name":"Managers","item":[{"name":"Notification Destinations","item":[{"name":"Manager Notification Destinations","id":"d97626fe-c827-46fc-a10d-4a02f7c33bf7","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"GET","header":[{"key":"Authorization","value":"Bearer {{your_api_key_here}}","type":"text"}],"url":"emailservice.io/api/v1/managers/manager_id/notification_destinations","description":"

Get all notification destinations for a manager.

Create a notification destination for a manager account.

Delete a notification destination for a manager.

Get, create, and remove the destinations for notifications to be sent for managers. To control the intervals that they are sent, manage the \"configuration\" for the appropriate entity.

Level ID

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Level	Description
1	Normal
2	Urgent

Destination Type ID

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n

Type	Description
1	Email
2	SMS

","event":[{"listen":"prerequest","script":{"id":"cd8bf862-92ec-4d2e-9a5a-83375553e569","type":"text/javascript","exec":[""]}},{"listen":"test","script":{"id":"ab02ec33-95a5-48c2-9129-58f448e9007b","type":"text/javascript","exec":[""]}}],"_postman_id":"eb241b69-3349-4328-af0a-7a4e9307459f","auth":{"type":"bearer","bearer":{"token":"{{your_api_key_here}}"},"isInherited":true,"source":{"_postman_id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","id":"17dc85ab-2dfc-4cdf-ad30-bdaa6aa50f71","name":"Mailprotector API","type":"collection"}}},{"name":"Managers","id":"06532e21-b7b5-4675-b838-fe27743c3917","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"GET","header":[{"key":"Authorization","value":"Bearer {{your_api_key_here}}","type":"text"}],"url":"emailservice.io/api/v1/resellers/{{reseller_id}}/managers","description":"

Get a list of managers belonging to a reseller or customer account.

Get a single manager object with its ID.

Create a new manager for a reseller or customer.

Delete a manager using its ID.

Search for a result by its code and mode.