SPF/DMARC - email failure

Help and Support
2

any specifics on what is incorrect? please note that spf record is deliberately not very strict.

3

This is a recent log and it shows that the DKIM fails for the header distill and amazonses which is one part in why the overall DMARC is failing.

[Limited to 1 per PT1H] DMRAC check result :fail , auth: [amazonses:com;

spf=pass (spfCheck: domain of nasdaq.onmicrosoft.com designates 40.107.201.41 as permitted sender) client-ip=40.107.201.41; [envelope-from=bounces+SRS=J6bVn=SH@nasdaq:onmicrosoft:com]
(mailto: envelope-from=bounces+SRS=J6bVn=SH@nasdaq:onmicrosoft:com); 

helo=CH4PR04CU002.outbound.protection.outlookcom ;

dkim=pass [header.i=@nasdaq.onmicrosoft:com]
(mailto: header.i=@nasdaq:onmicrosoft:com) ;
dkim=fail [header.i=@distill.io] (mailto: header.i=@distil)
dkim=fail [header.i=@amazonses:com](mailto: header.i=@amazonses:com) ;
dmarc=fail header.from=distill;]

Do you know if you could work with the distill program to ensure that their emails have valid DKIM signatures?

We believe this is the issue because those emails are being rejected from the distill platform.

4

the error shows that nasdaq.onmicrosoft.com (from ip 40.107.201.41) is trying to send email as distill.io. based on this here are my assumptions:

  1. the alert is sent by distill.io to an email address addressed to nasdaq.com.
  2. the email alert is received by nasdaq.com successfully.
  3. nasdaq.com then forwards this email address to a new email address (altassian/jira?).
  4. the forwarded email is rejected by the final recipient due to dkim errors.

can you confirm if this is close to what is being done?

6

here is a sample header from an email that is sent by distill:

Received-SPF: pass (google.com: domain of 01070193097fe346-dc728d72-6d0d-4068-84ef-f6733d8f165d-000000@eu-central-1.email-notifications.distill.io designates 69.169.224.13 as permitted sender) client-ip=69.169.224.13;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@distill.io header.s=4afvrrsliqm2gggekhj76p2ad2s4k6iq header.b=g9VcM9yo;
       dkim=pass header.i=@amazonses.com header.s=54ecsf3zk7z4mwxwwox7z7bg6e5gwjsz header.b=tFqEmTvk;
       spf=pass (google.com: domain of 01070193097fe346-dc728d72-6d0d-4068-84ef-f6733d8f165d-000000@eu-central-1.email-notifications.distill.io designates 69.169.224.13 as permitted sender) smtp.mailfrom=01070193097fe346-dc728d72-6d0d-4068-84ef-f6733d8f165d-000000@eu-central-1.email-notifications.distill.io;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=distill.io

notice that the result of sfp check:

Received-SPF: pass (google.com: domain of 01070193097fe346-dc728d72-6d0d-4068-84ef-f6733d8f165d-000000@eu-central-1.email-notifications.distill.io designates 69.169.224.13 as permitted sender) client-ip=69.169.224.13;

the domain is eu-central-1.email-notifications.distill.io.

now look at the spf header that you shared earlier:

spf=pass (spfCheck: domain of nasdaq.onmicrosoft.com designates 40.107.201.41 as permitted sender) client-ip=40.107.201.41; [envelope-from=bounces+SRS=J6bVn=SH@nasdaq:onmicrosoft:com] (mailto: envelope-from=bounces+SRS=J6bVn=SH@nasdaq:onmicrosoft:com);

the shows that the email was sent by nasdaq.onmicrosoft.com. this show that nasdaq.onmicrosoft.com is trying to send the email as distill.io. this can’t be allowed and will result in dkim validation error.

can you share the full email header instead of a partial snippet? it can help clarify this further. thanks!

7

Hi I have a PDF with the whole email header. How can I send it to you?

8

you can share any file hosting service to share the url. or you can copy full headers as text and paste them in a code block like this in a reply:

```
<content>
```
10

thanks for sharing the link. it unfortunately asks for login credentials. you may need to open access to public or use dropbox/google drive like services.

11

I can’t do that I only have a PDF I can share. Can you send me your email I can can send it to?
Thankyou

12

upload it to file.io and share the link.

13

this website is restricted by my company so I can not access it.
Do you have an email I can send it to?

14 

Return-Path: <bounces+SRS=R1cVy=SO(at)nasdaq.onmicrosoftcom>

Received: from CH4PR04CU002.outbound.protection.outlookcom (mail-northcentralusazon11013042.outbound.protection.outlookcom [40.107.201.42])

by inbound-smtp.us-west-2.amazonawscom with SMTP id g78i5mt72n9auv22ualp3i1hiprtg4ctg1oe7n81

for jira(at)evestment.atlassiannet;

Tue, 19 Nov 2024 21:14:41 +0000 (UTC)

X-SES-Spam-Verdict: PASS

X-SES-Virus-Verdict: PASS

Received-SPF: pass (spfCheck: domain of nasdaq.onmicrosoftcom designates 40.107.201.42 as permitted sender) client-ip=40.107.201.42; envelope-from=bounces+SRS=R1cVy=SO(at)nasdaq.onmicrosoftcom; helo=CH4PR04CU002.outbound.protection.outlookcom;

Authentication-Results: amazonsescom;

spf=pass (spfCheck: domain of nasdaq.onmicrosoftcom designates 40.107.201.42 as permitted sender) client-ip=40.107.201.42; envelope-from=bounces+SRS=R1cVy=SO(at)nasdaq.onmicrosoftcom; helo=CH4PR04CU002.outbound.protection.outlookcom;

dkim=pass header.i=(at)nasdaq.onmicrosoftcom;

dkim=fail header.i=(at)distillio;

dkim=fail header.i=(at)amazonsescom;

dmarc=fail header.from=distillio;

X-SES-RECEIPT: AEFBQUFBQUFBQUFGaU9ER2pPM09ESDhtL0dKMks5Y3ZDNUt2OFdPK09ia3ZMQTlwdFhyeGwyOVRIRW1Dd3hNdHhIbnY5VHFJdjd2NHZpY1ZnRkN5QkhpWDlCUXlLYjR6YStJaUo1S3lKNEdtakVyRFJkRnpSZUxCNEpaMkZXZXhVQ3VsOC9ZSWxsUmsxc1hqbDc1aXlyTm1yTTBDMzVCUEhvS3AvbUFFejVWZENnbVVWZlhhbXZHTjhVSGhGQ1lGb3JaTXRHWGhoRkZVNllHT0lleklZbzI1YnVkaU0wOFY2dnYxY2JRNitmMmFNNGtIeHVJd2FsNGJwTUE3NEdadlF6anNkcXprdkZZWUxmVTAzUFMxNEJ5bXB5Qm1RZzdqd2VkNTBGcC9FWitGRUsvK0dZTWNOZjFmTHB0RXFZd2dWMlB2ZjhVdWVSaWRmYnZVcnRBdE9RajUrSnZnYWlXbXY=

X-SES-DKIM-SIGNATURE: a=rsa-sha256; q=dns/txt; b=UbgosEaeKCt2p0y6wLmN4q6elti/ZSqj1Nkej0p+/CayRl4b3CNi51vzLfdBcycVVasbpdc9la/dJlP4z1QJIzuJtwLstRfRW7Ya/PuHbLTsIrW/QJv0i566/vmwG3RzVCrg/txRajSD9Fmmi4Fet1cOQBZKEd8TXj+XFGXwZr8=; c=relaxed/simple; s=7v7vs6w47njt4pimodk5mmttbegzsi6n; d=amazonsescom; t=1732050882; v=1; bh=Liup2ge0HLRkMFQ4ta38UcsvjdNQIQ2Jw4uNEme6QSs=; h=From:To:Cc:Bcc:Subject:Date:Message-ID:MIME-Version:Content-Type:X-SES-RECEIPT;

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoftcom; cv=none;

b=mvHWi1OmNNwiyTLWKKq5mYQG4TRTytyGUdT4F2YdOpSwblrsekmXWRUgRmPp7k+/r6t5YqoMJcFoSYpJy9Y3r6G4LtxC4WFYz2EdO1roCyNuXNFB6F8b4obUKU7TzuUQogXmsRclwZ8qiyQ0NhPLUPZoJZww2Vl1wK41RoJ+tWFpB/t0jZeHryeTetSLHvEZxRrpc/S1gBUTYd02ij+h0Qzb5+jnvTIEKHqLa0GdteEN3ZZaL18h3e0882vWgZ6kFKJDSNzE0iLXxIOqgbqvv8GVEJdAktqgnLj+RGaGB9SZ7zEXy2nhAgd5/b59e+Idk3masd4KxRGLysHyIX+3PQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoftcom;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Liup2ge0HLRkMFQ4ta38UcsvjdNQIQ2Jw4uNEme6QSs=;

b=pO3cs/qE99PlSACyUgmdgtxIqCBz6CQ/evom+FCbmYxEDXP6qQyHFe57BqTeS5vPC6egDCr4Gak9po+0UTloDN/wtgaMsuz1XliD8ZSvAISz+xyaF/m8zDFGlRzh+EGWcSrkDq+UzBgdGDQUdvUNZNGRGWe0C2y2tE/FYSfaENzYwRlr48W5BIJ8xP6A/Jy9vqdcRHJWSnULZJNFKsm6B/jrf+w65ikZvIlUmKBOllUdmwO8K6z6PFU1WtNQFQKYCMl0r7YykC8fve5zTR2erVFH6DEksnDq8LHiQyHjSxToET2DJazyh5gjJs6ofMI6HBnmN/3FB4Z7tnlUwzw+Uw==

ARC-Authentication-Results: i=1; mx.microsoftcom 1; spf=softfail (sender ip

is 68.232.152.137) smtp.rcpttodomain=nasdaqcom

smtp.mailfrom=eu-central-1.email-notificationsdistillio; dmarc=fail (p=none

sp=none pct=100) action=none headerfrom=distillio; dkim=fail (body hash did

not verify) header.d=distillio; dkim=fail (body hash did not verify)

header.d=amazonsescom; arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=nasdaq.onmicrosoftcom; s=selector1-nasdaq-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=Liup2ge0HLRkMFQ4ta38UcsvjdNQIQ2Jw4uNEme6QSs=;

b=TjZVYo8TarbuAHJwJ1zYPdnZyhF3U4IYni/H1A91MlZ42N5mowUJbkYEoFcBABYhR/yPeLikQnjusO10dW1XOUbxs5GafRWf0QgD5GovbZ52Yjw/v1zPmtrTPIfIwgTQSTI+tgCbBS7VfBMOvQXsnoaROUbM7E2XQ0fyZv8Lmg4=

Resent-From: <evpmfc(at)nasdaqcom>

Received: from BL1PR13CA0084.namprd13.prod.outlookcom (2603:10b6:208:2b8::29)

by SJ2PR01MB8619.prod.exchangelabscom (2603:10b6:a03:53e::14) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.8182.14; Tue, 19 Nov 2024 21:14:33 +0000

Received: from BL02EPF0002992A.namprd02.prod.outlookcom

(2603:10b6:208:2b8:cafe::d7) by BL1PR13CA0084.outlook.office365com

(2603:10b6:208:2b8::29) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8182.13 via Frontend

Transport; Tue, 19 Nov 2024 21:14:32 +0000

Authentication-Results: spf=softfail (sender IP is 68.232.152.137)

smtp.mailfrom=eu-central-1.email-notifications.distillio; dkim=fail (body

hash did not verify) header.d=distillio;dmarc=fail action=none

headerfrom=distillio;

Received-SPF: SoftFail (protection.outlookcom: domain of transitioning

eu-central-1.email-notifications.distillio discourages use of 68.232.152.137

as permitted sender)

Received: from esa2.hc746-71.c3s2.iphmxcom (68.232.152.137) by

BL02EPF0002992A.mail.protection.outlookcom (10.167.249.55) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.8158.14 via Frontend Transport; Tue, 19 Nov 2024 21:14:32 +0000

X-CSE-ConnectionGUID: z6cC1mttQDGXcoCA3w186g==

X-CSE-MsgGUID: /PhaQl5iQpWLzgajiLlVjg==

Authentication-Results-Original: esa2.hc746-71.c3s2.iphmxcom; spf=Pass

smtp.mailfrom=010701934646e5b0-f3a24034-5034-4286-aa2a-5b1cb67e71b7-000000@eu-central-1.email-notifications.distillio;

spf=Pass smtp.helo=postmaster(at)b224-14.smtp-out.eu-central-1.amazonsescom

Received-SPF: Pass (esa2.hc746-71.c3s2.iphmxcom: domain of

010701934646e5b0-f3a24034-5034-4286-aa2a-5b1cb67e71b7-000000(at)eu-central-1.email-notifications.distillio

designates 69.169.224.14 as permitted sender)

identity=mailfrom; client-ip=69.169.224.14;

receiver=esa2.hc746-71.c3s2.iphmxcom;

envelope-from="010701934646e5b0-f3a24034-5034-4286-aa2a-5b1cb67e71b7-000000(at)eu-central-1.email-notifications.distillio";

x-sender="010701934646e5b0-f3a24034-5034-4286-aa2a-5b1cb67e71b7-000000(at)eu-central-1.email-notifications.distillio";

x-conformance=spf_only; x-record-type="v=spf1";

x-record-text="v=spf1 ip4:199.255.192.0/22

ip4:199.127.232.0/22 ip4:54.240.0.0/18 ip4:69.169.224.0/20

ip4:23.249.208.0/20 ip4:23.251.224.0/19 ip4:76.223.176.0/20

ip4:54.240.64.0/19 ip4:54.240.96.0/19 ip4:76.223.128.0/19

ip4:216.221.160.0/19 ip4:206.55.144.0/20 -all"

Received-SPF: Pass (esa2.hc746-71.c3s2.iphmxcom: domain of

postmaster(at)b224-14.smtp-out.eu-central-1.amazonsescom

designates 69.169.224.14 as permitted sender) identity=helo;

client-ip=69.169.224.14;

receiver=esa2.hc746-71.c3s2.iphmxcom;

envelope-from="010701934646e5b0-f3a24034-5034-4286-aa2a-5b1cb67e71b7-000000(at)eu-central-1.email-notifications.distillio";

x-sender="postmaster(at)b224-14.smtp-out.eu-central-1.amazonsescom";

x-conformance=spf_only; x-record-type="v=spf1";

x-record-text="v=spf1 ip4:69.169.224.14 -all"

IronPort-SDR: 673cffb8_dz6dEUUzzpdBAaCh0gIycZIYhAhqtRQPMm1FycDKBRjMKXQ

EVm9DmBKKL0SZQtwU1vYc1VKx7obvrCr/7M8tjg==

X-IronPort-RemoteIP: 69.169.224.14

X-IronPort-MID: 105062066

X-IronPort-Reputation: 2.6

X-IronPort-Listener: IncomingMail

X-IronPort-SenderGroup: ALLOWED_LIST

X-IronPort-MailFlowPolicy: $TRUSTED

X-ThreatScanner-Verdict: Negative

IronPort-Data: A9a23:hD9iQ6MxMLO/LuPvrR1tnsFynXyQoLVcMsEvi/4bfWQNrUokhWYPz

TRJXz2BafeNN2GkKoh3PIm/90gB68DUztIwSQZtpSBmQkwRlceUXt7xwmUcns+xwm8vaGo9s

q3yv/GZdJhcokf0/0nrav656yEhiclkf5KkYMbcICd9WAR4fykojBNnioYRj5VhxNO0GGthg

/uryyHkEAHjgmQc3l48sfrZ9Eo25aWq4lv0g3RlDRx1lA6G/5UqJM9HTU2BByOQapVZGOe8W

9HCwNmRlkvF/w0gA8+Sib3ydEsHWNb6ZWBiXVIPBsBOKjAbzsAD+v5T2Mg0MC+7uB3Q9zxF8

+ihgLTrIesf0gwgr8xGO/VQO3kW0aSrY9YrK1Dm2SCY5xSun3cBX5yCpaz5VGEV0r8fPI1Ay

RAXACJTZTvagv6q+Z6UeuJrre14M5C7YoxK7xmMzRmBZRonaZqZGfmPvIMexzIsnoVJAOqYa

tdcYjdpcA7JZ1gWfF4SAYA5mvylnT/0dDgwRFC9+/txujaCilYrjP60bLI5efTSLSlRth7B/

j2epjWiXk9GatHCw2LA/Cml3LOXxn++BdpJSPjkrK40xVSanGVWVRdPXlHl/vTm00ThHooHc

xRMogIjsO05+Uq3VND5GkT+rXuNvxpZXd1MEuM74wiRy63S+ECVB3MYTzpFLt0h3CMzbWVyi

wfXxYu3W1SDtpXScXKUz7PJrAqqBgwHImYAZAsAcwkKtoyLTIYb1U+WFIs7SsZZlObdFC/ox

j6BhC43nLkalIgA0KDTwLzcqzj2/MSMF1Jz/QDLRiei8x8/aZPgbIGu9ULS6bMZao+cR0uGu

mMJgI6V6+Vm4YyxeDKlUrsGN+is++q8HBLsillENsI+rmTz9Cv2FWxP2w1WKEBsO8cCXDbmZ

k7PpA9cjKO/2lP6M8ebhKrhVawXIbjcKDjzahzDgjNzjnVZflXdoGQ3OQiL2nz11U8xjecyJ

NKQfMCwF38eTP0hxT+/VeAbyrIwgCs5wAs/pKwXLTz3jNJyh1bPEd/p1WdiiMhkvctoRy2Io

r5i2zOikUk3bQEHSnC/HXQvBV4LN2MnIpv9ttZacOWOSiI/Rzp4WqKNn+N/IdM790iwqgsu1

iHlMqO/4Aqn7UAr1S3RApyeQOi/DM8lxZ7FFXNzYwzAN4cfjXaHt/pGLcZvJ9HLBcRqyPdmS

P9NZMiKSu9CUCrG8DkGJZj7p8oKSfhYrVLmAsZRWxBmJ8QIb1WRpLfMJ1KznAFQVXHfnZVl8

9WdOvbzG8Rrq/JKVpiOMKrHIpLYlSR1pd+eqGOZfoYPIxy0odYCxu6YpqZfHvzg4C7rnlOyv

zt6yz9BzQUUi9ZoqYmbtrPOtIqzDep1E2xTGmSRv/78NjDX8iDnicVMWfqBN2KVHm7l2rSQV

cMMxdHFMdoDgAlrtah4GO1V1q4Q3YbkiIJb6QVGJ0/1SWqXJIluGVS85vkXhJZxnudYnSCUR

nOw/sJrPOTVGcH9T38UCgkXTsWC8vA2mjP90+U5DW/57R9RpLO4QV52Oh2SqS1CLYlaNJEu7

vchtfU3tS28sAIhaeyehA9L+F2zPngLVZwmuKoFAYTttBEZ91FabbHYCQ70+JuqaegQAnI1I

zSRurXOt45cymXGbXA3M3rHhshZurgjpzFIywUkC2mSu9+YmMIy4gJdwQ43QitR0B9D9eB5Y

UpvFk9tIJSx7yVav9dCU0+sCjN+KkWgoGKp8GQwlUrdU0WMfU7OJjdkOe+yoWYow1gFdT1fp

Lyl2GLpVAjxR/7I3wwwZFVErsLyRtkg5yzAn8GaR/6+JacYWga8oKGSZjsvkSDFUOcRn0zMo

Nd48NlgMZPbMTEimIxlKo24+4lJdjW6Cj1je8xxxIIIAmDWRx+q0xesNU2aW51ANt7Kw2CCG

u1sIcN+VTWv8g3WvhYwWLwGE4VruMF4vdYpJ7fnHjcEgYTC9jFsnon0ygXjtVByQ9hrwNs2c

L3DUzekDGarpGB1nlXVp5JuIVuIYtgjZSz90tuq8e4PKYkxjeF0fWw20Zq2p3+wMjY72z6xo

yX4eL3z49157IZjja/AI/5mPBqlD8H3WMCj0hGBg/4XYfzhac7x5h4o8H/5NAFoDJ4tctVQl

5HWlfXo3UnA7Y0EY0qAl7avT6B2tNiPBsxJOcfKLV5fryuIeOnoxzAho2mYC5h4oOlx1/mdZ

TmTSZWPLIYOetJn2ndqRTBUEE8dB4TJf67Qn36BgMrWOCcN8z7sDY2BzmDoX1F5ZyVTGpzZC

y3IgdiMyO1cjrxxAE4jO6k7Lb5+eETuSIk3Re3X7DO4NFSlsnmGm7nllCcj1w31N2m5IJ7Ex

qzBFzfDd0WUmaDXzdtmnZR4kT8JAV1c3+QhXEIv1ORnqjK9DUsqAPs7I7wWLa1xygrw7cvKW

A/MSUB7DACncCViXTzuxv+7ByKzI7QqBu7oARAY43KrRjaHP9vZMblP9BZi0ixERjDz/eOsN

fQy02LVEjGu+75XHMIswPixh91298zF2lczpET3rOLqCT1HHL9R7mRTGQ5PZBz9C8uXyVfvI

FItTjt+WEuUVlP4LpZhX1V3Gxgpmizl4Bt1TCWIwffZ4566ys8ZwtLBGujD6J8xR+VUG6wvH

FTZH3Cs5UKS0Vwt4ZoZgcoj2/JIOKjaD/qEI7/GbixMuaOJs0AMHd4IxAgLR+EcoD9vKUvXz

GSQ0iJvFXa+CR5j3ZONwl804LN3aHUHCg/JgCPZpTPrlR8YzcDTSyO1zTDUeI3BlKz+g3p2G

DsiTl6dg1mzhgvWoTNTsvc6pFveJeozEXLCcD4jT7KssxOKZVJeKotc0BAB54oMyEFH+4RaT

7bO8tMf/In8YDiD8Tq5l/gkY59mjYw7JCI9t5HT8i5GEueO+r3cTo+HAZe7UQcYvj9uU3sjz

MD4SgLSGCDWgyZrTx1nvMzYa6Yk4ZSdiZYpuUk1V51CtpDNw7waoYazujO2citJSKy+BZiyX

G/Jxa2KATJsH0zmMfZRiQwe443n2+ZKrHb9t3TgL2eG9rOm/ltwSoBn0b4U3MyNTFxiNVw44

hf1f+vAldD86H+7uGT251mVjJ9ZIQKrw4sRdQLyL07oKgoTsYxuraGK6dGllAU8e4J5G8Fpw

2tzHkSwycrX6Hc+dBuReTJPczvMNT2UX4ymDsItSeGVidHEF8d6Y/MLqmBuZLNzqlEXjfpcK

wSwI7+K4uBRNecNe4G/6HSDcBZoB4bIdx61gc6rglkbCa/ADb6C/LbkGcGGh4m+JT+Qn2XG9

twssZZBoU2c9dUNzw58/ytzwfeR87AfoyvSICiRwQhriBzcPp3dmwqCA+98sJK+tCMy0nwW1

o2jaWEbz7g6K43WFG/VArHunhnzMvUdjtp0AkXIW/vCD7qunrTm3p6xceqklLmY5yeM0IRB3

krSQdJCD7JbDkwzUU/YeVEq+sxWzp2iFBq5GMAmY6qf3TJ+hEder8Zb+tjGDi3Htg1aOHB/D

YF6GwnkR3V7oKuU8+10vkGCHX2NrLUeuN0XoJLyHD5/pdEwED5mu+NFRrBvNYG0D4qN3qMc+

oqUsh4FuxLncRHxI0B6Meflcc5snSWSOJ6v8IsshSQ=

IronPort-HdrOrdr: A9a23:JFx8NKGs3kjCPwu1pLqE2MeALOsnbusQ8zAXPiFKJCC9F/by/f

xG885rsiMc9wxhIU3I9erwW5VprxvnlaKdorNxAV7aZmXbUTKTQ72KjrGSpQEIeReOktK1vJ

0IG5SWY+eAaGSS4/yKgjVQOuxP/DCPytHRudvj

X-Talos-CUID: =?us-ascii?q?9a23=3AOlazZWqAbOB0kljRyxpEomnmUdJ7eVaEyWvMGmO?=

=?us-ascii?q?XOW1uY5TOVgbApqwxxg=3D=3D?=

X-Talos-MUID: 9a23:mclr1wp2pO09Um03+pMez3ZaNM5R5/mvMVgytYcJssuFEShOOTjI2Q==

X-IronPort-AV: E=Sophos;i="6.12,166,1728932400";

d="scan'208,217";a="105062066"

X-Amp-Result: SKIPPED(no attachment in message)

X-Amp-File-Uploaded: False

Received: from b224-14.smtp-out.eu-central-1.amazonsescom ([69.169.224.14])

by esa2.hc746-71.c3s2.iphmxcom with ESMTP; 20 Nov 2024 02:14:31 +0500

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=4afvrrsliqm2gggekhj76p2ad2s4k6iq; d=distillio; t=1732050871;

h=Content-Type:List-Unsubscribe:List-Unsubscribe-Post:List-ID:List-Archive:From:To:Subject:Message-ID:Date:MIME-Version;

bh=mM3u7pL+xTus14S3my6RkafTGM7oMFx15+5wXfGKZCo=;

b=A+LBpB9kS0F8YuP6daD4DI2rHENJpkknl4RnV5boCq6h1VqN3vVD0X5+z5Ib6ZIz

bZzc8xeZ2WfFwTib9ovPmq8qfDeXqQlzGz1umYf+JE6RWsSRTn++tzKOoNdmLPWFuFF

j75wxFLTZibJ9eeL4o1HoV1DfswLFNPfqOnKkDdo=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=54ecsf3zk7z4mwxwwox7z7bg6e5gwjsz; d=amazonsescom; t=1732050871;

h=Content-Type:List-Unsubscribe:List-Unsubscribe-Post:List-ID:List-Archive:From:To:Subject:Message-ID:Date:MIME-Version:Feedback-ID;

bh=mM3u7pL+xTus14S3my6RkafTGM7oMFx15+5wXfGKZCo=;

b=g2cabnp/eJxYNf0zwbZltfcCoc9LCHZi95ArwGqwVsDPDn6FIo7qMYnt+5oGwdA4

8cE73aVmE3Gx3DYhrZ+rPEw3L+h17tG0S56Y3K+nZ7l96q6KYX2oC6NO6aHHJwpS9rI

7+sV0zgXQTZRI7uR6Sc13B19x8qffgp51d0JX6Fk=

Content-Type: multipart/alternative;

boundary="--_NmP-4997f3b561165b03-Part_1"

List-Unsubscribe: <monitor.distillio/api/v1/unsubscribe/email?tm =174PwbuAJctzHsxKoFou8o4rSIuSZ5BfuJLNCFU0MVWkew9XEp3C38CXUFiu25HDtDwrNPWTeQgDQHJM9kStbzuQiGTS3u2j3W6g&ts=Msx2CmKkVjObS9ON41qIcai98QUh6vIhHI5UC6uIoDSBqsSnLwkylB1wmKfEgJkQ99Mb59Y6JAhYSx2yf3EtVQ>

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Auto-Response-Suppress: All

List-ID: sieve-cda7e604-6bbd-11ef-bfce-d3118a142729

<sieve-cda7e604-6bbd-11ef-bfce-d3118a142729.distillio>

List-Archive: monitor.distillio/#/u/0/sieve/cda7e604-6bbd-11ef-bfce-d3118a142729/detail

From: Distill Alert <alert(at)distillio>

To: evpmfc(at)nasdaqcom

Subject: [Forward Calendar Daily ,Suri] Alert: DealStreetAsia | Private

Credit

Message-ID: <010701934646e5b0-f3a24034-5034-4286-aa2a-5b1cb67e71b7-000000(at)eu-central-1.amazonsescom>

Date: Tue, 19 Nov 2024 21:14:31 +0000

MIME-Version: 1.0

Feedback-ID: ::1.eu-central-1.tmQDkHdMbaHRVSLaHNudLLxLyJlOpbwS7E0Ins88Vbs=:AmazonSES

X-SES-Outgoing: 2024.11.19-69.169.224.14

Return-Path:

010701934646e5b0-f3a24034-5034-4286-aa2a-5b1cb67e71b7-000000(at)eu-central-1.email-notifications.distillio

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: d0b75e95-684a-45e3-8d2d-53fa2a6a513f:0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BL02EPF0002992A:EE_|SJ2PR01MB8619:EE_

X-MS-Office365-Filtering-Correlation-Id: d946942e-f813-4ab6-d6d9-08dd08df29d1

X-LD-Processed: d0b75e95-684a-45e3-8d2d-53fa2a6a513f,ExtAddr,ExtFwd

X-MS-Exchange-AtpMessageProperties: SA

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|69100299015|9140799003|4022899009|376014|34020700016|82310400026|32142699015|61400799027|48200799018|8096899003;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?bEdpV2pFNnVNdnY0ODhOalJ3KzZHeGozYzBqVWsxRHNPZUtJRzFaT2RMU2JK?=

=?utf-8?B?ZjlpYSs4ZHlIMitWWlVNY3NqcEpWeTExdFE3THpwbkRZV2YvNlVsKzRKUTR2?=

=?utf-8?B?Um9JRzNsSCtnSWNvRm85L0dOd2NzZ2QvcHhVUjNFV2R4bEFWSU04aDd4RG1E?=

=?utf-8?B?cFd0eDVUdm5ZckJSU3poUXRQQ1NSYXp4SWNtdUs1MS9aUnJVSytaSUR5b2lw?=

=?utf-8?B?QzZyQ3ZCd0NRTjdrcjkrdmMxaVg1ZlN0NGNWeVJpWjBMUXpWZEVqbVZqTzRJ?=

=?utf-8?B?OTVvdnl1b1NNQ2k4VXRYbm8rQjBFR0N0WE1adTdDd0RZVEdBN051QkRzV0RV?=

=?utf-8?B?MkFZcFlZSFdrKzlWR091bEZQYnM3TXlRaWV0dXJWeUJLbWtLVU91K3VIdjJS?=

=?utf-8?B?US82ZkNGa3NIaGliTDV2aUk0d0FvcXppVFgrSHI5UTBUR1lneWJZcmRrSVlt?=

=?utf-8?B?K2wxSm5vMjJMQzV1YmRrMmJxM1dzT2FPRG82dXU2WWhiWVRHczUvbG5YWTFp?=

=?utf-8?B?dFZMM0NyNS9MVVhGTjJmZ0pUZ0lpY3RVSkl3WXRwZ2M4VFdycGVVUi93U2NW?=

=?utf-8?B?MkwwemNMVkZzSkhmT3liT3FTb1UzeWF3VVFmZUV6Nm9wWVJNSWxnbHJlVENz?=

=?utf-8?B?ZVhQMzlIY2pwVTRTRloxOHovNHBCZmlyZ1k1TEVaelpoVWYyZE9ISktIZDk1?=

=?utf-8?B?OFNLWmNPbDRkOEVoYXd6dDZhTGdTRUtHeGRoWjg1MjVxS1BoYnFNa1lRUWxl?=

=?utf-8?B?NDd5cTJveWFVYmZBZVJrN3ZCWUY3cE9SWWo3Qjk2Q0VJR1RudmNreVkzZnY1?=

=?utf-8?B?WkltK1lqbGVYZUFORmNtUldzRDF5b1ZwZmx3MmxCREhReFlJdjBjWCtUT0lS?=

=?utf-8?B?MWdoSDFKTURLU1N3NFNQWUJsV0RxU3JSblFGcmZJdU5UQ095eVlhTis1d1ov?=

=?utf-8?B?eTMyNWpSdDhjZkR3bXROSU5RVWM0cHRiSHQzWVUvYjkwcHBlbXZVN3ROeERx?=

=?utf-8?B?QjRTMGJQWjhlWGVrOTZOZnFCRnNGdGJxV0RGZ2k3eXBIMUV5YStzSVhQMEpL?=

=?utf-8?B?SUNTSXJtL3AvTW9xVUMxdzlRdGJrVDJHMFVFazNIUmFHLzNzVjhHUHYwYUhh?=

=?utf-8?B?QktpbGlsclRDMkYxY1RvbGIxbFpjVDNrVG13OGV6eVJuS1JUZ0pCanh4QXBF?=

=?utf-8?B?NEpoNXpUdDJ2MFkyWk9Mb0FXQitNSlExSTN1ZmNBTDdrZVBRdkxuSEoxZjJK?=

=?utf-8?B?UFVmOGdFSmdZNlFQaE5YMmVMc25RbGtyUEpYNWZEdUFvM1FQZ3dDSzBHOStM?=

=?utf-8?B?WmZ0Uk1qYzh0MHFWeEQ3UFBnUURwL3UwVkZyNGw2Y1krb1cxSUN0VExwb1Yy?=

=?utf-8?B?WFRlOEluWG5MdTlmdVNLL25ibXZLcWpSODZWZFQ2VFdqSGJHK2E4UjdUZHlI?=

=?utf-8?B?dG03NWR2Z0ZmZHc1bmZWVjgyZyt5UUgyU1BFMHYxT3o1L2k5RTFieHpLNVZS?=

=?utf-8?B?OEhnREc0YytWbnlnK2hTRUgvM28yNXAvTUtSbHVic28zZndvSnltSHp6b3da?=

=?utf-8?B?N3FGdGxOVTRMM1dZeGVZWXpsVHpBaU95MUhWMUFGaHdiYlpYUE1sM0ZUdjds?=

=?utf-8?B?QWpTb0pkd0pFcUZZTFRWM2t4L1lscGZ2aW5LVzlTYkJJYVZYK1NvWXRlWTRO?=

=?utf-8?B?Z3NLOEdrZHBKSVZ6S2EvL2E4S3BlblprZHZ3YlJKRXBuc1ZPRGc0MXAraC9M?=

=?utf-8?B?REJvdkcvZVVUckk5eDFZUUU0c1lIVXZqS1BEZ0FCYzBrbllOSFh5Y0xxRG1Y?=

=?utf-8?B?M1ZEaWlKM1VyNjFhUFd4QT09?=

X-Forefront-Antispam-Report:

CIP:68.232.152.137;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:esa2.hc746-71.c3s2.iphmx.com;PTR:esa2.hc746-71.c3s2.iphmx.com;CAT:NONE;SFS:(13230040)(69100299015)(9140799003)(4022899009)(376014)(34020700016)(82310400026)(32142699015)(61400799027)(48200799018)(8096899003);DIR:OUT;SFP:1101;

X-ExternalRecipientOutboundConnectors: d0b75e95-684a-45e3-8d2d-53fa2a6a513f

X-MS-Exchange-ForwardingLoop:

evpmfc(at)nasdaqcom;d0b75e95-684a-45e3-8d2d-53fa2a6a513f

X-OriginatorOrg: nasdaq.onmicrosoftcom

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Nov 2024 21:14:32.6481

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: d946942e-f813-4ab6-d6d9-08dd08df29d1

X-MS-Exchange-CrossTenant-Id: d0b75e95-684a-45e3-8d2d-53fa2a6a513f

X-MS-Exchange-CrossTenant-AuthSource:

BL02EPF0002992A.namprd02.prod.outlookcom

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ2PR01MB8619

----_NmP-4997f3b561165b03-Part_1

MIME-Version: 1.0

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: base64

V0FSTklORyAtIEV4dGVybmFsIGVtYWlsOyBleGVyY2lzZSBjYXV0aW9uLgoKaHR0cHM6Ly93d3cu

ZGVhbHN0cmVldGFzaWEuY29tL3NlY3Rpb24vcHJpdmF0ZS1jcmVkaXQKIDxZb3U+Y2FuIHVuc3Vi

c2NyaWJlIGhlcmU8aHR0cHM6Ly9tb25pdG9yLmRpc3RpbGwuaW8vYXBwcy91bnN1YnNjcmliZS8/

dG09MTc0UHdidUFKY3R6SHN4S29Gb3U4bzRyU0l1U1o1QmZ1SkxOQ0ZVME1WV2tldzlYRXAzQzM4

Q1hVRml1MjVIRHREd3JOUFdUZVFnRFFISk05a1N0Ynp1UWlHVFMzdTJqM1c2ZyZhbXA7dHM9TXN4

MkNtS2tWak9iUzlPTjQxcUljYWk5OFFVaDZ2SWhISTVVQzZ1SW9EU0Jxc1NuTHdreWxCMXdtS2ZF

Z0prUTk5TWI1OVk2SkFoWVN4MnlmM0V0VlE+LjwvWW91Pg==

----_NmP-4997f3b561165b03-Part_1

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64
15

notice Resent-From header. this email is being resent/forwarded by evpmfc@nasdaq.com to jira@evestment.atlassian.net.. the problem is that evpmfc@nasdaq.com is sending the email at alert@distill.io. it is not permitted to do that, only distill can do that.

there are two options for you here:

  1. forward the email as evpmfc@nasdaq.com instead of alert@distill.io.
  2. or, add jira@evestment.atlassian.net to your distill account and send the alert emails directly to the final recipient.