OK So last night, knowing we get a few in the early AM, I tested my own theory and put a custom filter for moving to the spam folder for the usual suspect domains being spoofed.
What happens on syncing this morning... Oh look. Moved 'Contact Gifts' without intervention at 827am.
Simple filter on user end, can't get it right server end for everyone. Go figure
Understand that, but if the user filter manages .tk, that means at the server end they are taking the view that every email from .tk is spam. Or am I missing something?
Except, my rules are based on the header 'Received' as slai.win and cloudreddit.info text being present. Not the TLD extension....
Not spam is a thumbs up icon on menu when message selected, or same location as 'mark as spam' but 'mark not spam' if I recall