---
title: "How to Find and Interpret Outlook's SCL Score (Header Walkthrough)"
description: "Where to find Microsoft's Spam Confidence Level, what every value means, and how to turn a bad score into a specific fix."
url: https://warminboxes.com/blog/outlook-scl-score-cold-email
breadcrumb: "Home > Blog > How to Find and Interpret Outlook's SCL Score (Header Walkthrough)"
---
[WarmInboxes.com](https://warminboxes.com/)
 [Offer](https://warminboxes.com/offer)
 [Free Leads](https://warminboxes.com/leads)
 [Free Tools](https://warminboxes.com/deliverability-tools)
 [Blog](https://warminboxes.com/blog)
 [Reviews](https://warminboxes.com/reviews)

[Home](https://warminboxes.com/) › [Blog](https://warminboxes.com/blog) › How to Find and Interpret Outlook's SCL Score (Header Walkthrough)

[Back to Blog](https://warminboxes.com/blog)

Technical

5 min read

July 19, 2026

# How to Find and Interpret Outlook&#x27;s SCL Score (Cold Email Header Walkthrough)

Generic deliverability scores guess; Microsoft&#x27;s own headers tell you. The Spam Confidence Level (SCL) is the verdict Outlook stamped on your exact email, here&#x27;s where to find it, what every value means, the other Forefront fields worth reading, and how to turn a bad score into a specific fix.

[Huzayfa Majeed](https://warminboxes.com/authors/huzayfa-majeed)

Cold Email Expert · WarmInboxes

![Reading Outlook SCL score from email headers]()

## Quick Answer: Where and What

Open your test email in an Outlook mailbox → view the source/headers → find `X-Forefront-Antispam-Report` → read `SCL:`. **-1 bypassed · 0-1 inbox · 5-6 junk · 9 high-confidence spam.** Read `BCL` (bulk footprint) and Microsoft&#x27;s own `Authentication-Results` beside it, and you know whether to fix content, infrastructure, or auth, no third-party guessing score required.

## Why SCL Beats Every "Spam Score" Tool

Third-party spam checkers simulate a generic filter and hand you a guess. SCL is not a simulation, it&#x27;s the number Microsoft&#x27;s production filtering stack stamped on the exact message you sent, through your exact infrastructure, to a real tenant. When Outlook placement is your problem (the classic [Gmail-inbox-Outlook-junk split](https://warminboxes.com/blog/cold-email-outlook-spam-gmail-inbox)), this header is the ground truth every fix should be judged against: change one thing, resend, read the new SCL.

## Getting the Headers

- •**Have a Microsoft seed mailbox.** An Outlook.com address works; a Microsoft 365 mailbox on a real tenant is better, it&#x27;s what your B2B prospects actually use.
- •**Send a real test** from your actual sending inbox through your actual sequencer, a hand-sent test from the web UI doesn&#x27;t exercise the same path.
- •**Outlook web:** open the message (junk folder included) → ⋯ menu → View → *View message source*. **Desktop:** File → Properties → Internet headers.
- •**Paste the whole thing into our [Header Analyzer](https://warminboxes.com/header-analyzer)** for the authentication half (SPF/DKIM/DMARC verdicts, alignment, hops), then read the Forefront line yourself for the Microsoft-specific half below.

## Decoding X-Forefront-Antispam-Report

A real (abbreviated) example from a junked cold email
X-Forefront-Antispam-Report: CIP:209.85.220.41;CTRY:US;LANG:en;
 SCL:6;SRV:;IPV:NLI;SFV:SPM;PTR:mail-sor-f41.google.com;
 CAT:SPM;SFTY:;BCL:4;

- •**SCL:6**, filtered as spam → Junk folder. The headline verdict.
- •**SFV:SPM / CAT:SPM**, *why*-codes: SPM = content filter marked it spam. Other values you&#x27;ll meet: `SFV:BLK` (recipient blocked this sender), `SFV:SKS` (marked before content filtering, often a transport rule or reputation call), `CAT:BULK` (bulk classification), `CAT:PHSH` (phishing, a five-alarm fire for a cold emailer).
- •**BCL:4**, the source is developing a bulk footprint. SCL tells you about this email; BCL tells you about your infrastructure&#x27;s complaint history. High BCL doesn&#x27;t fix with copy edits, it fixes with volume discipline and suppression hygiene.
- •**CIP / PTR**, the connecting IP and its reverse DNS. `PTR:...google.com` on mail landing in a Microsoft tenant is the unmatched-route tell: Google infrastructure knocking on Microsoft&#x27;s door.
- •**IPV:NLI**, the IP wasn&#x27;t found on Microsoft&#x27;s reputation lists (neutral, normal for shared Google/Microsoft sending IPs).

## Reading Microsoft&#x27;s Authentication-Results Beside It

Same message source, one header up: Microsoft&#x27;s own `Authentication-Results`. Gmail passing your SPF/DKIM/DMARC is irrelevant here, Microsoft evaluates independently and is stricter about alignment. The high-value combination to check: **auth all passing + SCL 5-6** means your identity is proven and the content/behavior layer is the problem (tracking pixels, links, formatting, route mismatch, the fixes in the [Outlook guide](https://warminboxes.com/blog/cold-email-outlook-spam-gmail-inbox)). **Auth failing here while "passing" elsewhere** means fix alignment first, usually custom DKIM or the SPF include set, staged to enforcement per the [DMARC plan](https://warminboxes.com/blog/dmarc-none-quarantine-reject-cold-email).

**The workflow that makes SCL useful:** baseline it (send 3 tests, note SCL), change exactly one variable (kill the pixel, switch to a Microsoft sender, strip the link, plain-text the template), resend, re-read. SCL moving 6 → 1 on a single change is the cleanest causal evidence you&#x27;ll ever get in deliverability. Change five things at once and you&#x27;ve learned nothing.

## Tenant Overrides: Why Results Vary Between Companies

SCL thresholds and actions are tenant-configurable, admins reroute SCL 5 to quarantine, whitelist senders (that&#x27;s the `SCL:-1` you&#x27;ll occasionally see), or bolt Mimecast/Proofpoint in front so mail is pre-filtered before Forefront ever scores it. So treat any single tenant&#x27;s SCL as one data point, test against 2-3 different Microsoft mailboxes when it matters, and identify gateway-protected recipients up front with the [ESP Segmenter](https://warminboxes.com/esp-segmenter), those domains play by their gateway&#x27;s rules, not Forefront&#x27;s.

## Frequently Asked Questions

### What is the SCL score in Outlook?

SCL (Spam Confidence Level) is the 0-9 score Microsoft&#x27;s filtering stack assigns every inbound message, recorded in the X-Forefront-Antispam-Report header. It&#x27;s the actual verdict on your actual email, -1 means a rule bypassed filtering, 0-1 means clean, 5-6 means filtered to junk, 9 means high-confidence spam. Unlike third-party &#x27;spam scores,&#x27; this is what Microsoft itself decided.

### How do I find the SCL score of my email?

Send a test to an Outlook/Microsoft 365 mailbox you control. In Outlook desktop: open the message → File → Properties → read &#x27;Internet headers.&#x27; In Outlook web: open message → ⋯ → View → View message source. Search for &#x27;SCL:&#x27; inside the X-Forefront-Antispam-Report header. Check the junk folder too, junked mail carries the most useful scores.

### What SCL score sends email to junk?

By default, SCL 5-6 goes to the Junk folder and SCL 9 is high-confidence spam (often quarantined). SCL 0-1 delivers normally. You&#x27;ll rarely see 2-4 in practice. Note that tenant admins can override these thresholds, so identical mail can junk at one company and inbox at another.

### What does BCL mean next to SCL?

BCL is the Bulk Complaint Level (0-9): how much the sending source looks like a bulk mailer based on complaint history. BCL 0-3 is fine; 4-7 is bulk-ish and junks for many tenants; 8-9 is complaint-heavy bulk. High BCL with modest SCL means your problem is the sending source&#x27;s bulk footprint, infrastructure and volume, rather than this email&#x27;s content.

### Why is my SCL high even though SPF, DKIM and DMARC pass?

Because authentication and content scoring are separate layers. Auth proves who you are; SCL judges what you sent and how your source behaves. Passing auth with SCL 5+ means the content/behavior layer flagged you, usually tracking pixels, links, marketing formatting, or an unmatched Google→Microsoft route. That combination is the classic cold email signature, and it&#x27;s fixable.

## Get FREE .com Domains

Prewarmed Inboxes So You Can Send Cold Emails Today
[Get Prewarmed & Fresh Inboxes](https://app.warminboxes.com)

## Related Articles

[Deliverability

### Why Cold Emails Land in Outlook Spam but Gmail Inbox

6 min read](https://warminboxes.com/blog/cold-email-outlook-spam-gmail-inbox)[Technical

### DMARC: None vs Quarantine vs Reject

5 min read](https://warminboxes.com/blog/dmarc-none-quarantine-reject-cold-email)[Deliverability

### Should You Disable Open Tracking?

5 min read](https://warminboxes.com/blog/cold-email-open-tracking)

## Prewarmed & Fresh Inboxes

Google, Microsoft 365 and Azure inboxes with free prewarmed domains and DNS configured before you log in. Prewarmed inboxes send the day they land; every order is delivered within 48 to 72 hours.

 [Get Prewarmed & Fresh Inboxes](https://app.warminboxes.com)

More from WarmInboxes

[Google Workspace Inboxes](https://warminboxes.com/google-workspace-inboxes)[Microsoft 365 Inboxes](https://warminboxes.com/microsoft-365-inboxes)[Azure Inboxes](https://warminboxes.com/azure-inboxes)[Deliverability](https://warminboxes.com/deliverability)[Terms of Service](https://warminboxes.com/terms)[Privacy Policy](https://warminboxes.com/privacy)[Developers](https://warminboxes.com/developers)[For AI Agents](https://warminboxes.com/for-ai)[Inboxes for Instantly](https://warminboxes.com/instantly-inboxes)[Inboxes for PlusVibe](https://warminboxes.com/plusvibe-inboxes)[Inboxes for Smartlead](https://warminboxes.com/smartlead-inboxes)[Inboxes for EmailBison](https://warminboxes.com/emailbison-inboxes)[Inboxes for Apollo](https://warminboxes.com/apollo-inboxes)[Inboxes for ManyReach](https://warminboxes.com/manyreach-inboxes)[Inboxes for Claude](https://warminboxes.com/claude-inboxes)[Inboxes for ChatGPT](https://warminboxes.com/chatgpt-inboxes)[Inboxes for Grok](https://warminboxes.com/grok-inboxes)[About](https://warminboxes.com/about)[Huzayfa Majeed](https://warminboxes.com/authors/huzayfa-majeed)[How it works](https://warminboxes.com/how-it-works)[Deliverability Hub](https://warminboxes.com/deliverability-hub)[Studies](https://warminboxes.com/research)[Placement Test Log](https://warminboxes.com/research/inbox-placement-log)[Top-Level Domains](https://warminboxes.com/research/google-sender-reputation)[SURBL Study](https://warminboxes.com/research/surbl-blocklist-study)[Playbooks](https://warminboxes.com/playbooks)[Calculator](https://warminboxes.com/calculator)[Consultation](https://warminboxes.com/consultation)[Affiliate Program](https://warminboxes.com/affiliate)[Tool demos](https://warminboxes.com/videos)[Testimonials](https://warminboxes.com/testimonials)[Reddit Reviews](https://warminboxes.com/reddit)[Prewarmed on Reddit](https://warminboxes.com/prewarmed/reddit)[Inboxes on Reddit](https://warminboxes.com/inboxes/reddit)[Revenue Boost](https://warminboxes.com/revenueboost)[MailFirst](https://warminboxes.com/mailfirst)[Agency Advanta](https://warminboxes.com/agencyadvanta)[Liquid Syntax Guide](https://warminboxes.com/playbooks/liquid-syntax-guide)[The SPAM Plague](https://warminboxes.com/playbooks/spam-plague-segmentation-playbook)[Inboxing Playbook](https://warminboxes.com/inboxing-playbook)[Data Ops Hub](https://warminboxes.com/hub/data-ops)[Agency Hub](https://warminboxes.com/hub/cold-email-agency)

Contact

[WhatsApp +1 904 736 2539](https://api.whatsapp.com/send/?phone=19047362539&text=Hey%2C%20I%20need%20WarmInboxes&type=phone_number&app_absent=0)
 ·
 [support@warminboxes.com](mailto:support@warminboxes.com)
 ·
 Pembroke Pines, FL 33024, USA
