sieve not working on mail in a box

Please forgive me if this is not the correct mailing list.
I tried days ago on the mail in a box forum but my question falls on 
deaf ears there.

I am mailing here in the tiny chance the issue is sieve related.

Please consider the following sieve filter

--------------
# rule:[discard SPAM to old leaked/compromised aliases]
if header :contains ["Received", "To"]
[
	"[email protected]"
	,"[email protected]"
]
{
	discard;
}
--------------

when testing it using the sieve filter found here
https://www.fastmail.com/cgi-bin/sievetest.pl

using the following headers


--------------
Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from box.mymiab.net ([127.0.0.1])
     by box.mymiab.net with LMTP id cJdVEakZ4WJEPwAAs4i54A
     for <[email protected]>; Wed, 27 Jul 2022 12:55:37 +0200
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
     box.mymiab.net
X-Spam-Flag: YES
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.3 required=5.0 
tests=DATE_IN_PAST_03_06,DMARC_NONE,
     FSL_BULK_SIG,HTML_IMAGE_RATIO_06,HTML_MESSAGE,MIME_HTML_ONLY,
     PYZOR_CHECK,SPF_FAIL,SPF_HELO_NEUTRAL autolearn=no 
autolearn_force=no
     version=3.4.2
X-Spam-Report:
     * 5.0 SPF_FAIL SPF check failed
     * 0.1 DMARC_NONE DMARC record not found
     * 1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
     * 0.0 SPF_HELO_NEUTRAL SPF: HELO does not match SPF record (neutral)
     * 0.0 HTML_MESSAGE BODY: HTML included in message
     * 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
     * 0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to 
image
     * area
     * 2.0 PYZOR_CHECK Listed in Pyzor
     * (https://pyzor.readthedocs.io/en/latest/)
     * 0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
X-Spam-Score: 8.3
X-Greylist: delayed 3601 seconds by postgrey-1.36 at box.mymiab.net; 
Wed, 27 Jul 2022 12:55:34 CEST
Authentication-Results: box.mymiab.net; dmarc=none (p=none dis=none) 
header.from=schnellerversand.com
Authentication-Results: box.mymiab.net; spf=fail 
[email protected]
Authentication-Results: box.mymiab.net; dkim=none;
     dkim-atps=neutral
Received: from skullandbonesskateboards.com (pp9p.com [69.12.64.248])
     by box.mymiab.net (Postfix) with ESMTP id F2FC640018
     for <[email protected]>; Wed, 27 Jul 2022 12:55:34 +0200 (CEST)
To: [email protected]
Subject: Jahrelange Garantie auf unser Set >> Zwei z. Preis von einem
Message-ID: <[email protected]>
Date: Wed, 27 Jul 2022 07:32:04 +0200
 From: "Deutsche Werkzeughandel" <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: 8bit
--------------



the result is

///
Adding ending newline to email
discarding message
///


Great, the filter looks like it is constructed correctly. So it should 
be working.

However the emails still end up either in my inbox, when not marked as 
SPAM. Or end up in my SPAM box. Both should not happen.

It there anything I can do to pinpoint where things are going wrong?

The reasoning for looking in both Received and To headers is because 
sometimes I am getting SPAM via a BCC. So then the To header does not 
contain anything related to the filter. But the Received always does so 
theoretically I should be able to only use the Received header but that 
also does not work ;(


Could anyone please advice me on how to proceed getting to the bottom of 
this?