Email authentication and flow
Review SPF, DKIM and DMARC results separately for each mail system that reports them, plus the Received hops shown in a test message.
Runs locally in this browser; the text is not uploaded. Paste headers from a test message you received. Remove addresses and identifiers first. Header values can be forged and are not proof of authentication.
This shows reported authentication tokens grouped by each Authentication-Results field and its authserv-id, plus a few reported domain/selector clues with mailbox local parts redacted. These clues are not an alignment verdict. It also shows an approximate, header-reported Received timeline. “Copy reviewed auth notes” includes each field's domain-shaped authserv-id marked unverified; other label shapes are omitted. It copies only the displayed authentication tokens and sanitized identity clues, keeps fields separate, and excludes raw headers and Received routes. Review the selected receiving system before using notes in a report. For bounded output it reviews up to 20 Authentication-Results fields and the 50 earliest Received hops. It does not verify signatures, establish which relays are trustworthy, prove delivery or diagnose the full mail path.