Email header analyzer
Paste the Authentication-Results header from a message you
received and see what actually passed.
Paste the Authentication-Results header from a message
you received.
Alignment is what fails
SPF and DKIM can both pass on a domain that is not the one in From, which is a DMARC failure however green the individual mechanisms look. That is why this
leads with the two alignment rows rather than the three results.
A mismatched envelope domain on its own is normal: most providers bounce through their own domain. It only matters when DKIM does not align either.
Generate the records to fix a failureStop reading headers by hand.
Mail you send through emails.sh is signed and aligned on your own domain, and every message keeps its headers in the log for when you do need to read one.
3,000 emails a month, free, no credit card.