How to read the result
Every mail server adds a Received line on top, so the real path runs bottom-up. We reverse it and compute the delay at each step. SPF, DKIM and DMARC results come from the Authentication-Results header written by the receiving server.
Why a message went to spam
- SPF fails: the sending server is not in the domain record. SPF and DMARC generator.
- DKIM is missing or does not verify. Check the domain DNS.
- The sender IP is blacklisted. Blacklist check.
- No reverse DNS (PTR) for the server IP, an internal host in the Message-ID, no List-Unsubscribe on bulk mail.
Domain-wide statistics
Headers show one message. To see everyone sending mail as your domain and how much fails, load DMARC reports into the DMARC report analyzer.