Header Analyzed
Email Subject: Thanks - Payment has been received. Analyze New Header

Copy/Paste Warning

Copy/Pasting a header works for most people, but sometimes it can cause problems with things like DKIM Validation. For the best results, use our Email Deliverability tool

Delivery Information

DMARC Compliant

Relay Information

Received Delay:	11 seconds

Hop	Delay	From		By	With	Time (UTC)
1	*	welcome.aexp.com 12.10.219.63	12.10.219.63	COL0-MC1-F10.Col0.hotmail.com	Microsoft SMTPSVC(6.0.3790.4900)	12/26/2012 11:26:41 PM
2	*	unknown 94.142.39.250	94.142.39.250	icp-osb-irony-in2.iinet.net.au	ESMTP	12/26/2012 11:26:40 PM
3	11 seconds	icp-osb-irony-in2.external.iinet.net.au 203.59.1.201	203.59.1.201	icp-osb-smtpdir1.iinet.net.au	ESMTP	12/26/2012 11:26:51 PM
4	0 seconds	unknown 10.2.56.1	10.2.56.1	icp-osb-smtp4.iinet.net.au	SMTP	12/26/2012 11:26:51 PM
5	0 seconds	network				12/26/2012 11:26:51 PM

SPF and DKIM Information

dmarc:welcome.aexp.comShow Solve Email Delivery Problems

dmarc

DMARC Record for welcome.aexp.com

No DMARC Record found for sub-domain.

Organization Domain of this sub-domain is: aexp.com Inbox Receivers will apply aexp.com DMARC record to mail sent from welcome.aexp.com

SP Tag '' found: Inbox Receivers will treat all mail sent from welcome.aexp.com that fails DMARC as suspicious.

DMARC Record for aexp.com (organizational domain)

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

Tag	TagValue	Name	Description
v	DMARC1	Version	Identifies the record retrieved as a DMARC record. It must be the first tag in the list.
p	reject	Policy	Policy to apply to email that fails the DMARC test. Valid values can be 'none', 'quarantine', or 'reject'.
fo	1	Forensic Reporting	Provides requested options for generation of failure reports. Valid values are any combination of characters '01ds' seperated by ':'.
rua	mailto:dmarc_rua@emaildefense.proofpoint.com	Receivers	Addresses to which aggregate feedback is to be sent. Comma separated plain-text list of DMARC URIs.
ruf	mailto:dmarc_ruf@emaildefense.proofpoint.com	Forensic Receivers	Addresses to which message-specific failure information is to be reported. Comma separated plain-text list of DMARC URIs.

	Test	Result
	DMARC Record Published	DMARC Record found
	DMARC Syntax Check	The record is valid
	DMARC Multiple Records	Multiple DMARC records corrected to a single record.
	DMARC Policy Not Enabled	DMARC Quarantine/Reject policy enabled
	DMARC External Validation	All external domains in your DMARC record are giving permission to send them DMARC reports.

spf:aexp.comShow Solve Email Delivery Problems

spf

v=spf1 ip4:139.71.1.75 ip4:139.71.1.76/30 ip4:139.71.1.80/30 ip4:139.71.1.84/31 ip4:139.71.1.86 ip4:139.71.95.75 ip4:139.71.95.76/30 ip4:139.71.95.80/30 ip4:139.71.95.84/31 ip4:139.71.95.86 exists:%{ir}.spf.%{d} include:spf_1.aexp.com -all

Prefix	Type	Value	PrefixDesc	Description
	v	spf1		The SPF record version
+	ip4	139.71.1.75	Pass	Match if IP is in the given range.
+	ip4	139.71.1.76/30	Pass	Match if IP is in the given range.
+	ip4	139.71.1.80/30	Pass	Match if IP is in the given range.
+	ip4	139.71.1.84/31	Pass	Match if IP is in the given range.
+	ip4	139.71.1.86	Pass	Match if IP is in the given range.
+	ip4	139.71.95.75	Pass	Match if IP is in the given range.
+	ip4	139.71.95.76/30	Pass	Match if IP is in the given range.
+	ip4	139.71.95.80/30	Pass	Match if IP is in the given range.
+	ip4	139.71.95.84/31	Pass	Match if IP is in the given range.
+	ip4	139.71.95.86	Pass	Match if IP is in the given range.
+	exists	%{ir}.spf.%{d}	Pass	This mechanism is used to construct an arbitrary host name that is used for a DNS 'A' record query.
+	include	spf_1.aexp.com	Pass	The specified domain is searched for an 'allow'.
-	all		Fail	Always matches. It goes at the end of your record.

	Test	Result
	SPF Record Published	SPF Record found
	SPF Record Deprecated	No deprecated records found
	SPF Multiple Records	Less than two records found
	SPF Alignment	Domain found in SPF
	SPF Contains characters after ALL	No items after 'ALL'.
	SPF Syntax Check	The record is valid
	SPF Included Lookups	Number of included lookups is OK
	SPF Recursive Loop	Nor Recursive Loops on Includes
	SPF Duplicate Include	No Duplicate Includes Found
	SPF Type PTR Check	No type PTR found
	SPF Void Lookups	Number of void lookups is OK
	SPF MX Resource Records	Number of MX Resource Records is OK
	SPF Record Null Value	No Null DNS Lookups found

Reported by a8-64.akam.net on 12/15/2025 at 4:40:26 PM (UTC 0), just for you. Transcript

Session Transcript:

- - - txt:aexp.com

1 l.gtld-servers.net 192.41.162.30 NON-AUTH 15 ms Received 6 Referrals , rcode=NO_ERROR aexp.com. 172800 IN NS a9-65.akam.net,aexp.com. 172800 IN NS a8-64.akam.net,aexp.com. 172800 IN NS a24-67.akam.net,aexp.com. 172800 IN NS a22-66.akam.net,aexp.com. 172800 IN NS a13-65.akam.net,aexp.com. 172800 IN NS a1-196.akam.net,
2 a8-64.akam.net 2.16.40.64 AUTH 31 ms Received 24 Answers , rcode=NO_ERROR aexp.com. 14400 IN TXT QuoVadis=73c84878-b0df-40a5-a2fd-5739b2ad910a,aexp.com. 14400 IN TXT google-site-verification=vZCivuLpbaGxny6-QKOlEvnV_gesHSwg74HRU4whmjc,aexp.com. 14400 IN TXT QuoVadis=d955c202-1c07-44b0-8b6d-4851efe428f9,aexp.com. 14400 IN TXT _dv6r2hvkei714rpcqhszfhii3imfiop,aexp.com. 14400 IN TXT docusign=b5b47af1-ac5d-46a0-931f-e440e5866375,aexp.com. 14400 IN TXT mixpanel-domain-verify=61462696-ffb7-42ef-9c03-f5c24ca7fa1b,aexp.com. 14400 IN TXT docusign=8258dfb5-5132-439f-aab2-750a555546a6,aexp.com. 14400 IN TXT v=spf1 ip4:139.71.1.75 ip4:139.71.1.76/30 ip4:139.71.1.80/30 ip4:139.71.1.84/31 ip4:139.71.1.86 ip4:139.71.95.75 ip4:139.71.95.76/30 ip4:139.71.95.80/30 ip4:139.71.95.84/31 ip4:139.71.95.86 exists:%{ir}.spf.%{d} include:spf_1.aexp.com -all,aexp.com. 14400 IN TXT 8fe98334-9f0d-44b7-a3f7-9b80ef3f3e0b,aexp.com. 14400 IN TXT stripe-verification=ab446969e63ef2ffadc98cf236a8464703b8795ed7f6e350694e0cae7c082fe5,aexp.com. 14400 IN TXT invisionapp-verification=0044595558400590737730654569393487696176,aexp.com. 14400 IN TXT postman-domain-verification=c863e9f93cbce699ab24dfc9cf293cc0a608fa22750ce0899d6f7a401cba16cc,aexp.com. 14400 IN TXT atlassian-domain-verification=olpcnEwZIB2SYPJZE8x12kWM90/R0Nv198d9lC1vwyVV1jKCllLxDvZNpaU3A9Kj,aexp.com. 14400 IN TXT apple-domain-verification=iamOpGGkQ7YmcAiD,aexp.com. 14400 IN TXT twilio-domain-verification=0cdf13e3ca27b1ba7b689daa6582c418,aexp.com. 14400 IN TXT mongodb-site-verification=YUjOvHYLVnr88MbEekAI5ipmRFk0x5ib,aexp.com. 14400 IN TXT openai-domain-verification=dv-JQhetZDGFvcnBRa7r5ahQKTS,aexp.com. 14400 IN TXT atlassian-domain-verification=1zvVhEXMq4KI59JCvaktYCtTcXGEqAhvs8aH0CbpEuiPQLTBHvJm3KzroT60wbMm,aexp.com. 14400 IN TXT cisco-ci-domain-verification=1aaf26d2d054a8ce00494289a531ad2b426961e1e53c9df1c028ef815ab8ffc5,aexp.com. 14400 IN TXT asv=d781676fb0a935927ffcd11bf6a2be5d,aexp.com. 14400 IN TXT apple-domain-verification=Ne3Zso7hkizqhkSpsi3VOxrxkptKljJESOo3PZSA_Q0,aexp.com. 14400 IN TXT mongodb-site-verification=8epRFV3RE46uZDThp0Pa75KSpBIoGpDU,aexp.com. 14400 IN TXT stripe-verification=3b57a009b3932b56d859d0636dd3658fe51bd4b8b237c60fddcff066091c8783,aexp.com. 14400 IN TXT applause-verification:118f81ec-08be-45bd-b13b-315782113d87,
Record returned is a RFC 4408 TXT record.
MAIL FROM: "American Express Online Services" OnlineServices@welcome.aexp.com
RETURN-PATH: sikkimesesh78@aexp.com

- - Ranges
- IP4
139.71.1.75
139.71.1.76/30
139.71.1.80/30
139.71.1.84/31
139.71.1.86
139.71.95.75
139.71.95.76/30
139.71.95.80/30
139.71.95.84/31
139.71.95.86
- TXT:spf_1.aexp.com
162.247.216.0/22
209.167.231.208/28
128.170.207.0/24
168.168.42.0/24
161.71.6.224/28
85.115.23.128/26
66.35.37.96/27
63.240.231.0/24
205.156.137.64/26
74.117.203.0/24

- - Subqueries
EXISTS:%{ir}.spf.%{d}
TXT:spf_1.aexp.com

- - Results
TXT:spf_1.aexp.com = Fail
TXT:aexp.com = Fail

- WebServer [spf:aexp.com] 234ms

RESTful API

Dkim Signature Error:
No DKIM-Signature header found - more info

Dkim Signature Error:
There must be at least one aligned DKIM-Signature for the message to be considered aligned. - more info

Headers Found

Header Name	Header Value
X-Account-Key	account2
X-UIDL	UID24657-1135925692
X-Mozilla-Status	0001
X-Mozilla-Status2	00000000
X-Mozilla-Keys
Return-Path	<sikkimesesh78@aexp.com>
Delivered-To	x@x
Message-ID	<HEALT302548992777140276667858531.AUSENIALPYR9406.ENG-ALERTS@welcome.aexp.com>
From	"American Express Online Services" <OnlineServices@welcome.aexp.com>
Reply-To	"American Express Online Services" <OnlineServices@americanexpress.com.au>
To	<x@x>
Subject	Thanks - Payment has been received.
Date	Wed, 26 Dec 2012 23:26:41 +0000
MIME-Version	1.0
Content-Type	multipart/mixed; boundary="----=a__lrzcyurmhg_98_95_53"

Received Header

From - Thu Dec 27 08:34:26 2012
X-Account-Key: account2
X-UIDL: UID24657-1135925692
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                                 
Return-Path: <sikkimesesh78@aexp.com>
Delivered-To: x@x
Received: (qmail 3371 invoked from network); 26 Dec 2012 23:26:51 -0000
Received: from unknown (HELO icp-osb-smtpdir1.iinet.net.au) ([10.2.56.1])
          (envelope-sender <sikkimesesh78@aexp.com>)
          by icp-osb-smtp4.iinet.net.au (qmail-ldap-1.03) with SMTP
          for <x@x>; 26 Dec 2012 23:26:51 -0000
Received: from icp-osb-irony-in2.external.iinet.net.au (icp-osb-irony-in2.external.iinet.net.au [203.59.1.201])
	by icp-osb-smtpdir1.iinet.net.au (Postfix) with ESMTP id CE4F2A0002
	for <x@x>; Wed, 26 Dec 2012 23:26:51 +0000 (UTC)
Received: from unknown (HELO mail.bristolamman.com) ([94.142.39.250])
  by icp-osb-irony-in2.iinet.net.au with ESMTP; 27 Dec 2012 07:26:40 +0800
Received: from welcome.aexp.com ([12.10.219.63]) by COL0-MC1-F10.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900); Wed, 26 Dec 2012 23:26:41 +0000
Message-ID: <HEALT302548992777140276667858531.AUSENIALPYR9406.ENG-ALERTS@welcome.aexp.com>
From: "American Express Online Services" <OnlineServices@welcome.aexp.com>
Reply-To: "American Express Online Services" <OnlineServices@americanexpress.com.au>
To: <x@x>
Subject: Thanks - Payment has been received.
Date: Wed, 26 Dec 2012 23:26:41 +0000
MIME-Version: 1.0
Content-Type: multipart/mixed;
  boundary="----=a__lrzcyurmhg_98_95_53"