What this reads
Evidence, not a verdict.
- DKIM — verified against the selector's published DNS record.
- Authentication-Results — the SPF, DKIM and DMARC verdicts the receiving server recorded.
- Alignment — whether Return-Path and the DKIM signing domain share the From domain's organizational domain.
- Structure — HTML-only, image-only, link-heavy, scripts, forms, shorteners, attachments.
- Hygiene — Date, Message-ID, List-Unsubscribe, and subject shape.