Identity and content

Envelope sender

MAIL FROM

SMTP MAIL FROM identity used for transport and bounce handling.

01 · Definition

SMTP MAIL FROM identity used for transport and bounce handling.

02 · What it means during an investigation

SPF evaluates this domain, and DMARC may compare it with the visible From domain.

03 · Common confusion

It can differ legitimately from the visible From header.