---
title: "What Is ARC (Authenticated Received Chain)? How It Keeps DMARC Intact Through Forwarding | DMARC Report"
description: "Learn how ARC preserves email authentication results during forwarding, supports DMARC, and helps receivers evaluate SPF and DKIM failures."
image: "https://dmarcreport.com/og/blog/what-is-arc-keeps-dmarc-intact-through-email-forwarding-protection.png"
canonical: "https://dmarcreport.com/blog/what-is-arc-keeps-dmarc-intact-through-email-forwarding-protection/"
---

Quick Answer

ARC (Authenticated Received Chain) preserves email authentication results as messages pass through forwarding services and mailing lists. It helps receiving servers evaluate SPF, DKIM, and DMARC failures while using trusted ARC sealers to support email security decisions.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fwhat-is-arc-keeps-dmarc-intact-through-email-forwarding-protection%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=What%20Is%20ARC%20%28Authenticated%20Received%20Chain%29%3F%20How%20It%20Keeps%20DMARC%20Intact%20Through%20Forwarding&url=undefined%2Fblog%2Fwhat-is-arc-keeps-dmarc-intact-through-email-forwarding-protection%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fwhat-is-arc-keeps-dmarc-intact-through-email-forwarding-protection%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fwhat-is-arc-keeps-dmarc-intact-through-email-forwarding-protection%2F&title=What%20Is%20ARC%20%28Authenticated%20Received%20Chain%29%3F%20How%20It%20Keeps%20DMARC%20Intact%20Through%20Forwarding "Share on Reddit") [ ](mailto:?subject=What%20Is%20ARC%20%28Authenticated%20Received%20Chain%29%3F%20How%20It%20Keeps%20DMARC%20Intact%20Through%20Forwarding&body=Check out this article: undefined%2Fblog%2Fwhat-is-arc-keeps-dmarc-intact-through-email-forwarding-protection%2F "Share via Email") 

![ARC Email Authentication During Forwarding](https://media.mailhop.org/dmarcreport/dmarc-report-9713-1793253360966.jpg) 

## Try Our Free DMARC Checker

Validate your DMARC policy, check alignment settings, and verify reporting configuration.

[ Check DMARC Record → ](/tools/dmarc-checker/) 

## Why Email Forwarding Breaks DMARC: SPF, DKIM, and Alignment Challenges

Authenticated Received Chain (ARC) helps receiving mail servers evaluate messages when forwarding services, mailing lists, or [email security gateways](https://www.cloudflare.com/learning/email-security/secure-email-gateway-seg/) disrupt SPF, DKIM, or DMARC authentication. Defined in RFC 8617, ARC records authentication assessments made by participating mail handlers and protects those records with [cryptographic signatures](https://www.swisssign.com/en/blog/digital-signatures-cryptography.html).

ARC does not guarantee [DMARC alignment](https://dmarcreport.com/blog/best-tools-check-dmarc-alignment-across-multiple-domains-guide/) or inbox placement. Instead, it gives receiving systems additional evidence to consider when deciding how to handle a message that fails authentication after **legitimate intermediary processing**.

## SPF breaks when the sending path changes

SPF validates whether the connecting [mail server](https://www.activecampaign.com/glossary/mail-server) is authorized to send for a domain name. That works well when mail goes directly from `cohovineyard.com` to the receiver. But if the message is forwarded through `tailspintoys.com` or a vendor gateway, the final receiver sees the forwarding server’s IP address, not the original sender’s server.

As a result, SPF may fail because the forwarding service is not listed in the sender’s **SPF record**. Even if SPF passed at the first hop, the final email service may not know that. This is where the [Authenticated Received Chain](https://www.paubox.com/blog/improving-email-security-with-authenticated-received-chain-arc), or ARC, becomes valuable: ARC can preserve original authentication information and validation results as the message moves through forwarding chains.

### DKIM can fail after message modification

DKIM verifies a cryptographic signature over selected message headers and a canonicalized version of the message body. Forwarding alone does not necessarily break DKIM, but changes to [signed headers](https://www.pomerium.com/blog/signed-headers-a-safety-net-for-application-security) or the signed body content can cause verification to fail. For example, a mailing list that adds a footer or rewrites a subject line may invalidate a signature if the affected content was covered by that signature.

If both **SPF and DKIM** fail at the final destination, DMARC may also fail when neither authentication method produces a passing, aligned result. _ARC can provide evidence of authentication results recorded before the message was modified, subject to chain validation and the receiver’s trust policy._

## What ARC Is and How It Works: ARC-Seal, ARC-Message-Signature, and ARC-Authentication-Results

![Dmarc Lookup 9703](https://media.mailhop.org/dmarcreport/dmarc-lookup-9703-1793253394673.jpg)

Authenticated Received Chain (ARC) is an **email authentication protocol** standardized by the IETF in [RFC 8617](https://reviewmyemails.com/emailalmanac/industry-standards-and-best-practices/technical-standards-rfcs-protocols/rfc-8617-authenticated-received-chain). It complements SPF, DKIM, and DMARC by preserving signed authentication results at each trusted hop. _Each ARC sealer records, signs, and passes its results along, building a tamper-evident ARC chain._

### The three ARC header fields

- **ARC-Authentication-Results:** Records the authentication assessment made by the ARC sealer, including relevant SPF, DKIM, and DMARC results.
- **ARC-Message-Signature:** Cryptographically signs selected message headers and body content using the sealer’s signing domain.
- **ARC-Seal:** Signs the ARC set and links it to the chain’s previous sets, allowing receivers to validate the chain’s integrity.

Each ARC set contains these three headers and uses an instance number (`i=`) to identify its position in the chain. The signing domain appears in the `d=` tag. A valid ARC chain helps establish that the recorded assessments have not been altered undetectably; it does not independently prove that the original message or the sealer is trustworthy.

### Instance numbers and the ARC chain

Each ARC set has an instance number (`i=1`, `i=2`, etc.) that tracks each trusted sealer in the chain. The `d=` value identifies the signing domain, and **ARC validation checks** the chain’s integrity, seal validity, and sealer trust.

## How ARC Preserves Authentication Results Across Forwarding Chains

![Dmarc Check 5930](https://media.mailhop.org/dmarcreport/dmarc-check-5930-1793254169359.jpg)

### From first receiver to final mailbox

Consider this flow:

1. A sender at `cohovineyard.com` sends mail with valid SPF and DKIM.
2. A mailing list at `tailspintoys.com` receives the message and verifies SPF, DKIM, and policy alignment.
3. The mailing list modifies the subject and footer, causing message modification.
4. The mailing list acts as an ARC sealer and adds **ARC-Authentication-Results**, ARC-Message-Signature, and ARC-Seal.
5. The final receiver gets the forwarded message and performs ARC validation.

Without Authenticated Received Chain, the final receiver may see SPF fail and [DKIM](https://dmarcreport.com/what-is-dkim/) fail. With ARC, the receiver can inspect the ARC chain and see that a trusted ARC sealer recorded a pass result before forwarding. _If the ARC-Seal and ARC-Message-Signature verify, the receiver has stronger evidence that the message was legitimate before it was altered._

This does not guarantee delivery, but it gives modern email authentication systems more context. **Microsoft 365**, Microsoft Defender for Office 365, and other large email service platforms can combine ARC validation with anti-spam, anti-phishing, and [business email compromise](https://foleyhoag.com/news-and-insights/blogs/security-privacy-and-the-law/2026/april/business-email-compromises-current-legal-trends-and-key-strategies/) detection.

## ARC vs. DMARC: What ARC Does, What It Doesn’t Do, and Why Trust Still Matters

ARC and **policy-based authentication serve** different purposes. [DMARC](https://dmarcreport.com/) evaluates whether SPF or DKIM aligns with the visible From domain and tells receivers what to do when alignment fails. ARC, by contrast, records previous authentication checks and helps preserve validation results across forwarding chains.

![Dmarc Record 9733](https://media.mailhop.org/dmarcreport/dmarc-record-9733-1793254488501.jpg)

ARC does not automatically make a message safe. It does not override all security controls, and it does not mean every forwarded message should be delivered. _A malicious vendor could seal bad mail, or an attacker could abuse a compromised forwarding service. That is why a trusted ARC sealer matters._

### Trust decisions and abuse controls

A receiver should only rely on an ARC chain when the **ARC sealer** is trusted. A trusted ARC sealer is typically a reputable email service, security gateway, or partner domain with good operational controls. The receiver may evaluate the trusted signing domain, the `d= value`, historical reputation, and whether the ARC specification has been implemented correctly.

This trust model is critical for stopping [phishing attacks](https://www.bleepingcomputer.com/news/security/fbi-warns-of-phishing-attacks-impersonating-us-city-county-officials/) and business email compromise. If a message claims to come from an executive but the ARC-Authentication-Results show suspicious authentication failures, the receiver should not blindly accept it. If the ARC-Seal validates but the ARC sealer is unknown, the ARC chain may provide limited value.

In other words, ARC provides evidence, not a verdict. _The receiver still decides how much weight to give the ARC-Authentication-Results, ARC-Seal, and ARC-Message-Signature._

## Implementing ARC: Benefits, Limitations, and Best Practices for Senders, Receivers, and Forwarders

ARC is most beneficial for organizations that operate mailing lists, forwarding services, security gateways, or [multi-hop cloud](https://www.telehouse.net/knowledge-base/what-is-multi-cloud/) **email environments**. Senders benefit because legitimate forwarded mail is less likely to become rejected email. Forwarders benefit because they can preserve original authentication information. Receivers benefit because they gain more reliable context for authentication checks.

However, ARC has limitations. It cannot repair a malicious message. It cannot prove that the original sender intended every later change. _It also depends on receiver trust. If no trusted ARC sealer appears in the ARC chain, the final receiver may treat the ARC data cautiously._

![Dmarc Record Generator 5663](https://media.mailhop.org/dmarcreport/dmarc-record-generator-5663-1793254503146.jpg)

### Microsoft 365 and Exchange Online Implementation Notes

In Microsoft 365, administrators can configure trusted ARC sealers through the [Defender portal](https://menstechnologies.co.ke/articles/microsoft-defender-portal-overview) or [Exchange Online PowerShell](https://medium.com/@m365alikoc/exchange-online-admin-powershell-393c92da4282). These settings help determine whether authentication results from trusted forwarding services should influence email delivery decisions.

Administrators can use the `Set-ArcConfig` and `Get-ArcConfig` PowerShell commands to configure and review trusted ARC sealers. Appropriate **administrative permissions** are required.

Before adding a trusted ARC sealer, verify its signing domain and `d=` value to ensure the ARC signatures can be trusted.

### Best practices for ARC sealers and receivers

Organizations implementing Authenticated Received Chain should follow several best practices:

- **Seal only after performing authentication checks.** An ARC sealer should record accurate ARC-Authentication-Results, including SPF and DKIM outcomes.
- **Protect signing keys.** ARC-Message-Signature and ARC-Seal are only trustworthy if [private keys](https://www.techtarget.com/news/What-is-a-private-key/836758/) remain secure.
- **Use stable signing domains.** The signing domain should be controlled, monitored, and aligned with **organizational security policies**.
- **Monitor validation results.** Receivers should log ARC validation outcomes, pass result patterns, authentication failures, and suspicious changes in header fields.
- **Avoid over-trusting ARC.** A trusted ARC sealer should be reviewed like any other security vendor or email service dependency.
- **Inspect message headers during investigations.** Analysts should review ARC-Seal, ARC-Message-Signature, ARC-Authentication-Results, instance number, [SPF](https://dmarcreport.com/dmarc-fundamentals/what-is-dkim/), DKIM, and forwarding history.

For senders, ARC reduces false positives when legitimate messages pass through a forwarding service or mailing list. For forwarders, ARC demonstrates responsible handling of authentication results. For receivers, ARC adds valuable evidence to email authentication decisions while **preserving the ability** to quarantine, route to the [Junk Email folder](https://cybernews.com/news/microsofts-breach-notification-emails-end-up-in-spam-folder/), or reject suspicious mail.

![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) 

[ Brad Slavin ](/authors/brad-slavin/) 

General Manager

General Manager of DuoCircle. Product strategy and commercial lead for DMARC Report's 2,000+ customer base.

[LinkedIn Profile →](https://www.linkedin.com/in/bradslavin) 

## Take control of your DMARC reports

Turn raw XML into actionable dashboards. Start free - no credit card required.

[Start Free Trial](https://app.dmarcreport.com/signup?plan=free) [Check Your DMARC Record](/tools/dmarc-checker/) 

 AutoSPF 

Automatic SPF Flattening

Streamline your SPF record management, enable DMARC compliance, and improve your email deliverability by fixing the SPF 10-lookup limitation.

[ Fix My SPF Record! → ](https://autospf.com/pricing/?utm%5Fsource=dmarcreport&utm%5Fmedium=blog-sidebar&utm%5Fcampaign=autospf-cross-promo&utm%5Fcontent=fix-my-spf) [ See How It Works ](https://autospf.com/how-it-works/?utm%5Fsource=dmarcreport&utm%5Fmedium=blog-sidebar&utm%5Fcampaign=autospf-cross-promo&utm%5Fcontent=how-it-works) 

Share this article

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fdmarcreport.com%2Fblog%2Fwhat-is-arc-keeps-dmarc-intact-through-email-forwarding-protection%2F) [ ](https://twitter.com/intent/tweet?text=What%20Is%20ARC%20%28Authenticated%20Received%20Chain%29%3F%20How%20It%20Keeps%20DMARC%20Intact%20Through%20Forwarding&url=https%3A%2F%2Fdmarcreport.com%2Fblog%2Fwhat-is-arc-keeps-dmarc-intact-through-email-forwarding-protection%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fdmarcreport.com%2Fblog%2Fwhat-is-arc-keeps-dmarc-intact-through-email-forwarding-protection%2F) Copy 

Related Articles

- [ ![10 Reasons Why DKIM Fails](https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-alignment-6379.jpg)  10 Reasons Why DKIM Fails Intermediate ](/blog/10-reasons-why-dkim-fails/)
- [ ![cybersecurity news](https://media.mailhop.org/dmarcreport/dmarc-check-9711-1784029121308.jpg)  Accenture Sourcecode Breached, JADEPUFFER AI Ransomware, GodDamn Disables Windows Intermediate ](/blog/accenture-sourcecode-breached-jadepuffer-ai-ransomware-goddamn-disables-windows/)
- [ ![Cybersecurity Threats Weekly Roundup](https://media.mailhop.org/dmarcreport/dmarc-lookup-2281-1792584391252.jpg)  Ahold Delhaize Cyberattack, French Supermarkets Hacked, Spyware Through Ads Intermediate ](/blog/ahold-delhaize-cyberattack-french-supermarkets-hacked-spyware-through-ads/)
- [ ![AppRiver SPF Record](https://media.mailhop.org/dmarcreport/dmarc-check-7224-1785846270575.jpg)  AppRiver SPF Record: How To Set It Up (Owned By Zix) Intermediate ](/blog/appriver-spf-record-setup-guide-for-zix-email-security-platform/)

## Related Articles

[  Intermediate 4m  10 Reasons Why DKIM Fails  Apr 19, 2022 ](/blog/10-reasons-why-dkim-fails/)[  Intermediate  Accenture Sourcecode Breached, JADEPUFFER AI Ransomware, GodDamn Disables Windows  Jul 14, 2026 ](/blog/accenture-sourcecode-breached-jadepuffer-ai-ransomware-goddamn-disables-windows/)[  Intermediate  Ahold Delhaize Cyberattack, French Supermarkets Hacked, Spyware Through Ads  Oct 21, 2026 ](/blog/ahold-delhaize-cyberattack-french-supermarkets-hacked-spyware-through-ads/)[  Intermediate  AppRiver SPF Record: How To Set It Up (Owned By Zix)  Aug 4, 2026 ](/blog/appriver-spf-record-setup-guide-for-zix-email-security-platform/)

```json
{"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"473","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DMARC Report","url":"https://dmarcreport.com","description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","publisher":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"What Is ARC (Authenticated Received Chain)? How It Keeps DMARC Intact Through Forwarding","description":"Learn how ARC preserves email authentication results during forwarding, supports DMARC, and helps receivers evaluate SPF and DKIM failures.","url":"https://dmarcreport.com/blog/what-is-arc-keeps-dmarc-intact-through-email-forwarding-protection/","datePublished":"2026-10-29T00:00:00.000Z","dateModified":"2026-10-29T00:00:00.000Z","dateCreated":"2026-10-29T00:00:00.000Z","author":{"@type":"Person","@id":"https://dmarcreport.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://dmarcreport.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin is the General Manager of DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. He founded DuoCircle in 2014 and has led the company's growth to 5,000+ customers across its email security product family. Brad's focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"473","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://dmarcreport.com/blog/what-is-arc-keeps-dmarc-intact-through-email-forwarding-protection/"},"articleSection":"intermediate","keywords":"","image":{"@type":"ImageObject","url":"https://media.mailhop.org/dmarcreport/dmarc-report-9713-1793253360966.jpg","caption":"ARC Email Authentication During Forwarding"},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://dmarcreport.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://dmarcreport.com/blog/"},{"@type":"ListItem","position":3,"name":"Intermediate","item":"https://dmarcreport.com/intermediate/"},{"@type":"ListItem","position":4,"name":"What Is ARC (Authenticated Received Chain)? How It Keeps DMARC Intact Through Forwarding","item":"https://dmarcreport.com/blog/what-is-arc-keeps-dmarc-intact-through-email-forwarding-protection/"}]}
```