Skip to main content

Tagged: email-headers

Security
3 min read

How to Read Email Headers

A practical, field-by-field guide to reading raw email headers and knowing which lines to trust.

Published

emailemail-headersspf
Security
3 min read

How to Trace an Email Using Its Headers

Follow the Received chain from the first server to your mailbox, and learn what an email trace really shows.

Published

emailemail-headersreceived
Security
3 min read

How to Read Received Headers

Break a Received header into its clauses and follow a message hop by hop.

Published

emailreceivedemail-headers
Security
3 min read

What Is a Return-Path?

The Return-Path is the bounce address: here is how it differs from From and what it does and does not prove.

Published

emailreturn-pathspf
Security
3 min read

What Is a Message-ID?

The unique label every email carries, how threading uses it, and why it is not proof of origin.

Published

emailmessage-idemail-headers
Security
3 min read

How to Detect Email Header Spoofing

Technical indicators of spoofed headers, and why none of them is proof on its own.

Published

emailspoofingphishing
Security
3 min read

How to Investigate Suspicious Emails Using Headers

A calm, step-by-step workflow for reviewing a suspicious message's headers.

Published

emailphishingincident-response
Security
3 min read

What Does SPF PASS Mean?

What an SPF pass proves, what it does not, and how it fits with DKIM and DMARC.

Published

emailspfemail-authentication
Security
3 min read

What Does DKIM PASS Mean?

What a verified DKIM signature proves, how to read the tags, and what it cannot tell you.

Published

emaildkimemail-authentication
Security
3 min read

What Does DMARC PASS Mean?

DMARC ties SPF and DKIM to the visible From domain. Here is how a pass is decided.

Published

emaildmarcemail-authentication
Security
3 min read

What Does a Different Reply-To Address Mean?

Why Reply-To and From sometimes differ, when that is normal, and when to take a closer look.

Published

emailreply-tophishing