Email tool
Email Header Analyzer
Decode raw email headers to trace the delivery path and authentication results.
Email Header Analyzer
Frequently asked questions
How do I find the raw headers in my email client?
In Gmail: open the message, click the three-dot menu (More), and select Show original, then copy everything above the blank line that separates headers from the body. In Outlook: open the message, go to File > Properties, and copy the Internet headers field. In Apple Mail: open the message and choose View > Message > All Headers.
What does a failed SPF or DKIM result in the headers mean?
A failed authentication result does not guarantee the email is malicious, but it is a significant indicator. Legitimate email from your own domain should always pass SPF and DKIM. Failures on inbound mail from external senders may indicate spoofing, forwarding misconfiguration, or a sending server not listed in the sender's SPF record. Combine header analysis with context, sender reputation, content, and urgency, when evaluating suspicious messages.
Want this handled for you?
Elevate manages IT & security for regulated firms.
Related email tools
Phishing & Email Header Analyzer
Paste raw email headers to analyze authentication results (SPF/DKIM/DMARC) and spot phishing indicators.
DMARC / DKIM / SPF Checker
Check a domain's email authentication records across common DKIM selectors.
Email Authentication Coverage Score
Score a domain's SPF, DKIM, and DMARC coverage with honest, transparent methodology.
Email Deliverability Troubleshooter
Work through the most common reasons your email lands in spam: SPF, DKIM, DMARC, reverse DNS, blocklists, and content, with a fix for each.