01
Copy the original headers
Use Gmail’s Show original or Outlook’s Internet headers view. You can also choose a saved .eml file.
Privacy & Security Tools
Email Header Viewer
Read a message’s Received route and recorded SPF, DKIM, and DMARC results locally, without uploading the header.
0 / 250,000 characters
Data handling
Storage and export controls
- Retention
- The tool's working state is kept only while this page is open. Inputs and results are not saved to persistent storage by Got A Tool.
- Export
- The tool may prepare a result after you run it. It downloads or copies it only when you choose that action.
Advertising and analytics are separate site services. We do not send selected tool input to them. Read the Privacy Policy for details.
How it works
Read an email header without uploading it
02
Review the supplied route
Read Received lines from the earliest listed hop toward the recipient, without assuming every line is trustworthy.
03
Check recorded outcomes
Compare the SPF, DKIM, and DMARC results reported by the receiving mail system.
Important limit
A readable header is not proof that a message is safe.
This tool does not make a DNS request, validate a DKIM signature, or establish whether a server in a Received chain is trustworthy. It only makes the supplied header text easier to review. Treat a pass or fail shown here as a recorded claim, then use your organization’s security process for a real phishing investigation.
Body ignored
The parser stops at the first empty line, before the message body.
No network check
The page makes no DNS, mailbox, or reputation query.
Folded fields
Continued header lines are joined before they are read.
Route order
Received fields are displayed earliest to latest for readability.
FAQ
Common questions
Does this prove where an email came from?
No. Received lines can be forged before a message reaches a trusted mail system. The page shows the supplied text but does not establish trust.
Does this verify DKIM or DMARC?
No. It displays the recipient server’s recorded Authentication-Results values. It does not fetch DNS or validate cryptographic signatures.
Will it read the message body?
No. The parser ignores content after the first blank line in a pasted header or EML file.
Keep working
Related tools
Email Syntax Checker
Check an email list for clear syntax errors and exact duplicates locally, without claiming inbox verification.
Open tool →Secret Scanner & Redactor
Find known API keys, tokens, webhooks, database passwords, and Bearer headers before sharing text.
Open tool →HAR Privacy Sanitizer
Remove supported secrets from HAR headers, URL parameters, JSON, and form bodies without silently changing unknown body formats.
Open tool →URL Parser & Query Inspector
Inspect an absolute URL, its encoded parts, and repeated query parameters locally without making a request.
Open tool →