Kiwinove IT Tools
Behind the email.
Before you trust it.
Make sense of email headers, reported authentication and the path a message took. Clear explanations, without uploading your email.
Read between the headers
Paste the headers.
Keep the email private.
Use the original message headers, not the email body. Headers can include names, addresses, subject lines and IP addresses.
Where do I find the headers?
Gmail: open the message, use its three-dot menu and choose “Show original”. Copy the header block above the first blank line.
Outlook: look for “View message details”, “View source” or, in classic desktop Outlook, File → Properties → Internet headers. Options vary by version.
Paste everything from the first header to the first blank line. If a full message is pasted, text after that separator is ignored.
Not a safety certificate. A forged header can claim “pass”. Compare the authentication service with your actual receiving mail provider. This tool does not validate signatures or inspect attachments and links.
Header interpretation
Your email, explained.
Message details
Reported authentication
These are claims in the pasted headers, not tests performed by Kiwinove. Each source is shown separately; ARC results are not validated.
Delivery route
Oldest listed hop first (bottom-to-top in the original headers). Times are shown in UTC when readable. Entries and timestamps may be incomplete or forged.
Reference: RFC 8601 and RFC 5322. This report is not a verdict that a message is safe or malicious.
Free Kiwinove IT Tools
Email Header Analyzer: practical help, clear next steps.
Read the technical headers behind an email to understand reported authentication and delivery. Analysis happens in your browser without uploading the pasted headers.
How to use this tool
- Use your email application’s view-source or message-header option to copy the original headers.
- Paste only the headers into the analyzer and run the analysis.
- Review authentication reports and delivery hops. Download the report if you need help interpreting it.
Common questions
Can a header analysis prove an email is genuine?
No. Headers can include untrusted or forged claims. Even successful authentication does not make a message, link or attachment safe. Verify unexpected requests through a separate trusted channel.
Should I paste the whole message?
Use the original headers, not the message body. Headers can still contain personal addresses, IPs and internal routing information, so share exported reports carefully.