How to View the Full Headers of an Email

Occasionally when investigating an issue, the IT Services team will require additional information about an email. Details such as the routing information of the message, the sender, recipient, date and subject are all carried within the email header and can be useful to know when dealing with certain issues (for more information about message headers visit http://whatismyipaddress.com/email-header). The information provided by the header is also helpful when dealing with 'phishing' attempts.

As you may have experienced, we have had an increased number of 'phishing' attempts on the university, specifically on the email system. They generally take the form of emails pretending to be from IT Services and attempting to get users' login information (username and password).

If you receive an email that is asking you to divulge your sign-in details relating to a University service you can help IT Services by reporting these. Please send them to phishing@it.ox.ac.uk. Please note that as well as the message body (both plain text and HTML components, if present), we require the 'full headers' of the email in order to trace the origins of a message. The full headers will include one or more lines starting "Received: ". Further documentation on reporting phishing attempts is available on the Phishing page.

Below are links to instructions on how to view the full headers on some popular email clients.

The following list of instructions (maintained by Google) lists several other clients including:

  • Gmail
  • Hotmail
  • Yahoo! Mail
  • Apple Mail
  • Outlook and Outlook Express
 Google list of message headers

 

Service area: 

Written by IT Services. Latest revision 4 February 2016