Ookii Pup Studio
About & Support

Ōōkii Trail

Reads email headers in plain English
to show where a message came from.

Runs in this tab only.
Nothing is uploaded or stored.

Raw email headers

Paste the raw headers from an email, then read the trail. Not sure where to find them?

0 characters

↶ Nothing is saved.
Close the tab and it is gone.

What is Ōōkii Trail?

Trail reads the “envelope” of an email (its headers) and turns the technical stuff into a clear journey. See each server the message passed through, when it happened, and helpful notes along the way.

⤳

Is this email real?

See whether the address it claims to come from matches the systems that actually sent it.

◷

Where did my email go?

Follow every step a message took to reach the inbox, and how long each step held on to it.

◉

What should I look at?

Trail points out the details worth a second look, in plain words. It will never tell you a message is safe.

⌂

Private by design

Everything runs right here in your tab. Nothing is stored.

Where to find raw headers

Mail apps show a tidied summary. Trail needs the original source, which opens as plain text you can select and copy.

Where your mail app allows it, open the source without opening the message. Opening a suspicious message can load remote images, which tells the sender your address is live.

Gmail on the web
  1. Open the message.
  2. Click the three dot menu on the message itself, next to the reply arrow.
  3. Choose Show original.
  4. Click Copy to clipboard.
Outlook on the web, and new Outlook for Windows
  1. Open the message.
  2. Click the three dot menu on the message.
  3. Choose View, then View message source. Some versions label it View message details.
  4. Select everything and copy it.
Outlook for Windows, classic
  1. Double click the message.
  2. Go to File, then Properties.
  3. Copy everything in Internet headers.
Apple Mail on a Mac
  1. Select the message.
  2. View → Message → Raw Source, or Command + Option + U.
  3. Copy down to the first blank line.
Thunderbird
  1. Select the message.
  2. View → Message Source, or Ctrl+U.
  3. Copy the text.
Yahoo Mail
  1. Open the message.
  2. Click More options.
  3. Choose View Raw Message.
Proton Mail on the web
  1. Open the message.
  2. Click the three dot menu.
  3. Choose View headers.
A mail app that is not listed
  1. Look for source, original or raw.
  2. It usually sits in More, a three dot menu, or View.
  3. You want plain text starting with Received or Delivered-To.

Paste the whole thing. Trail stops reading at the first blank line, so the message body underneath is ignored. Steps last checked 10 August 2026.

Copy everything you see and paste it into Trail. We’ll handle the rest.
What Trail can tell you, and what it cannot OPEN THE EVIDENCE →
It can
Lay out the servers that handled the message and how long each handoff took, repeat the SPF, DKIM and DMARC results the receiving server recorded, and point at details that often differ on a message pretending to be from someone else.
It cannot
Re-run those checks. SPF and DKIM are verified at the moment of delivery, against DNS records that can change afterwards. Trail reads what the receiving server wrote down. It does no lookups of its own.
It will not
Tell you a message is safe. Headers can be forged up to the point where a server you trust takes over, a passing check only proves the sender controls a domain, and a domain registered yesterday can pass everything.
If something feels wrong
Do not reply, and do not use a link or phone number from the message. Reach the organisation through an address you already had.