email-headers

Email Header Forensics Lab is a desktop application for inspecting, generating, editing, and analyzing email headers in controlled environments for forensic analysis, security research, and authentication testing.

Python CLI that reads one .eml file and produces one JSON verdict. 46 explainable rules, weights calibrated on seven measured samples, standard library only. Reads the SPF/DKIM/DMARC verdicts already reported by the receiving mail system — it does not verify them. Measured results published in full, including the false negatives..

Email header analysis made easy!

This case study presents a social engineering attack using a shortened URL embedded in a phishing email. The email, crafted to impersonate internal IT support, urged the user to “update their credentials” by clicking a masked bit.ly link.

Inspect, generate, and test email headers in a desktop app for forensic review, delivery chain analysis, and authentication checks