"Mail Header Detective" is a comprehensive tool developed using the Flask framework, specifically designed to parse and interpret email headers into a format that's easily understood by humans. Leveraging the power of this tool, users can unlock valuable insights from raw email data. Key features of the MHD include:

  • Hop Delay Identification: The tool analyzes the timestamp data in the email header to compute the delay between each hop. This can help in identifying any abnormal delays or potential issues in the email delivery process.
  • Email Source Identification: One of the key features of this tool is its ability to trace back the origin of an email. By carefully analyzing the "Received" fields in the email header, the tool is able to identify the IP address and consequently the server from which the email originated.
  • Country Identification: Building upon the source identification feature, the tool can also pinpoint the geographical location of the email's origin by mapping the IP address to its country. This can be particularly useful in identifying spam emails or in digital forensics investigations.
  • API Integrations: MHD can identify IP Adresses, Email adresses and URL's on the e-mail metadata and send them to services such as VirusTotal, Hunter.io, Maltiverse, CheckPhish, Pishtank and others, for a detailed analysis.

In essence, the "Mail Header Detective" is a powerful tool that can aid in dissecting complex email headers, providing useful insights and valuable information about the email's journey from the sender to the recipient.