Lightlines
By mukul975

analyzing-email-headers-for-phishing-investigation

mukul975594 installs

Trace suspicious emails and spot sender spoofing.

What it does

Investigates suspicious emails to trace their origin and identify sender spoofing through header and authentication analysis.

When to use it

Use when investigating suspected phishing, verifying sender authenticity, responding to a phishing incident, or tracing suspicious email delivery.

How to use it

Give it a suspicious email; it returns an analysis report covering the delivery path, authentication results, phishing indicators, and risk level.

What you provide

  • Your files

Uses

Good to know

  • cannot be undone: /cases/case-2024-001/email/attachments/
  • sends a credential to a server: YOUR_API_KEY; YOUR_VT_API_KEY

Latest review

What you need · 7

Requires Python with email parsing libraries; the workflow invokes python3.

Uses dig to query SPF, DKIM, and DMARC DNS records.


Access · 5

This skill

/cases/case-2024-001/email/attachments/

Write

Saves attachments and overwrites matching files (irreversible)

VirusTotal

Read

Checks domain and attachment reputation