MailDrop v1.0.1

A dedicated static_analysis.py module with a registry of inspectors. Every attachment runs through all of them, and nothing is ever executed; it's pure byte parsing.

Each check returns findings with a severity, the exact evidence observed, and a plain-language explanation.

Full Changelog: v1.0.0...v1.0.1

MailDrop v1.0.0

Upload an .eml or .msg file and get a clear, explained verdict without ever opening the email in a mail client.

What MailDrop analyzes

Authentication and origin

• SPF, DKIM and DMARC checks with the raw observed values and plain-language explanations of what a failure actually means
• Detection of email security gateways (Check Point, Proofpoint, Mimecast, Microsoft Safe Links, Barracuda) so that authentication failures caused by your own infrastructure are not mistaken for phishing, including original ARC results from before the gateway touched the message
• Full delivery route: every hop with timing and delays, raw Received headers in a readable table, and the geographic route plotted on a map

Attachments

• Checked against VirusTotal by hash - the file itself is never uploaded anywhere
• Clear verdicts with engine counts ("flagged by 5 of 73 engines"), malware signature names and first-seen dates

Links

• Extracted from both text and HTML bodies, with security-gateway rewrites unwrapped so you see the real destination
• Checked against VirusTotal, with lookalike-domain detection (paypa1 vs paypal), punycode warnings, and flags when a link's visible text does not match where it actually goes

Content

• Hidden tracking pixel detection, with a warning explaining exactly what the sender would learn if you opened the email
• A list of every remote resource the email would load and which hosts would be contacted
• A safe text-only preview of the message body - scripts, formatting, images and clickable links removed

Privacy by design

• Uploaded emails are processed entirely in memory and never stored
• IP geolocation runs against a local MaxMind GeoLite2 database no IP addresses from analyzed emails ever leave your server
• Attachments never leave your server either; only their hashes are looked up

Full Changelog: https://github.com/bjornhels/MailDrop/commits/v1.0.0